1. Introduction
Welcome to Finolyst. This Privacy Policy explains how Finolyst Services India Pvt. Ltd. (“Finolyst”, “we”, “us”, “our”) collects, uses, stores and protects your information when you use our website https://finolyst.com, our services, and communications.

We comply with the Information Technology Act, 2000, Information Technology Rules, 2011 and the Digital Personal Data Protection Act, 2023 (DPDP Act) of India.

2. Information We Collect
a) Information you provide: Name, company name, email, phone, PAN, GSTIN, business financial data, KYC documents for incorporation, invoices, bank statements, payroll data, and any data shared for service delivery.
b) Automatically collected: IP address, browser type, device info, pages visited, time spent, via cookies and Google Analytics.
c) Communication data: Emails, WhatsApp chats, support queries, call recordings (with consent).

3. How We Use Your Information

• To provide services: Virtual Accounting, Taxation, Compliance, Audit Schedule Preparation, Payroll, Business Setup, M&A Support.
• To prepare quotations, SoW, invoices and manage payments.
• To file GST, TDS, Income Tax and ROC compliances on your behalf.
• To send compliance calendar reminders, updates and newsletters.
• To improve website, security and client support.
• To meet legal and regulatory obligations.

We do NOT sell your personal data.

4. Legal Basis and Consent
We process your data based on your explicit consent, for performance of contract (service agreement), and for legal compliance. By sharing documents with us, you consent to processing.

5. Data Sharing and Disclosure
We share data only on a need-to-know basis with:

• Payment gateways, accounting software providers (Tally, Zoho, QuickBooks)
• Government portals: GSTN, TRACES, Income Tax, MCA
• Auditors, consultants appointed with your consent
• IT and cloud service providers under NDA

All third parties are bound by confidentiality.

6. Data Security
We implement industry-standard measures: encrypted storage, role-based access, 2FA on portals, NDA-bound staff, secure file vaults, and regular access reviews. However, no method is 100% secure.

7. Data Retention
We retain client financial data for 8 years as per Companies Act, 2013 and Income Tax Act, or as specified in your SoW. Personal inquiry data is retained for 3 years. You can request deletion where legally permissible.

8. Your Rights Under DPDP Act 2023
You have the right to access, correct, update, erase, and withdraw consent. To exercise rights, email info@finolyst.com. We will respond within 30 days.

9. Cookies Policy
We use essential cookies for website function and analytics cookies to understand usage. You can disable cookies in browser settings, but some features may not work.

10. Children’s Privacy
Our services are not directed to individuals under 18.

11. International Data Transfers
If you are a US client, your data may be processed in India for service delivery with adequate safeguards.

12. Changes to Policy
We will update this policy and post the new date on this page. Continued use means acceptance.

13. Grievance Officer
As per IT Rules, 2011:
Grievance Officer: Finolyst Services India Pvt. Ltd.
Email: info@finolyst.com
Website: https://finolyst.com