Security and data
How we handle your books
What we store, who can see it, and how you take it with you. No slogans, just how it works.
AI processing happens outside India
To suggest entries and answer your questions, we send the parts of your statements and books the AI needs (for PDFs we can't read line by line, the statement page itself) to our AI provider, Anthropic, which processes them outside India.
This can include the names of your customers and vendors as they appear in your statements and books.
A record of every change
Every entry records where it came from (a statement line, an invoice or a manual entry), who suggested, edited or approved it, and when. Posted entries aren't edited. They're reversed, and both steps stay on the record. We haven't had this record assessed against the audit-trail requirement in the Companies (Accounts) Rules, so we make no claim about it.
Who can see your company
- People you invite. Only people you invite can see your company. You choose each person's role, and you can remove them any time in Settings → People.
- Your accountant. Your CA or accountant sees everything in your company, including bank transactions and invoices, and can approve or correct entries.
- Our support team, only if you let us. Our support team opens your company's data only if you switch on Support access. It lasts up to 72 hours, covers one company, and every access is logged where you can see it.
- Our engineers. A small number of engineers can reach our systems to keep them running, and that access is also logged.
What we never ask for
- Your GST or income-tax portal passwords.
- Your digital signature certificate (DSC).
- Your net-banking login. You upload statements; we don't connect to your bank.
Take your data with you, or delete it
- What we keep: our own invoices to you and payment records (our books), the record that you asked for this deletion, the record of the notices you agreed to, your sign-in account until you ask us to remove it, and security logs for 180 days.
- Before you delete: companies must keep their books for 8 years. Export first. Once deleted, we can't restore them.
- Your rights: you can get a copy of your data, correct it, withdraw consent or delete your account in Settings → Data and privacy (company owners), or write to our grievance officer at privacy@alignmoney.in. You can also complain to the Data Protection Board of India.
Found a security problem?
Email security@alignmoney.in. We'll acknowledge it and keep you updated while we investigate.