Platform
Contract Intelligence ASC 606 Engine Billing & Subscription Payment Intelligence Tax & Compliance FP&A AI CFO Assistance
Explore
Why Fincelo AI Agents Integrations Design Partners Compare Pricing
Resources
Book a Demo Documentation API Reference Changelog Blog Security & Compliance
Company
About Fincelo Careers Privacy Policy Terms of Service
Legal

Privacy Policy

Last updated: 19 July 2026

Fincelo Technologies Private Limited ("Fincelo", "we", "us", or "our") operates the Fincelo platform, accessible via fincelo.app and app.fincelo.app (the "Service"). This Privacy Policy explains how we collect, use, share, and protect information when you use the Service. Fincelo is compliant with India's Digital Personal Data Protection Act, 2023 (DPDPA) and the Information Technology Act, 2000.

1. Who we are

Fincelo Technologies Private Limited is the data fiduciary for personal data processed through the Platform. For privacy inquiries, contact privacy@fincelo.app.

2. Information we collect

Account & identity data — Name, email, phone number, company name, designation, GSTIN, PAN, and CIN provided when you register or as required for compliance purposes.

Financial & billing data — Invoice data, contracts, POs, payment records, revenue recognition schedules, ARR/MRR figures, TDS records, 26AS reconciliation data, and GST return data. This is your data, processed strictly on your behalf as a data processor. Subscription payment information is handled directly by our payment partners (Razorpay for India, Stripe for international customers); Fincelo does not store your card details.

Integration data — Data from connected third-party services (CRM, payment gateways, accounting tools) as authorised by you.

AI processing data — Contracts uploaded for AI extraction are processed to provide the service under strict data processing agreements with our AI service providers.

Usage data — Log data including IP addresses, device information, feature-usage patterns, and timestamps — used solely for platform improvement and security. Never sold or shared with advertisers.

3. Legal basis for processing

Contract performance — Processing financial data is necessary to provide the service.

Legal obligation — Compliance with GST law, TDS, and the Companies Act requires retention of certain financial records.

Legitimate interest — Security monitoring and fraud prevention.

Consent — For marketing communications, withdrawable at any time.

4. How we use your data

We use your data to provide and operate the Platform and its features; to generate invoices, recognition schedules, compliance reports, and board materials on your behalf; to interface with government portals (IRP, GSTN) for e-invoicing and GSTR-1 as authorised by you; to run AI agents within your defined guardrails; and to communicate platform updates and security notices. We do not sell your personal information.

5. Data sharing

We do not sell your data. We share data only with: payment processors (Razorpay, Stripe) for Fincelo subscription billing; government portals (IRP/GSTN, TRACES) as required by law; AI service providers under strict data processing agreements; and infrastructure providers (including Supabase for database and authentication) under equivalent data protection terms — as well as when required by law or court order. Your financial data is never shared with other Fincelo customers; workspace data is isolated using Row-Level Security.

6. Data security

AES-256 encryption at rest; TLS 1.3 in transit.

Row-level security (RLS) ensuring complete workspace isolation.

Role-based access controls with audit logging on all sensitive operations.

Regular security assessments and penetration testing.

Incident response aligned with DPDPA 2023 notification timelines.

7. Data retention

Financial records are retained for a minimum of 7 years from the creation date, in compliance with the Companies Act, 2013, the Income Tax Act, 1961, and GST law. Account data is retained for the duration of your subscription plus 3 years, unless you request earlier deletion (subject to legal retention obligations).

8. Your rights under DPDPA 2023

Right of access — request a summary of the personal data we hold about you.

Right to correction — request correction of inaccurate data.

Right to erasure — request deletion, subject to legal retention requirements.

Right to grievance redressal — file a complaint with our Data Protection Officer.

Right to nominate — nominate a person to exercise these rights on your behalf.

To exercise your rights, email privacy@fincelo.app. We respond within 30 days as required by DPDPA 2023.

9. Cookies

We use strictly necessary cookies for authentication, and analytics cookies (with your consent) to understand Platform usage. We do not use advertising or tracking cookies. You can manage your preferences in your account settings.

10. Cross-border data transfers

Data is primarily stored in India. Where data is transferred to processors outside India (e.g. AI service providers), we ensure equivalent data protection through contractual safeguards as required by DPDPA 2023.

11. Children's privacy

Fincelo is a business-to-business platform not directed at individuals under 18, and we do not knowingly collect personal information from children.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notice before taking effect.

13. Contact & grievances

Data Protection Officer — Fincelo Technologies Private Limited. Email privacy@fincelo.app for privacy and grievance matters, or founders@fincelo.app for general queries.

✦ Revenue Intelligence

Latest from the Blog

View all posts →
Loading posts…