Skip to content

Legal

Privacy Policy

Your morning brief is built from some of the most sensitive data a business has. This policy explains what we collect, why, and the limits we put on ourselves.

1. What this policy covers

This policy applies to this website, the morning brief delivered on WhatsApp or email, the web app, and the follow-up questions you send us (together, “the Service”). It covers two kinds of data: personal data about you and the people you add as recipients, and business data read from the sources you connect.

2. Data we collect

Account and contact data

  • Your name, email address, business name, type of business and number of branches.
  • The names, email addresses and messaging handles of partners or managers you add as brief recipients.
  • Your brief preferences: delivery time, days, channel and language.
  • Billing details handled by our payment processor. We do not store full card numbers.

Business data from connected sources

  • Accounting entries such as sales, purchases, ledgers, receivables, payables and tax figures.
  • Bank balances and transactions, obtained only through read-only consent or statements you upload.
  • Point-of-sale bills, returns, discounts and payment modes.
  • Online store orders, refunds and stock levels, and ad account spend, clicks and conversions.
  • Spreadsheets you upload or link, such as targets and price lists.

Usage data

  • The questions you ask and the answers returned, so that follow-up questions keep their context.
  • Basic technical logs such as IP address, browser type and pages visited, used for security and to keep the Service working.

3. How we use it

  • To prepare and deliver your daily brief, answer your questions and show dashboards such as Cash Watch and Goal Tracker.
  • To detect unusual changes in your own data, measured against your own history.
  • To provide support, send service messages and process payments.
  • To keep the Service secure and to investigate misuse.

4. Limits we set on ourselves

  • Read-only access. We cannot move money, raise or edit invoices, or change any record in your connected systems.
  • No selling. We never sell, rent or trade your personal or business data.
  • No training for others. Your business data is never used to train AI models that serve other customers.
  • Only your chosen recipients. Briefs and alerts go only to the people you add, and each recipient sees only the branches you allow.

5. AI processing

Briefs and answers are written with the help of large language models. Your data is sent to these models only to produce your own brief or answer, under agreements that prohibit the provider from storing it beyond processing or using it for training. Answers show the records they are based on so you can check them, and alerts are prompts to check rather than conclusions.

6. Sharing with service providers

We share data only with providers that help us run the Service, such as cloud hosting, message delivery on WhatsApp and email, AI model providers and payment processing. Each is bound by contract to use the data only for the purpose we give them. We may also disclose data when required by law, and we will tell you unless the law prevents it.

7. Security

Data is encrypted in transit with TLS and at rest with AES-256. Access credentials for your sources are stored separately from your business data. Staff access is limited to what is needed for support and is logged.

8. Retention and deletion

Business data is kept for the history period of your plan so that comparisons such as this Diwali against last Diwali are possible. When you close your account, or ask us to delete your data, we remove it from active systems within 30 days and from backups within 90 days, except records we must keep for tax or legal reasons.

9. Your rights

You can access, correct, export or delete your personal data, withdraw consent for any connected source, and object to particular uses. Under the Digital Personal Data Protection Act, 2023, and other laws that apply to you, you may also raise a grievance with us. Write to us through the contact page and we will respond within 30 days.

10. Cookies

The website uses only the cookies needed to run forms securely and keep you signed in to the web app. We do not use advertising cookies.

11. Changes

If we change this policy in a way that affects how your data is used, we will tell account holders by email before the change takes effect.