Effective Date: May 06, 2019 Last Updated: April 22, 2025 AccountsUp (“AccountsUp”, “we”, “us”, or “our”) is committed to protecting your privacy in compliance with applicable Indian laws, including the Information Technology Act, 2000, the associated Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (“DPDP Act”). This Privacy Policy describes how we collect, use, store, process, and share your personal data and outlines your rights as a Data Principal under Indian law. By accessing our website www.accountsup.in and/or using our Services, you agree to the terms outlined in this Privacy Policy. If you do not agree, please refrain from using our Site and Services. ______________________________________________________________________________________ 1. Definitions (As per DPDP Act, 2023) • Data Principal: You, the individual to whom the personal data relates. • Data Fiduciary: AccountsUp, which determines the purpose and means of processing your personal data. • Consent: A clear affirmative action signifying agreement to the processing of your personal data for a specified purpose. • Personal Data: Any data about an individual who is identifiable by or in relation to such data. ________________________________________ 2. Personal Data We Collect We collect and process the following types of personal data: • Contact Information: Your name, email address, phone number, company name, job title, etc. • Billing Information: Payment-related information such as UPI ID, card details, billing address (via third-party gateways). • Technical Information: IP address, device ID, browser type, date/time of access, etc. • Usage Data: Pages visited, duration on site, clicks, scroll behaviour, etc. • Cookies: Used to track usage patterns and personalize your experience. • Social and Third-Party Data: Information you share with us through social media or third-party services, subject to their privacy settings and terms. ________________________________________ 3. Legal Basis for Processing Personal Data Under the DPDP Act, we process your personal data on the following legal bases: • Consent: When you voluntarily provide your data (e.g., signing up for Services). • Legitimate Use: For providing requested services, billing, troubleshooting, preventing fraud, and complying with legal obligations. • Contractual Necessity: To fulfill contracts or agreements between you and AccountsUp. ________________________________________ 4. Purpose of Data Collection We collect and process your personal data for the following purposes: • To provide, manage, and improve our Services • To respond to inquiries and support requests • For user account creation and verification • For billing and transaction purposes • To send updates, newsletters, or marketing communications (with your consent) • To comply with Indian laws and regulations ________________________________________ 5. Your Rights Under the DPDP Act, 2023 As a Data Principal, you have the following rights: • Right to Access: You may request details of your personal data held by us. • Right to Correction: You can request correction or updating of your data. • Right to Erasure: You may request deletion of your personal data, subject to legal obligations. • Right to Grievance Redressal: You may file complaints with our Grievance Officer. • Right to Nominate: You may nominate another individual to exercise your rights in the event of your incapacity or death (as per Rule 11 of the DPDP Act). To exercise these rights, contact us at help@accountsup.in. ________________________________________ 6. Consent and Withdrawal By using our Services, you consent to the collection and use of your personal data as outlined. You may withdraw your consent at any time by writing to us at help@accountsup.in. However, withdrawal may affect your access to certain Services. ________________________________________ 7. Grievance Redressal Mechanism We have appointed a Grievance Officer in compliance with Rule 5(9) of the IT Rules and Section 13 of the DPDP Act. Grievance Officer Email: help@accountsup.in Response time: Within 15 days from the date of complaint. ________________________________________ 8. Data Sharing and Disclosure We do not sell your personal data. We may share data with: • Third-party service providers (e.g., hosting, analytics, payment processors) • Legal or regulatory authorities if required under applicable law • Affiliates and business partners, subject to confidentiality agreements • In case of corporate transactions like mergers or acquisitions ________________________________________ 9. Data Transfers Outside India In compliance with Section 16 of the DPDP Act, if we transfer your data outside India (e.g., via cloud services), we will ensure that such transfers are made to countries or entities that offer an adequate level of protection or are otherwise permissible by the Government of India. ________________________________________ 10. Data Retention and Storage We retain your data only as long as necessary to fulfill the purpose it was collected for or as required by Indian law. Once no longer needed, your data will be securely deleted or anonymized. ________________________________________ 11. Data Security Measures We implement appropriate technical and organizational security measures including: • Encrypted data transmission • Role-based access controls • Secure servers and software updates • Employee training on data privacy These are in line with Rule 8 of the IT (Reasonable Security Practices) Rules, 2011. ________________________________________ 12. Children’s Data Our Services are not intended for individuals under 18 years of age. We do not knowingly collect data from minors. If you believe a child has provided data to us, contact us immediately. ________________________________________ 13. Third-Party Links This Privacy Policy does not apply to external websites linked from our Site. We recommend reviewing the privacy policies of any third-party sites you visit. ________________________________________ 14. Do Not Track & Cookies While you may set “Do Not Track” preferences in your browser, there is currently no legal requirement in India to comply with them, and we do not respond to such signals. You may manage cookies through your browser settings. ________________________________________ 15. Policy Updates We may update this Policy to reflect changes in law, technology, or business operations. The revised version will be posted with a new “Last Updated” date. Continued use of our Services implies acceptance of such changes. ________________________________________ 16. Contact Us If you have questions or wish to exercise your rights, contact: AccountsUp Email: info@accountsup.in Website: www.accountsup.in