Privacy notice
What we collect, why, how long we keep it, and how to get it back or have it destroyed.
whtally is operated by Saravonix. It reads reports out of the TallyPrime installation you already run and shows them on your phone. This notice is written to be read, not to be survived — if anything in it is unclear, write to us and we will fix the wording.
We are in two different roles at once
This distinction decides everything else in this notice, so it comes first.
FiduciaryYour own details
Your business name, email address and mobile number. We asked you for these, we decided what to do with them, and we are answerable to you for them under the Act.
ProcessorEverything we read from your Tally
Your stock, batches, expiry dates, bills and sales — including the names of your own customers and suppliers. Those people are not our users. They never agreed to anything with us and cannot be asked to. So we hold their details only to show you your own books, we never use them for anything else, we never build a profile from them, and they are destroyed when your account is. For that data you are the fiduciary and we act on your instructions.
What we collect, and why
| What | Why | Where it comes from |
|---|---|---|
| Business name, email, mobile | To create your account, send your connector key, and reach you about the service | You, at signup |
| Connector key and licence dates | To identify which Tally is yours and keep other people out of it | Generated by us |
| Stock, batches, expiry, godowns | To show you what is expiring and what is not moving | Your Tally, read by your connector |
| Bills outstanding — party names, amounts, due dates | To show you who owes you and what you owe | Your Tally |
| Sales register — party, voucher number, amount | To show you your sales | Your Tally |
| Vouchers you compose in the app | To post them into your Tally | You |
| Connector version, platform, last error | To answer "why has this stopped working" without asking you to find a log file | Your connector |
| IP address and failed sign-in attempts | Security only — to stop someone guessing their way into your books | Your browser |
| Assistant actions — drafted, posted, refused, and the amount | An audit trail of anything that touched money | The assistant add-on |
What we deliberately do not keep
- Your conversation with the AI assistant. We record what it did and the amount involved, never what you typed. Your business conversation is yours.
- Card or bank details. There is no online payment in whtally at all. If you take the assistant add-on, payment is arranged directly with us and no card ever touches this system.
- Your Tally password or company data beyond the reports listed above. The connector runs read-only report requests; it does not copy your company file.
- Anything for advertising. We do not sell, rent or share your data with advertisers, and there is no tracking pixel or analytics script on this site.
Consent, and taking it back
You give consent when you create your account — the tick box is not pre-ticked and the account is not created without it. We record the version of this notice you agreed to, so that "you consented" always has a specific meaning.
You can withdraw it at any time by deleting your account (below). Withdrawing consent stops future processing; it does not undo what was lawfully done before, and where we must keep something to meet a legal obligation we will say so.
Who else sees it
We use a small number of service providers. They process data on our instructions and for no purpose of their own.
| Who | What reaches them | Where |
|---|---|---|
| Railway | Hosting and the database — all of the above lives here | Outside India |
| Resend | Your email address and the text of the emails we send you | Outside India |
| Anthropic | Only if you use the AI assistant: the message you type. Not your stock or party lists. | Outside India |
| Google Fonts | Your IP address — but only inside the signed-in app. The public site and this page now carry their own typefaces, so visiting them tells Google nothing. We are removing the last of it from the app too. | Outside India |
These transfers are permitted under section 16 of the Act, which allows transfer to any country the Central Government has not restricted. If that list changes we will move the affected service.
How long we keep it
The Act says personal data must be erased once the purpose is served. These windows run automatically as a daily job — they are not a promise about what a person might remember to do.
| What | Deleted after |
|---|---|
| Stock, expiry, outstanding and sales snapshots | 180 days after your connector stops reporting — there is no purpose left to serve |
| Your whole account, and everything in it | 730 days of no activity, after we email you a warning 30 days beforehand |
| Sign-in and security logs | 90 days |
| Posted and failed vouchers | 365 days |
| Demo and enquiry forms | 730 days |
| One-time codes and pairing codes | 7 days |
| Everything, if you delete your account | Immediately, and it cannot be recovered |
When an account is erased we keep one line in an internal ledger — the account number, the reason, and a one-way hash of the email address — so that we can answer "was I deleted?" without keeping the address itself.
Your rights, and how to use them
- Access (s.11). Open the app → Settings → Download my data. You get one JSON file with everything we hold, immediately, without asking us.
- Correction (s.12). Your business name and contact details can be changed in the app. Figures come from your Tally, so correcting them means correcting them in Tally — the next pull replaces our copy entirely.
- Erasure (s.12). App → Settings → Delete my account. We email a confirmation code first, because your connector key sits in a file on a shop PC and a copied file must not be enough to destroy your data. Once confirmed it is immediate and irreversible.
- Grievance redressal (s.13). Below. You must come to us first; if we do not resolve it, you may complain to the Data Protection Board of India.
- Nomination (s.14). You may nominate someone to exercise these rights if you die or become incapacitated. Write to us with their details.
If you filled in a demo form but never created an account, we have your enquiry only. Email us and we will delete it — there is no account to sign in to.
Security
- Your connector makes outbound calls only. No port is opened on your network and nothing of ours can reach into your machine.
- Each Tally has its own key. Every single query is filtered by that key, so one customer's data cannot be returned to another.
- whtally runs in its own database, not shared with any other Saravonix product.
- Sign-in codes are stored hashed, expire, are single-use, and are rate-limited.
- If a breach affects your data we will notify you and the Data Protection Board as section 8(6) requires.
No system is perfect. If you find a security problem in whtally, email the address below — we would much rather hear it from you.
Children
whtally is a tool for registered businesses and is not intended for anyone under 18. We do not knowingly create accounts for children. If you believe we hold a child's data, tell us and we will delete it.
Changes
If we change how we use your data in a way that matters, we will raise the version number of this notice and email account holders before it takes effect. Wording fixes will not.
Grievance officer
Karthik Balasundaram
Data Protection & Grievance Officer, Saravonix
privacy@saravonix.com
We aim to respond within 7 working days and to resolve within 30 days. If you are not satisfied, you may escalate to the Data Protection Board of India.