Privacy Policy

Welcome to Swastik Solutions (Swastik Solutions, "we," "our," or "us"). We operate SwastikOne, a web-based software application that supports data integration between Tally/TallyPrime and web applications and may also provide software integration, customization, automation and related technology services.

This Privacy Policy explains how we collect, use, disclose, store and protect information when you access or use SwastikOne, our website, applications, APIs, integrations and related services (collectively, the "Services"). By using the Services, you acknowledge this Privacy Policy. If you do not agree, please discontinue use of the Services.

1. Legal Framework

We seek to handle personal data in accordance with applicable Indian laws and regulations, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, as and when applicable to the relevant processing activity, together with rules, regulations and directions applicable to our Services.

The specific obligations applicable to a particular User or processing activity may depend on the nature of the data, the User's role, the applicable service and the law in force from time to time.

2. Information We Collect

2.1 Account and Business Information: name, email address, telephone number, organization/business name, designation, billing information and other information provided during onboarding or support.

2.2 Authentication and Technical Information: login credentials or authentication identifiers, IP address, browser and device information, operating system, timestamps, logs, diagnostic information and security-related events.

2.3 Usage Information: pages or features used, access times, actions within the application, error logs and aggregated usage analytics.

2.4 Integration and Business Data: depending on the configuration, SwastikOne may access or process data from Tally/TallyPrime or other connected systems, such as ledgers, customers, suppliers, stock, invoices, transactions, accounting records, master data and related business information. The exact data processed depends on the integration configured by the customer.

2.5 Support and Communication Data: information contained in support requests, emails, calls, implementation discussions or other communications with us.

2.6 Payment Information: payment and billing information required to process transactions. Where payment processing is handled by a third-party payment provider, that provider may process payment details under its own privacy terms.

3. How We Use Information

We may use information to provide, operate, configure and maintain SwastikOne; perform Tally/TallyPrime and other integrations; authenticate users; process subscriptions and payments; provide support; diagnose errors; secure the Services; prevent fraud and unauthorized access; communicate service-related information; comply with legal obligations; and improve our products and services.

We may also use aggregated or de-identified information for analytics, performance monitoring and product improvement where such information does not identify an individual.

4. Customer-Controlled Business Data

Where a customer connects its Tally/TallyPrime or other business system to SwastikOne, the customer generally determines what business data is made available to the integration and for what business purpose.

Customers are responsible for ensuring that they have the necessary authority, notices, permissions and lawful basis to provide business or personal data to Swastik Solutions for processing through the Services.

We do not claim ownership of customer business data merely because it is processed through SwastikOne.

5. Data Sharing and Third Parties

We do not sell personal data as a commercial data product. We may share or permit access to information where reasonably necessary to provide the Services, including with:

• Cloud hosting, storage, infrastructure and security providers.
• Payment processors and financial service providers.
• Tally/TallyPrime or other software/API providers, where required to perform an authorized integration.
• Professional advisers, auditors or service providers who are bound by appropriate confidentiality obligations.
• Government authorities, courts, regulators or law-enforcement agencies where disclosure is required or permitted by law.

Third-party services remain subject to their own terms and privacy policies. We do not control the privacy practices of third-party services.

6. Data Security

We use reasonable technical and organizational safeguards appropriate to the Services, which may include access controls, authentication, logging, backups, encryption or secure transmission mechanisms, monitoring and administrative controls.

No method of transmission or storage is completely secure. We cannot guarantee absolute security and are not responsible for security failures caused by the customer's devices, credentials, configurations, third-party services or other matters outside our reasonable control.

7. Data Retention and Deletion

We retain information for as long as reasonably necessary to provide the Services, meet contractual and business requirements, maintain security, resolve disputes, enforce agreements, and comply with legal or regulatory obligations.

Following termination or a valid deletion request, customer data may be deleted, returned or retained for a limited period in accordance with the applicable commercial agreement, backup cycles and legal requirements.

Where a customer requires a specific data retention or deletion arrangement, the parties may document it in the applicable service agreement.

8. Data Transfers and Hosting

The Services may use cloud infrastructure and service providers located in India or other jurisdictions. Where information is transferred or processed outside India, we will take reasonable steps to do so in accordance with applicable law and contractual requirements.

The actual location of hosting and processing may vary depending on the infrastructure and service configuration applicable to the customer.

9. Cookies and Similar Technologies

Our website and applications may use cookies, logs and similar technologies for authentication, security, preferences, analytics and performance. Users can manage certain cookie preferences through their browser or application settings, although disabling some technologies may affect functionality.

10. Your Rights and Choices

Subject to applicable law and the role in which we process the information, individuals may have rights to request access, correction, deletion, withdrawal of consent, or other rights available under applicable data protection law.

Where we process information on behalf of a business customer, requests concerning that customer's end-user or employee data may need to be directed to the relevant customer, subject to applicable law and contractual arrangements.

11. Children's Privacy

The Services are primarily intended for businesses and users who are legally able to enter into applicable agreements. We do not knowingly collect personal data directly from children through the Services. If we become aware that such data has been collected contrary to applicable law, we will take reasonable steps to address it.

12. Business Transfers

If Swastik Solutions undergoes a restructuring, merger, acquisition, transfer of business or sale of assets, information may be transferred as part of that transaction, subject to applicable law and appropriate confidentiality and data-protection measures.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on the relevant website or application and the 'Last Updated' date will be revised. Where required by law, we will provide additional notice or obtain consent.

14. Privacy Contact / Grievance Contact

Swastik Solutions

92/3, 3rd Main Rd, Jagruthi Colony, BOB Colony, JP Nagar 7th Phase, J. P. Nagar, Bengaluru, Karnataka 560078, India

Email: info@swastikone.com

Phone: +91 99459 47474

Website: https://swastiksolution.in