Privacy Notice

• Account: name, email, phone number, and your Google profile name and photo if you sign in with Google.
• Business: business name, GSTIN, PAN, address, and the documents you upload.
• Accounting data: entries, ledgers, invoices, bank statements, bills, Form 168 / 130 PDFs and the like.
• Payments: order amounts and transaction IDs. Card and UPI details are handled by the payment gateway; we never see them.
• Messages: WhatsApp messages and emails you send us or send through FreWork, alerts you switch on (such as overdue-payment reminders sent to your own linked number), and one-time sign-in links we send to that number at your request.
• Usage: pages visited, device and browser, error logs, and counts we need to run your plan (such as how many bank-statement pages the AI has read this month).

We do not store passwords for the GST portal or your bank. For the Income-tax portal, the PAN, password and OTP you type are passed to FreWork's own portal service to log in and fetch your documents. The password is saved only if you tick “Remember password”: it is then encrypted (AES-256) with a key kept only on our servers, used only to log in when you ask for a fetch, and deleted when you press “Forget saved password” or close your account. OTPs are never stored.

• To provide the service you signed up for: keeping your books, preparing drafts and reports, reminders. Basis: your consent given at sign-up.
• To take payment and issue GST invoices. Basis: consent and legal obligation.
• To answer your questions and give support. Basis: consent.
• To keep the service secure and fix errors. Basis: legitimate use under section 7 of the DPDP Act.
• To meet legal duties, such as tax record-keeping or a lawful order. Basis: section 7.
• To send product news. Only if you opt in, and you can opt out from any email.

We do not sell personal data, use it for advertising profiles, or use your data to train AI models.

When you use FreBook chat, WhatsApp bookkeeping, or upload a bill, invoice or bank statement, the text or document and the ledger names needed for the draft are sent to an AI provider listed below to produce a draft. Long PDF statements are split in your browser and sent in small batches of pages; Excel and CSV statements are read by FreWork itself, without an AI provider. Nothing is posted to your books until you confirm it. Providers are used under API terms that do not permit training on this data. See the AI Disclaimer.

Only with the processors that run the service, a professional you place an order with (only what that order needs), or an authority where the law requires it. Our processors:

Some processors store data outside India. We transfer data only to countries not restricted by the Government of India under section 16 of the DPDP Act.

• Account and accounting data: while your account is active, then 30 days to let you export it, then deleted.
• Invoices we issue to you and payment records: 8 years, as required by the CGST Act and the Income-tax Act.
• Security and error logs: up to 1 year.

Data is encrypted in transit (HTTPS) and at rest by our database provider. Each business's data is separated by row-level security, staff access is limited, and posted entries keep an audit trail. If a personal data breach happens, we will inform the Data Protection Board of India and affected people as the DPDP rules require.

• Access a summary of your personal data and how it is processed, and who it was shared with.
• Correct, complete or update it.
• Erase it, unless we must keep it by law.
• Withdraw consent at any time, as easily as you gave it. Processing done before withdrawal stays lawful; some features may stop working.
• Nominate another person to exercise these rights if you die or become unable to.
• Raise a grievance with us, and then with the Data Protection Board of India.

To use a right, email legal@frework.online from your registered email. You can also download your reports and ledgers from the app at any time.

FreWork is for people aged 18 and over. We do not knowingly process children's data. If we learn we have, we delete it.

We use essential cookies to keep you signed in and remember your active business, and basic analytics to understand usage. No advertising cookies.

[to be added], Grievance Officer, FreWork Business Solutions, [to be added]. Email legal@frework.online. We acknowledge within 48 hours and respond within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.

We will post changes here and email you about material ones before they apply.