Privacy Policy

1. Introduction

This Privacy Policy explains how RamFlow AI ("RamFlow", "we", "us") collects, uses and safeguards information when you use our invoicing, GST and accounting platform (the "Service"). By using RamFlow, you agree to the practices described here.

We are committed to handling your data responsibly and in accordance with India's Digital Personal Data Protection Act, 2023 and applicable data-protection laws.

2. Information we collect

We collect only what we need to provide the Service:

• Account data — your name, email address, phone number, business name and login credentials.
• Business data — invoices, customers, products, expenses, GSTINs, bank and tax details you enter to run your books.
• Usage data — log information such as IP address, device and browser type, and the pages or features you use, collected to keep the Service secure and reliable.
• Payment data — when you subscribe to a paid plan, billing details are processed by our payment partner (Razorpay); we do not store full card numbers.

3. How we use your information

We use your information to:

• Provide, maintain and improve the Service and your account.
• Generate GST-compliant invoices, returns and reports on your behalf.
• Communicate with you about updates, security alerts and support requests.
• Detect, prevent and respond to fraud, abuse and security incidents.
• Comply with legal, tax and regulatory obligations.

We do not use the contents of your invoices or customer records for advertising.

4. How we share information

We never sell your personal or business data. We share information only with:

• Service providers (e.g. cloud hosting, email delivery, payment processing) who are bound by confidentiality obligations and process data on our instructions.
• Authorities, when required by law, court order or to protect the rights and safety of our users.
• A successor entity in the event of a merger or acquisition, subject to this Policy.

5. Data security

We protect your data with encryption in transit (256-bit SSL/TLS), per-business data isolation, role-based access controls, and audit logging of sensitive actions. While no system is perfectly secure, we work continuously to safeguard your information.

6. Data retention

We retain your business records for as long as your account is active and as required to meet legal and tax obligations (for example, retaining invoice records under GST law). You can delete records within the app, and you may request deletion of your account at any time.

7. Your rights

Subject to applicable law, you may:

• Access and export the data you have stored in RamFlow.
• Correct inaccurate personal information.
• Request deletion of your personal data, subject to legal retention requirements.
• Withdraw consent or object to certain processing.

To exercise any of these rights, contact us at admin@ramflowbooks.com.

8. Cookies

We use essential cookies to keep you signed in and to remember your preferences. We do not use third-party advertising cookies. You can control cookies through your browser settings, though disabling essential cookies may affect the Service.

9. Children's privacy

RamFlow is a business tool intended for users aged 18 and above. We do not knowingly collect data from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified within the app or by email. The 'Last updated' date above reflects the latest revision.