Privacy policy
What personal data we handle, why, where it sits, how long we keep it and the rights you can exercise.
Last updated 1 September 2026 · Softieons, operator of Accountieons1. Scope
This policy covers personal data we handle as a controller — visitors to our website, prospects, and the individuals who administer a customer account. Personal data inside your accounting workspace (your customers, vendors and employees) is handled as a processor on your instructions, under our DPA.
2. What we collect
| Category | Examples | Why |
|---|---|---|
| Account data | Name, work email, phone, company, role | Create and administer your subscription |
| Billing data | Billing address, tax registration, invoices, payment status | Charge you and meet tax obligations |
| Usage data | Log-in events, feature usage, device and browser, IP | Security, support and product improvement |
| Support data | Tickets, emails, WhatsApp messages, call notes | Answer you and keep a record |
| Website data | Pages viewed, referrer, cookie identifiers | Measure interest — see cookies |
We do not knowingly collect data from children, and we do not require special-category personal data.
3. Legal bases
- Contract — to provide and bill the service.
- Legitimate interests — security, fraud prevention, product analytics and business communication with existing customers.
- Consent — marketing emails and non-essential cookies, withdrawable at any time.
- Legal obligation — tax, accounting and statutory record-keeping.
4. Payments
Payments are processed by regulated payment providers (for example Razorpay and Stripe, depending on your country). We never see or store your full card number. We receive a token, the last four digits, the card brand and the transaction result so we can reconcile your invoice. The provider handles the card data as its own controller under PCI DSS.
5. Who we share with
We share personal data only with service providers who help us run the platform — hosting, email, messaging, payments, support tooling and analytics. Each is bound by contract, limited to the purpose, and listed on our sub-processor page. We disclose data to authorities only where legally compelled, and will tell you unless prohibited.
6. Where data is stored
You choose your workspace region at setup — India, the European Union, the United States, the United Arab Emirates or Singapore. Production data stays in that region. Support access from our team in India is logged and time-boxed; where required, transfers rely on standard contractual clauses or an equivalent mechanism described in the DPA.
7. How long we keep it
- Account and usage data — for the life of the subscription, then 60 days.
- Workspace data — deleted 60 days after termination; backups age out within a further 35 days.
- Billing records — retained as long as tax law requires in the relevant country (typically 6–8 years).
- Support records — 24 months.
8. Your rights
Subject to your local law, you may request access, correction, deletion, restriction, portability or objection, and you may withdraw consent. Write to privacy@accountieons.com and we will respond within 30 days. If you are unsatisfied you may complain to your supervisory authority; in India you may write to our grievance officer at the same address.
9. Security
Encryption in transit and at rest, isolated tenants, least-privilege internal access, logged support sessions, daily encrypted backups and tested restores. Details on the security page. Where a personal-data breach is likely to affect you, we notify without undue delay and within any statutory deadline.
10. Changes and contact
We will post material changes here and, for customers, notify the account administrator by email. Controller: Softieons, 5th Floor, Abhinandan Royale, Bhatar Road, Surat 395007, India. Email privacy@accountieons.com.