Effective date: 18 July 2026 · Last updated: 18 July 2026
1. Who we are
AutoTally.ai is operated by Yaduka Agrotech Limited, having its registered and corporate office at Room 10A, Poonam Building, 5/2 Russell Street, Kolkata 700071, West Bengal, India (“AutoTally”, “we”, “us”). Contact our privacy and grievance team at privacy@autotally.ai and +91 81007 11946. This Policy applies to our website, applications, APIs, MCP services, desktop bridge, support, and related services (the “Services”).
2. Our role
For account, website, billing, support, and service-usage information, we determine why and how data is processed and act as the data fiduciary. For accounting and business data that a customer connects, syncs, submits, or instructs us to process, the customer generally determines the purpose and means; we process that data on the customer’s instructions. Customers must provide required notices and establish a lawful basis for personal data in their Tally data.
3. Data we process
- Account and identity: name, email, phone, authentication identifiers, profile, organisation, workspace, role, and invitations.
- Google user data (when connected): Google account profile details (name, email address, profile picture, account ID) for OAuth sign-in; Google Contacts / People data (names, email addresses) when imported for invitations; and Gmail / Google Workspace data (email messages, threads, headers, attachments, labels, and metadata) when the user connects their Gmail account or uses our Gmail MCP server integration.
- Tally and business data: companies, ledgers, vouchers, inventory, GST and tax fields, bank and counterparty information, reports, attachments, and other data selected by the customer.
- Bridge and device: bridge identifiers, connection status, Tally version, company selection, IP address, device/browser details, diagnostics, and sync metadata.
- Usage and audit: API/MCP calls, agent actions, write intents, approvals, timestamps, errors, and security events.
- Billing: plan, invoices, GST details, payment status, and transaction references. Payment credentials are handled by the payment provider, not stored by us.
- Communications: support requests, feedback, and preferences.
4. Why we process data
We process data to provide and secure the Services; authenticate users; connect and sync Tally; execute authorised reads and writes; maintain mirrors, audit logs, and approvals; bill customers; provide support; prevent fraud and abuse; improve reliability; comply with law; and send service communications. Optional marketing is sent only where permitted and can be withdrawn.
5. Consent and other permitted processing
Where consent is the basis, the request will be specific, informed, clear, and limited to necessary data. Consent may be withdrawn as easily as it was given, without affecting earlier lawful processing. Some processing is necessary to provide a service you request, meet legal obligations, protect systems, or pursue other uses permitted by applicable law.
6. AI processing
AI features send only the minimum relevant prompt, document, or accounting context to configured enterprise model providers (such as Anthropic, OpenAI, and Google Cloud Vertex AI) under strict zero-data-retention and zero-model-training commercial agreements to produce an answer or proposed action. Customer accounting data is never used to train or fine-tune foundation models. We do not permit an AI-generated write to bypass configured validation, permissions, or approval gates.
7. Google API Services & Limited Use Disclosure
AutoTally allows users to connect Google services, including Google OAuth for secure sign-in, Google People API for contact selection, and Gmail / Google Workspace APIs via our Model Context Protocol (MCP) integrations to automate accounting workflows (such as retrieving invoices/bills from emails, extracting receipt data for voucher drafts, or emailing statements to counterparties with explicit human approval).
- Limited Use adherence: AutoTally’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- No AI/ML model training: We do not use Google user data (including data received via Google Workspace or Gmail APIs) to develop, improve, fine-tune, or train generalized, foundation, or non-personalized artificial intelligence (AI) and/or machine learning (ML) models.
- No sale of Google user data: We never sell Google user data to data brokers, information resellers, or any other third parties.
- No advertising or credit scoring: We do not use or transfer Google user data for targeted advertising, personalized advertising, retargeted advertising, interest-based advertising, determining credit-worthiness, or lending purposes.
- Strict transfer limits: We do not transfer or disclose Google user data to third parties except as strictly necessary to provide or improve user-facing features of AutoTally.ai, comply with applicable law, or as part of a corporate reorganization or asset transfer with advance notice to users.
- Revocation and deletion: You can disconnect Google integrations and revoke AutoTally’s access at any time through your AutoTally Workspace Settings or via Google Account Third-Party Permissions. Upon disconnection or upon submitting a deletion request to privacy@autotally.ai, all associated Google OAuth tokens and cached data are permanently deleted within 30 days.
8. Sharing and processors
We share data only as needed with contracted infrastructure, database, authentication, hosting, observability, communications, payment, and AI providers; professional advisers; a successor in a corporate transaction; or authorities where legally required. Processors are bound by appropriate confidentiality, security, and data-processing terms. We do not sell personal data.
9. International processing
Some processors may store or access data outside India. We use contractual and technical safeguards and comply with restrictions notified under Indian law. Customers with localisation requirements should contact us before enabling affected integrations.
10. Retention and deletion
We retain account data while the account is active; mirrored Tally data while required to provide the Service; security and audit records for 180 days (or longer where required by law); billing and tax records for the statutory period required by Indian tax laws; and system backups for 30 days. On a valid deletion request or account closure, data is deleted or anonymised unless retention is necessary for security, dispute resolution, contractual commitments, or law.
11. Security and incidents
Controls include encryption in transit (TLS 1.3), credential hashing and token encryption at rest (AES-256), least-privilege access, outbound-only bridge connectivity, company-scoped operations, dry runs, idempotency, approval gates, logging, monitoring, and backups. No system is perfectly secure. Where required, we will notify affected individuals and the Data Protection Board of India of a personal data breach in the prescribed manner.
12. Your rights
Subject to applicable law (including the Digital Personal Data Protection Act, 2023), you may request a summary of personal data and processing, correction, completion, updating, erasure, withdrawal of consent, grievance redressal, and nomination of another individual to exercise rights in case of death or incapacity. Submit requests to privacy@autotally.ai. We may verify identity and retain data where legally necessary. Please first use our grievance process before escalating to regulatory authorities.
13. Children
The Services are for businesses and are not directed to persons under 18. Do not provide children’s personal data unless legally authorised and necessary for a customer’s legitimate business process. Contact us if such data was submitted improperly.
14. Cookies
We use essential cookies for authentication, security, workspace preferences, referral attribution, and session continuity. We do not use third-party advertising or cross-site behavioral tracking cookies.
15. Grievances and changes
Grievance Officer: Pragati Singh, Company Secretary, Room 10A, Poonam Building, 5/2 Russell Street, Kolkata 700071, West Bengal, India, Email: grievance@autotally.ai, Phone: +91 81007 11946. We aim to acknowledge complaints within 24–48 hours and resolve them within the period mandated by applicable law. Material Policy changes will be communicated through the Service or registered contact details.