1. Scope & Controller Identity

This Privacy Policy applies to all personal data collected by FTFX Tech Solutions (OPC) Private Limited ("we", "Company") through the Fiscalis platform (fiscalis.ftfxtechsolutions.com). We are the Data Fiduciary under the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Data Controller under the GDPR for EU/UK users.

2. Data We Collect

Category	Specific Data	Basis
Account Data	Name, email address, password (hashed)	Contractual necessity
Billing Data	Payment tokens via Razorpay (we do not store card numbers)	Contractual necessity
Platform Usage	Templates accessed, documents generated, login timestamps	Legitimate interest
Form Input Data	Party names, addresses, emails entered into document forms	Contractual necessity / Consent
Technical Data	IP address, browser type, device ID, cookies	Legitimate interest
Communications	Support emails and enquiry messages	Legitimate interest

3. How We Use Your Data

To provide and improve the Fiscalis Service;
To process subscription payments and manage billing;
To send transactional emails (receipts, password resets, expiry notices);
To analyse platform usage and improve AI model quality (aggregated, anonymised);
To comply with applicable legal obligations;
To investigate fraud, abuse, or security incidents.

We do not sell, rent, or broker your personal data to any third party.

4. Third-Party Processors

Processor	Purpose	Location
Razorpay Software Pvt. Ltd.	Payment processing	India
OpenRouter / AI Model Provider	AI document generation (data sent without PII where possible)	USA
PostgreSQL Cloud Host	Database hosting	India / EU

All processors are bound by data processing agreements. International transfers are protected by Standard Contractual Clauses (SCCs) under GDPR.

5. Data Retention

Account data is retained for the duration of your subscription plus 3 years thereafter for audit purposes. Billing records are retained for 7 years as required by the Companies Act, 2013. You may request deletion at any time (subject to legal retention obligations).

6. Your Rights (DPDP Act 2023 & GDPR)

Right to Access — Request a copy of your personal data.
Right to Correction — Require inaccurate data to be corrected.
Right to Erasure — Request deletion where no overriding legal basis exists.
Right to Data Portability — Receive your data in a machine-readable format.
Right to Withdraw Consent — Where processing is based on consent.
Right to Grievance Redressal — Under §13 DPDP Act, lodge complaints to our Consent Manager or the Data Protection Board of India.

To exercise any right, email: grievance@ftfxtechsolutions.com or legal@ftfxtechsolutions.com. We will respond within 48 hours for acknowledgment and substantive resolution within 30 days.

7. Security Measures

We implement industry-standard safeguards: AES-256 data encryption at rest; TLS 1.3 encryption in transit; bcrypt password hashing; role-based access controls; regular penetration testing; SOC 2-aligned logging and monitoring.

8. Security Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights, we will promptly notify you, CERT-In, and the Data Protection Board of India (DPBI) as required under the DPDP Act, 2023 and Cyber Security Directions.

9. Cookies

We use essential cookies for session management and optional analytics cookies. See our Cookie Policy for full details.

10. Children's Data

The Service is not directed at individuals under 18 years of age. We do not knowingly collect data from minors. If we become aware of such collection, we will delete it immediately.

11. Changes to This Policy

Material changes will be communicated via email or platform notice 15 days before taking effect.

12. Designated Grievance Redressal Officer

In accordance with Section 8(9) & Section 13 of the DPDP Act, 2023 and Rule 3(2) of the IT Rules, 2021, our designated resident Grievance Officer in India is:

Designated Officer: Bhawana Sharma

Corporate Role: Data Protection & Grievance Officer

Legal Entity: FTFX Tech Solutions (OPC) Private Limited

Official Address: Shop No. 159, Anand Garden, Near Railway Station, Gurgaon, Haryana 122001, India

Email(s): grievance@ftfxtechsolutions.com · legal@ftfxtechsolutions.com

Direct Helpline: +91 85956 91335 (Mon–Sat, 09:00 to 18:00 IST)

Formal complaints are acknowledged within 48 hours and resolved within 30 days. Under Section 13(3) of the DPDP Act, if dissatisfied with our resolution, you have the statutory right to escalate your complaint directly to the Data Protection Board of India (DPBI).