Data Policy

1. Purpose of This Data Policy

This Data Policy describes how Lekhapal Accounting (“we”, “our”, “us”) handles business and personal data generated through the use of our platform. It focuses specifically on data ownership, storage, processing, access, and retention.

2. Data Ownership

All data entered, uploaded, or generated by customers while using Lekhapal Accounting remains the exclusive property of the customer. We do not claim ownership over your business or accounting data.

Our role is limited to securely processing and storing data to provide the agreed services.

3. Data We Process

Business Data

• Invoices, bills, vouchers, and accounting records
• Inventory, stock movement, and pricing data
• Customer and supplier information
• POS orders, payments, expenses, and income records

User & System Data

• User profiles and role assignments
• Login activity and audit logs
• Device, browser, and usage metadata
• Application logs for monitoring and debugging

4. Data Processing

Data is processed solely to deliver platform functionality, including:

• Transaction processing and calculations
• Financial reporting and analytics
• Cloud synchronization across devices
• System performance monitoring
• Customer support and issue resolution

We do not process customer data for advertising or resale.

5. Data Storage & Location

• Data is stored on secure cloud infrastructure
• Production and backup data are logically separated
• Access is restricted to authorized systems and personnel only
• Backups are maintained to prevent data loss

6. Data Security Measures

• Encryption of data at rest and in transit
• Industry-standard password hashing
• HTTPS/TLS for all communications
• Role-based access control and tenant isolation
• Continuous monitoring for security threats

7. Multi-Tenant Data Isolation

Lekhapal Accounting uses a multi-tenant architecture. Each tenant’s data is logically isolated to ensure that no customer can access another customer’s data.

8. Data Access & Portability

• Customers can access their data through authorized accounts
• Export features may be provided for reports and records
• Administrative access is logged and audited

9. Data Retention & Deletion

Data is retained for as long as the customer maintains an active account or as required by applicable laws. Upon account termination, data is scheduled for secure deletion after a reasonable retention period, except where legally required to retain records.

10. Third-Party Data Processors

• Cloud hosting and infrastructure providers
• Payment gateway providers
• Email, SMS, and notification services
• Monitoring and logging services

All third-party processors are required to maintain appropriate security and confidentiality standards.

11. Updates to This Data Policy

This Data Policy may be updated periodically to reflect changes in technology, regulations, or platform functionality. Continued use of the service constitutes acceptance of the updated policy.