Sign in

Privacy Policy

Effective date: 13 July 2026
Last updated: 26 September 2026

PaySir Accounting ("PaySir", "we", "us"), operated by Town-Z Fintech Pvt. Ltd. (CIN: U66190UP2025PTC235579), registered at Bhudha Park Road, Near Kanshi Ram Colony, Moradabad, Uttar Pradesh – 244001, provides accounting and financial-management software for small businesses in India. This policy explains what data we collect, why, and the choices you have. It is written to comply with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.

1. Data we collect

  • Account data — your name, email address and/or mobile number, and organisation (company) details, collected when you sign up. Authentication is handled by our identity provider, Clerk.
  • Business and financial records you enter — parties, khata entries, transactions, invoices, stock, journal entries, tax details (e.g. GSTIN), reports and related documents you upload. This data belongs to you; we process it only to provide the service.
  • Billing data — your subscription plan, payment status and payment history. Card, UPI and banking credentials are collected and processed directly by Razorpay, our RBI-regulated payment partner. We never see or store your full card or banking details.
  • Usage data — feature usage counts (for plan limits), device/browser information and logs needed to keep the service secure and reliable.
  • [PENDING LEGAL REVIEW] Email we send on your behalf— when you email an invoice to a customer, or receive a reminder digest from us, the recipient's email address and the contents of that message pass through our email provider in order to be delivered. An invoice email contains the invoice number, date, your company name, the customer's name and the amount.

2. How we use data

  • To provide the service: bookkeeping, khata, invoicing, stock, reports and reminders.
  • To process subscription payments and manage your plan through Razorpay.
  • To power optional AI features (such as the in-app assistant): the specific content you submit to those features is processed by our AI provider (Anthropic) to generate a response, and is not used by us to train AI models.
  • To send service notifications (in-app, email, WhatsApp/SMS where you opt in).
  • To prevent fraud and abuse, and to comply with law.

We do not sell your personal data, and we do not use your accounting data for advertising.

3. Who we share data with

[PENDING LEGAL REVIEW] Only service providers needed to run PaySir, each bound to protect it: Clerk (authentication), Neon (database hosting), Vercel (application hosting), Razorpay (payments), Cloudflare R2 (file storage), Anthropic (AI processing of content you submit to AI features), Resend (delivering the invoice emails and reminder digests you or your customers receive), Upstash (rate limiting), Inngest (scheduled jobs such as reminders), and Sentry (error reporting). We do not sell your data to anyone, and we do not give any provider your accounting data for advertising or for training their models. We may disclose data if required by law or a valid government request.

4. Where your data is processed

[PENDING LEGAL REVIEW] Your accounting records are stored in Singapore. Some of the providers listed above process limited data in other countries:

  • Resend(email delivery) — Japan. Receives the recipient's email address and the contents of the message being sent.
  • Sentry (error reporting) — United States. Receives technical error details only; see below.
  • Clerk (sign-in) — United States. Receives your name, email address and login activity.
  • Anthropic (AI features) — United States. Receives only what you submit to an AI feature, and the ledger figures that feature needs to answer you.
  • Neon (database) and Upstash (rate limiting) — Singapore.
  • Vercel (hosting) and Cloudflare R2 (uploaded files) — global content networks, with data served from the location nearest you.
  • Razorpay (payments) — India.

[PENDING LEGAL REVIEW] We do not send your financial or identity data to our error-reporting provider. Before an error report leaves PaySir, GSTINs, PAN numbers, bank account numbers, UPI IDs, rupee amounts, invoice sharing links, request contents, cookies and authorisation headers are removed and replaced with placeholders. Errors are attributed to your company and never to you as an individual — no name, email address or user identifier is included. We do not record your screen or session.

5. Data retention and deletion

Financial records use soft-deletion and audit logging by design — accounting data is marked deleted rather than destroyed, so your books remain consistent and auditable. If you close your account, we delete or irreversibly anonymise your personal data within 90 days, except records we must retain under Indian law (e.g. tax and payment records).

6. Security

Data is encrypted in transit (TLS) and at rest by our hosting providers. Access is organisation-scoped: every record is tied to your company, and members of one company cannot access another's data. Payment webhooks are cryptographically verified.

7. Your rights

Under the DPDP Act you may access, correct, or request deletion of your personal data, withdraw consent, and nominate a person to exercise your rights. Write to us at the contact below; we respond within 30 days.

8. Children

PaySir is a business tool and is not intended for persons under 18.

9. Changes

We will notify you of material changes to this policy in-app or by email before they take effect.

10. Grievance Officer & contact

Grievance Officer: Aryan Kumar · Email: akaryankumar218@gmail.com · Phone: +91 91694 32006 · Address: Bhudha Park Road, Near Kanshi Ram Colony, Moradabad, Uttar Pradesh - 244001. We acknowledge complaints within 48 hours and resolve them within 30 days.