This policy explains what personal data Closio handles, why, and the choices you have. It is written for India's Digital Personal Data Protection Act, 2023.
1. Who we are
Closio (closio.cc) keeps the books, runs the monthly close and prepares GST and TDS workings for private limited companies and CA firms in India. In this policy, “Closio”, “we” and “us” mean Ujjwal Preenja, the founder, who runs Closio as a sole proprietor in India.
2. What this policy covers
This policy covers personal data we handle through our website, when you contact us or book a demo, and when we provide our service to customers. Every customer signs an agreement with us. Where that agreement says something different about customer data, the agreement applies.
3. Information we collect
Information you give us. Your name, work email, phone number, company and role when you book a demo, write to us or sign an agreement.
Customer data. To keep a company's books we receive bank statements, sales invoices, purchase bills, payroll records, ledgers, PAN, GSTIN and similar records. These can contain personal data of the company's directors, employees, vendors and customers.
Usage information. Basic logs and device information when you use our website or product, and cookies as described below.
4. How we use it
- To provide the service: bookkeeping, bank matching, the monthly close, GST and TDS workings and financial statements.
- To respond to enquiries, onboard customers and give support.
- To keep the service secure, find faults and prevent misuse.
- To meet our legal and tax obligations.
We do not sell personal data, and we do not use customer data to train AI models.
5. Our role under the DPDP Act
For website visitors, demo enquiries and our own customer contacts, Closio is the Data Fiduciary. For customer data, the customer (the company, or the CA firm acting for its clients) decides why the data is processed, and Closio processes it on the customer's behalf under our agreement.
7. Where data is stored
Customer data is stored in India. When Closio's AI reads a document or answers a question, the text it needs is processed by OpenAI, which may be outside India. If data is transferred outside India, we do so only as permitted under the DPDP Act and the rules made under it.
8. How long we keep it
We keep customer data for as long as our agreement with the customer runs, and delete or return it within 30 days after it ends, unless the law requires us to keep it longer. Enquiry data is kept for 12 months.
9. Security
Accounting records are among the most sensitive data a company has. Our safeguards are set out on our security page.
10. Your rights
Under the DPDP Act you can ask for a summary of the personal data we hold about you, ask us to correct or erase it, withdraw consent you have given, nominate someone to act for you, and raise a grievance with us.
If your data is in a company's books that Closio keeps, please contact that company or its CA first, since they control those records. We will help them respond.
12. Grievance officer and contact
For any question or grievance about personal data, write to our grievance officer, Ujjwal Preenja, at [email protected]. We will respond within 7 days. If you are not satisfied, you may complain to the Data Protection Board of India.
13. Changes to this policy
We will post any changes here and update the date at the top. If a change materially affects customer data, we will tell customers before it takes effect.