Privacy Policy

Information we handle

We handle account details such as your name, email address, organization, role and authentication data; business records you enter such as customers, suppliers, projects, invoices, expenses, payments, bank or cash ledger entries, documents and support messages; and basic technical information needed to secure and operate the Services, including session, device, diagnostic and audit information.

Payment card, UPI or bank mandate credentials are processed by the payment provider selected by the organization. Squem stores provider references and payment status, not full card numbers or banking credentials.

How we use information

We use information to provide and synchronize the Services, authenticate users, generate business records and reports, process or reconcile payments, deliver requested notifications, provide support, prevent fraud or misuse, maintain audit trails and comply with applicable legal obligations. We do not sell personal data or use it for third-party behavioral advertising.

Sharing and service providers

Information is visible to authorized members of your organization and, where applicable, the client or administrator responsible for a shared project. We may use infrastructure, authentication, email, analytics, support and payment providers to operate the Services. They receive only the information needed for their role and are required to protect it. We may also disclose information when required by law or to protect the rights, safety and security of users and the Services.

Storage, security and retention

We use access controls, encrypted transport, hashed passwords and operational safeguards designed to protect your information. Business records are retained while the organization uses the Services and for a reasonable backup, audit or legal period afterward. No system is completely secure, but we continuously work to reduce risk and restrict access.

Your choices and deletion

Authorized users can update many records from the Services. You may request access, correction, export or deletion of your account and associated personal data by emailing us. Organization-owned accounting and transaction records may need to be retained for legal, tax, fraud-prevention or audit requirements; where deletion is not permitted, we restrict use to those purposes. We aim to respond to verified deletion requests within 30 days.

Children

The Services are business tools and are not directed to children under 18. We do not knowingly collect personal data from children.

Changes and contact

We may update this policy as the Services or legal requirements change. The current effective date will be shown above. For privacy questions or data requests, contact rudra@squem.com.