Privacy Policy

AXPERTZ is the software product brand of AXPERTZ ONLINE CONNECT LLP, a limited liability partnership based in Nagpur, Maharashtra, India. Our products include AXPERTZ GST PRO, AXPERTZ OFFICE TOOLS, FinanceOS, HomeMate and OMS.

For the purposes of the Digital Personal Data Protection Act, 2023, we act as the Data Fiduciary in respect of the personal data described in this policy — that is, we determine why and how it is processed.

This policy covers personal data processed in connection with AXPERTZ GST PRO and our other software products. This website itself has no forms and collects nothing you type.

Data that remains local on your device by default includes:

• Companies and financial years
• Customers, suppliers and their GSTINs
• Items, inventory and stock records
• Sales invoices, purchases, payments and receipts
• Ledgers and accounting entries
• GST calculations and GST reports
• Reports including Profit & Loss, Balance Sheet and Trial Balance

Because this data is under your control on your own hardware, you are responsible for the security of that device and for keeping your own copies. We cannot recover a local database we have never held, and we cannot remotely delete one.

Your accounting records never reach our infrastructure. There is no cloud backup, no synchronisation and no upload of accounting data — the application has no feature that sends your books anywhere.

AXPERTZ GST PRO keeps automatic recovery backups so that an accidental deletion or a database failure does not cost you your books. Those backups are files on your own computer. They are never uploaded.

1. 1A consistent snapshot of your local database is taken.
2. 2It is written to a temporary file in your own user data folder.
3. 3The file is reopened and checked for integrity.
4. 4A checksum is recorded so it can be verified before any restore.
5. 5Only then is it kept as a backup you can restore from.

No accounting backup is uploaded to AXPERTZ infrastructure, to Google Drive, or to any other online service.

We practise data minimisation. The website asks for nothing; email and phone are the only ways you share anything with us, and that is entirely your choice.

This website has no contact, demo or grievance form. If you write to us by email or call us, we hold only what you choose to tell us, and only for as long as it takes to answer you.

Where a product provides an account — for example to manage a subscription — authentication is expected to be handled by Firebase Authentication, a Google service. In that case the account record would hold your email address, an authentication identifier and the sign-in method used.

If you sign in using Google, we receive only the basic profile information that Google releases for sign-in, such as your email address. We never receive your Google password. We do not ask for, collect or store passwords for any third-party account.

Where email and password sign-in is offered, the password is handled by the authentication provider and stored by it in hashed form. AXPERTZ does not hold your password in readable form.

Where you hold a paid plan, we keep the records needed to administer it: the plan purchased, its start and renewal dates, invoice references, amounts and payment status.

As with any website, your browser sends standard request information — IP address, user agent, requested URL — to the hosting provider in order to deliver the page. Firebase Hosting generates operational logs from this. We do not use those logs to identify individual visitors.

Your light or dark theme preference is stored in your own browser using local storage. It never leaves your device.

• To respond to an email or phone call you make to us.
• To investigate and resolve a complaint you raise.
• To create and administer your account and subscription.
• To provide support and to diagnose a problem you report.
• To operate, secure and troubleshoot our website and products.
• To comply with a legal obligation, including keeping accounting and tax records.
• To establish, exercise or defend a legal claim.

We do not sell personal data, share it with advertisers or data brokers, or use it for automated decision-making or profiling. We never receive your accounting data or its backups, so there is nothing there for us to read, and we do not use your accounting data to train models.

When you submit a form on this website you do so voluntarily and for the specific purpose of being contacted about your enquiry. That submission is your consent to us using those details for that purpose. This notice describes the data collected, the purpose, and how to exercise your rights, so that consent is free, specific, informed, unconditional and unambiguous.

Where we process data to perform a contract with you — administering a subscription you have bought — or to meet a statutory obligation, we rely on that basis rather than consent, and those records may be retained even if consent is later withdrawn.

Enquiry data is kept beyond 30 days only where there is an active business relationship, the enquiry became a customer or support case, a dispute or complaint is still open, or the law requires retention.

To request deletion, email axpertzpro@gmail.com from the address associated with your enquiry or account. We may need to verify your identity before acting, so that we do not delete someone else's data on an unverified request.

You should not be locked into our products. AXPERTZ GST PRO supports exporting your data in common formats so you can take it elsewhere or hand it to your accountant.

• Excel and CSV export of records and reports
• PDF export of invoices and statements
• An encrypted backup file of your database

For personal data held by us rather than on your device, email axpertzpro@gmail.com and we will provide it in a structured, commonly used format where technically feasible.

We share personal data only where necessary, and never for a third party’s own marketing purposes.

Website enquiry data is stored in Cloud Firestore in the Google Cloud region asia-south1 (Mumbai, India), so it is stored within India.

Google operates the underlying infrastructure and may process limited operational data, such as service logs, on its global infrastructure under its own terms. We do not transfer your enquiry data outside India for our own purposes. Any transfer of personal data outside India would be made only in accordance with the restrictions applicable under Indian law at the relevant time.

We apply security measures appropriate to our architecture. These are the measures actually implemented:

• The website and product traffic are served over HTTPS, so data is encrypted in transit.
• Accounting data and its backups stay on your computer, so there is no accounting database of ours for an attacker to reach.
• Every backup is reopened and integrity-checked after it is written, and verified against its checksum before any restore.
• Firestore security rules allow the public website to create an enquiry but not to read, modify or delete any record.
• Reading submitted enquiries and complaints requires an authenticated administrator holding a specific administrative claim.
• Data stored in Google Cloud is encrypted at rest by the platform as standard.
• Access to enquiry and complaint data is limited to those who need it to respond.
• Accounting data and its local backups never leave your device at all.

We maintain an internal breach-response process covering detection, recording the time of the incident, assessing the data and users affected, containment, remedial action, and the notifications required.

To exercise any right, email axpertzpro@gmail.com. We may need to verify your identity first, and we will not charge you for making a request.

You may withdraw consent at any time, and doing so is as easy as giving it — email us and say so. Withdrawal does not affect anything lawfully done beforehand, and where the law requires us to keep certain records we will retain those. Withdrawing consent may mean we can no longer respond to an open enquiry or provide a service you have asked for.

Our website and products are intended for businesses and professionals. They are not directed at children, and we do not knowingly collect a child’s personal data. We do not undertake tracking, behavioural monitoring or targeted advertising directed at children.

If you believe a child has submitted personal data through this website, contact us and we will delete it. Where personal data of a person with a disability who has a lawful guardian is involved, we will process it in accordance with the requirements applicable to such processing.

This website may link to other websites. We are not responsible for their content or privacy practices, and this policy does not apply to them.

We may update this policy as our products and legal obligations change. The version number and publication date are shown at the top of this page. Where a change materially affects how we handle your personal data, we will take reasonable steps to bring it to your attention.

If you have a question, a request about your personal data, or a complaint about how it has been handled, contact our grievance officer. You can also use the complaint form on our Grievance page, which issues you a reference number.

If you are not satisfied with our response, you may complain to the Data Protection Board of India in accordance with the Digital Personal Data Protection Act, 2023 and the rules made under it, or approach the consumer dispute redressal authority having jurisdiction.