Privacy Policy

Introduction

3ABiz is a SaaS GST trade ledger and business accounting platform for Indian businesses. This Privacy Policy explains how 3ABiz collects, uses, stores, shares and protects information when you use the platform. By using 3ABiz you agree to the practices described in this policy.

Data we collect

3ABiz collects and stores the following categories of information:

• Account email address and name where provided during onboarding or profile setup
• Tenant and account membership records
• Business setup details including firm name, trading name, GSTIN and branch details
• Customer and supplier master records
• Item, HSN code and tax rate master records
• Sales invoices, purchase entries, credit notes, debit notes, delivery challans and related transaction records
• Payment and receipt records
• Report metadata and export history
• Audit logs of important financial, billing, support and platform actions
• Support tickets, diagnostics and related metadata
• Subscription and billing records
• Device, browser and usage data needed for security, reliability and product improvement

Purpose of processing

Your data is used to:

• Provide GST trade ledger and business recordkeeping workflows
• Create, manage and store business records on behalf of the account
• Generate invoices, purchases, returns, challans, reports and exports
• Enforce plan limits and subscription entitlements
• Process and support billing and subscription management
• Handle support requests and resolve issues
• Maintain audit trails and ensure auditability of financial actions
• Detect and prevent fraud, abuse and unauthorised access
• Monitor and improve platform security and reliability

Data sharing

3ABiz does not sell customer business data. Data is shared only with third-party service providers required to operate the platform, which may include:

• Cloud hosting, database and storage providers
• Email delivery provider for notifications and alerts
• Payment gateway when online billing is enabled
• Analytics and monitoring tools where used
• Support and ticketing systems where used
• Legal or regulatory authorities when required by applicable law

Hosting and storage

3ABiz is designed to use AWS India-region infrastructure for production application data and private business documents where configured. Production document storage is intended to remain in the AWS India region according to the configured deployment policy.

Your rights as a data principal

Under applicable Indian law, you may request:

• Access to the account data held about you
• Correction of inaccurate personal information
• Deletion of personal data where legally and technically permissible
• Grievance redressal through the contact details below
• Withdrawal of optional consent where applicable

Retention and deletion

Business records are retained while the account is active and as needed for legal, audit, backup, security, support and compliance purposes. Deletion of an account or personal data request does not immediately remove data from encrypted backups, audit logs or legally retained records. Downgrade or cancellation of a subscription does not automatically delete existing business records such as invoices, purchases or returns.

Security

3ABiz uses reasonable technical and organisational safeguards including tenant isolation, authenticated sessions, role-based access control, private document storage, audit logs, encrypted backups and security monitoring. No method of transmission or storage is completely secure, but 3ABiz uses safeguards appropriate for the service.

Cookies and usage data

3ABiz may use session cookies and usage data for authentication, security and product reliability. Usage data collected is limited to what is reasonably necessary to operate and improve the service. 3ABiz does not use cookies for third-party advertising.

Changes to this policy

3ABiz may update this Privacy Policy from time to time. Changes will be published on this page. Continued use of the service after changes are published constitutes acceptance of the updated policy.

Grievance officer / contact

For privacy queries, data access or correction requests, or grievance redressal, please contact: [INSERT PRIVACY / GRIEVANCE EMAIL]. We aim to respond to privacy requests within a reasonable timeframe in accordance with applicable law.