Privacy Policy
This Privacy Policy explains how {{LEGAL_ENTITY_NAME}} ("LekhaBook", "we", "us") collects, uses, stores, shares and protects your information when you use the LekhaBook bookkeeping service over WhatsApp and our website at lekhabook.in. We follow India's Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable rules.
1. Who We Are
LekhaBook is a product of {{LEGAL_ENTITY_NAME}}, a sole proprietorship registered as a Micro Enterprise under Udyam Registration No. {{UDYAM_NUMBER}}, with its registered office at {{REGISTERED_ADDRESS}}, Bengaluru, Karnataka, India. For privacy matters, contact us at {{CONTACT_EMAIL}}. We are the Data Fiduciary for the personal data described below.
2. What Information We Collect
We collect only what we need to keep your books:
| WhatsApp identity | Your WhatsApp phone number and profile name, used to identify your shop's account. |
| Messages you send | The text, voice notes, and images (e.g. supplier bills) you send to record entries. Voice notes are converted to text to read your entry. |
| Your ledger data | The bookkeeping information you create: customer/supplier names, amounts, whether an entry is cash or credit (udhaar), running balances, items and stock. |
| Payment information | If you subscribe to Premium, payment is processed by our payment partner (Razorpay). We receive confirmation of payment and your plan status; we do not store your full card or bank details. |
| Technical data | Basic logs (timestamps, message IDs, error logs) needed to run the service reliably and prevent abuse. |
The names and amounts in your ledger may include personal data about your customers and suppliers. You are responsible for having a lawful basis to record that information; we process it on your behalf to provide the service.
3. How We Use Your Information
- To transcribe your voice notes, understand your entries, and post them to your ledger.
- To calculate and show running balances and send you confirmations and (if enabled) payment reminders.
- To provide bill-reading, reports and Tally/GST export.
- To process your subscription and prevent fraud or abuse.
- To provide support and to comply with legal obligations.
We do not sell your data, and we do not use the contents of your ledger for advertising.
4. Consent & Legal Basis
By starting a chat with LekhaBook and sending entries, you consent to this processing for the purpose of providing the bookkeeping service. You can withdraw consent at any time (see Section 6); withdrawing may mean we can no longer provide the service.
5. Data Storage & Security
Data is transmitted over encrypted connections (TLS) and stored in our managed PostgreSQL database (hosted by Supabase). Each shop's data is logically isolated so one account cannot access another's. We apply access controls and follow reasonable security practices. No method of transmission or storage is perfectly secure, but we work to protect your information.
6. Your Rights
Under the DPDP Act you may, by contacting us at {{CONTACT_EMAIL}}:
- Access a summary of the personal data we hold about you;
- Correct or update inaccurate data;
- Erase your data and close your account;
- Withdraw consent to processing;
- Nominate another individual to exercise your rights in case of death or incapacity;
- Grieve — raise a complaint with our Grievance Officer (Section 11).
You can also send a message such as "delete my data" within WhatsApp to begin the deletion process.
7. Third-Party Processors
We share data only with service providers that help us run LekhaBook, under appropriate safeguards:
| Meta (WhatsApp) | Delivers the messages between you and LekhaBook over the WhatsApp Business Platform. |
| Sarvam AI | Converts your voice notes to text (speech-to-text). |
| Google (Gemini) / Anthropic (Claude) | AI models that read your entry and structure it into a ledger record. |
| Supabase | Hosts the database where your ledger is stored. |
| Razorpay | Processes Premium subscription payments. |
8. International Transfers
Some processors (for example, AI model providers) may process data on servers outside India. Where this happens we rely on the providers' contractual safeguards and process only what is necessary to deliver your result. We will comply with any transfer restrictions notified under the DPDP Act.
9. Data Retention
We keep your ledger data for as long as your account is active, because your books need history. We retain it after closure only as long as needed for legal, tax or dispute-resolution purposes, then delete or anonymise it. You can request deletion at any time.
10. Children's Privacy
LekhaBook is a business tool intended for adults (18 years and older). We do not knowingly collect data from children. If you believe a child has used the service, contact us and we will delete the data.
11. Grievance Redressal
Grievance Officer: {{GRIEVANCE_OFFICER_NAME}}
Email: {{GRIEVANCE_EMAIL}}
Address: {{REGISTERED_ADDRESS}}, Bengaluru, Karnataka, India
We will acknowledge complaints within a reasonable time and respond within the timelines required by law.
12. Changes to This Policy
We may update this Policy from time to time. Material changes will be notified on this page (and, where appropriate, over WhatsApp). The "Last updated" date above shows the current version.
13. Contact
Questions about this Policy? Email {{CONTACT_EMAIL}}.
14. Governing Language
This Policy is published in English, which is the governing version. Translations, if provided, are for convenience only.