Privacy Policy

This policy covers the KyDec website and application. It applies to two different groups, and the distinction matters throughout:

• Account holders — the people who sign up, sign in and use the product. We decide what to collect about you, so we are the controller of that data.
• Your business records — the invoices, contacts, stock and ledgers you put into the product. You decide what goes in and how long it stays. We only process it on your instructions, as described in the Terms of Service.

• Account details — name, work email, phone number, country and the company you create. Passwords are stored only as a bcrypt hash and are never readable by us.
• Google sign-in — if you use it, we receive your name, email address and profile picture from Google. We do not receive your Google password or access anything else in your account.
• Business records you enter — documents, contacts, items, ledgers and any files you upload.
• Usage and technical data — pages visited, actions taken, IP address, browser and device, and server logs. Used to keep the service running and to find faults.
• Support correspondence — what you send us when you ask for help, and our replies.

We do not buy personal data from brokers, and we do not ask for identity documents or payment card numbers directly — card details go to our payment processor, never to our servers.

The contacts you keep in KyDec — clients, vendors, employees, leads — are people too. When you add them, you are the one who decided to hold their details, so it is on you to have a reason to and to tell them where it is kept.

• We process those records only to run the features you use on them: invoices, statements, payroll, reminders, greetings.
• We never contact your customers or staff for our own purposes, and we never add them to a mailing list of ours.
• If one of them asks us for their data, we will pass the request to you, because you control that record.

• To provide the product and keep your account secure.
• To detect and investigate abuse, fraud and outages — the lawful basis is our legitimate interest in a service that stays available.
• To send service messages you cannot opt out of: password resets, billing notices, security alerts and material changes to this policy.
• To send product news, which you can opt out of at any time from your notification settings.
• To meet legal and tax obligations that apply to us as a business.

AI features read the documents you give them — a photographed bill, an expense line, a bank statement row — to fill fields in and to suggest ledger codes. KyDec AI, the assistant, answers questions about your own figures, about how to do something in KyDec, and about KyDec’s error messages.

• Your business records are not used to train general-purpose models, ours or anyone else’s.
• Corrections you make improve the suggestions inside your own company’s data only. They do not leak into another customer’s account.
• AI output is a suggestion. Nothing is posted, paid or approved without a person confirming it.

How KyDec AI, the assistant, handles what you ask it:

• What it sends to the AI model — KyDec AI uses Claude, a model made by Anthropic. Claude is sent the question you type, passages from KyDec’s own help guides, and, when you carry on a chat, the earlier questions you asked in it. Anthropic processes this outside India. It does not use it to train its models, and keeps it only for a limited time.
• What it does not send — your figures are read from your books by KyDec’s own software, with your own permissions, and placed in the answer by KyDec. They are not sent to the AI model, and neither are your clients’, vendors’ or items’ records. A name you type into a question is part of that question.
• Your chats — chats are stored with KyDec in India. Only you can see your chats, and you can delete any of them. Nobody at KyDec reads them to run the assistant.
• Talking to a person — a conversation is sent to KyDec support only when you press Send to support. It goes with your name, your email address and your business’s name. Phone numbers, email addresses, GSTINs, PANs and bank numbers written in it are masked first.
• Speaking a question — if you use the microphone, your browser turns what you say into text. In Chrome, Google’s speech service does this. KyDec does not record or keep any sound. Read aloud uses your browser’s own voice; nothing is sent anywhere for it.
• What it remembers — to suit you better it keeps three habits of yours in each business: the suggested questions you ask most, what you mean by “pending payments”, and the period you usually ask for. You can see and clear them under What I remember.
• Counts — KyDec keeps counts of how the assistant is used (how many questions, of which kind, and whether an answer was marked helpful) without any of their words, for 180 days.

When you send a quotation, invoice, reminder or greeting from KyDec by email or WhatsApp, we send it on your behalf, to the address or number you chose.

• The message, its attachment and the recipient’s address or number pass through the delivery provider for that channel, and nothing more.
• Connecting a WhatsApp, Google or Meta account gives us only the access that channel needs to send for you. You can disconnect it at any time in Business Settings.

We do not sell personal data and we do not share it for advertising. We use a small number of processors to run the service — hosting, email delivery, payment processing and error monitoring. Each is bound by contract to use the data only to provide their service to us.

We disclose data to authorities only where we are legally required to, and we will tell you first unless the law forbids it. A current list of sub-processors is available on request from info@techbizsolution.co.in.

Who sees what inside your account is set by you. Roles and permissions are configured per company, and every change to a record is written to an audit trail with the user and timestamp. Our staff do not access your business records except when you ask us to for support, or where it is strictly necessary to fix a fault — and that access is logged.

Data is stored on servers in India. Some processors operate outside your country; where personal data is transferred internationally, we rely on standard contractual clauses or an equivalent safeguard. See the security page for how the data is protected in transit and at rest.

• While your account is open — your business records stay until you delete them. Accounting records are meant to be kept, so we do not expire them for you.
• After you close an account — records are deleted within 30 days. Export first; we cannot recover them afterwards.
• Backups — deleted data persists in encrypted backups for up to 35 days, then ages out.
• Logs — retained for 90 days, except where an investigation requires longer.
• Invoices to you — kept as long as tax law requires us to keep them.

You can access, correct, export or delete your personal data, object to processing based on legitimate interest, and withdraw consent where consent is what we relied on. Most of this is self-service: your profile is editable in settings, and a full export of your business data is available at any time without asking us.

For anything else, write to info@techbizsolution.co.in. We respond within 30 days. If you are an employee of a customer and want your data removed, ask that company first — they control their own records.

We handle personal data in line with India’s Digital Personal Data Protection Act, 2023. Under it, as a person whose data we hold, you can:

• Ask for a summary of the personal data we hold about you and what we do with it.
• Have it corrected, completed, updated, or erased when it is no longer needed.
• Withdraw consent you gave, as easily as you gave it.
• Nominate someone to exercise these rights for you if you cannot.
• Have a grievance heard by us first, and then by the Data Protection Board of India.

If you are in another country, the rights your own law gives you apply as well, and we will honour them the same way.

Complaints about how we handle personal data go to our grievance contact at info@techbizsolution.co.in with the subject “Privacy grievance”, or by post to KyDec, TBS 111, Patrakar Colony, Shastri Nagar, Jodhpur, Rajasthan 342011. We acknowledge it, tell you who is handling it, and respond within 30 days.

We use cookies and local storage to keep you signed in, remember interface preferences such as your sidebar order, and count page views in aggregate. We do not run advertising or cross-site tracking cookies, so there is no consent banner to dismiss. Blocking the sign-in cookie will sign you out.

KyDec is business software and is not directed at anyone under 18. We do not knowingly collect their data; if we learn we have, we delete it.

If we change this policy in a way that materially affects you, we will email account holders at least 30 days before it takes effect. Minor clarifications are published here with a new date at the top.

Questions, complaints and data requests: info@techbizsolution.co.in, or KyDec, TBS 111, Patrakar Colony, Shastri Nagar, Jodhpur, Rajasthan 342011. If we cannot resolve a complaint, you may raise it with your local data protection authority.