Privacy Policy

1. Who We Are

M/s. Sriraj & Associates is a Chartered Accountancy firm registered with the Institute of Chartered Accountants of India (ICAI). We operate this website (srirajassociates.com) and the AuditHawk SaaS platform (app.srirajassociates.com).

2. Data We Collect

Website (srirajassociates.com):

• Contact form submissions: name, email, phone, company name, message
• No cookies or tracking on the brochure website

AuditHawk (app.srirajassociates.com):

• Account data: email address, full name, role
• Financial data: Tally company data synced by the user (ledgers, vouchers, balances)
• Usage data: pages visited, features used (aggregated, no personal tracking)

3. Purpose of Collection

• Responding to enquiries submitted via the contact form
• Providing chartered accountancy services
• Operating the AuditHawk platform and providing audit analysis features
• Improving our services based on aggregated usage patterns

4. Legal Basis

• Consent: Contact form submissions
• Contractual necessity: AuditHawk account and service delivery
• Legal obligation: Retention of statutory records as required by law

5. Data Storage and Security

All data is stored on servers located in India (DigitalOcean, Bangalore region). Data is encrypted in transit (TLS 1.2+) and at rest. Access is restricted through role-based controls. Regular backups are maintained with encryption.

6. Data Retention

• Contact form data: 2 years, then deleted
• AuditHawk accounts: duration of subscription plus 6 months
• Financial records: as required by the Companies Act, 2013 (8 years), Income Tax Act (6 years), and GST Act (6 years)

7. Your Rights (DPDP Act, 2023)

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Access your personal data held by us
• Request correction of inaccurate data
• Request erasure of your data (subject to statutory retention requirements)
• Data portability -- receive your data in a machine-readable format
• Lodge a grievance with our Grievance Officer

8. Third-Party Services

We use the following third-party services in the operation of our platforms:

• Resend -- transactional email delivery
• Sentry -- application error tracking (no personal data stored)
• Cloudflare -- DNS and content delivery

We do not sell, trade, or share your personal data with any third party for marketing purposes.

9. Cookies

The brochure website (srirajassociates.com) does not use any cookies. The AuditHawk application uses essential session cookies required for authentication. No third-party tracking cookies are used.

10. Changes to This Policy

We may update this privacy policy from time to time. Material changes will be communicated via the website. Continued use of our services after changes constitutes acceptance of the updated policy.

11. Grievance Officer

For any privacy-related concerns or to exercise your rights under the DPDP Act: