Privacy Policy

Last Updated: January 15, 2025

VentureSpin Pvt. Ltd. ("OneFinOps", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our compliance management platform.

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, phone number, company name, designation
• Business Information: GSTIN, CIN, PAN, company registration details, employee count, turnover
• Compliance Data: Filing dates, compliance status, documents uploaded
• Credentials: Government portal login details (stored encrypted)
• Payment Information: Billing address, payment method details (processed by payment providers)

1.2 Information Collected Automatically

• Device information (browser type, operating system)
• IP address and location data
• Usage data (features used, time spent, clicks)
• Cookies and similar tracking technologies

2. How We Use Your Information

We use the collected information to:

• Provide, maintain, and improve our compliance tracking services
• Send compliance deadline reminders via email, SMS, and WhatsApp
• Auto-detect applicable compliances based on your business profile
• Generate compliance reports and analytics
• Process payments and manage subscriptions
• Provide customer support
• Send product updates and marketing communications (with consent)
• Comply with legal obligations

3. Data Storage and Security

We implement industry-standard security measures:

• Encryption: AES-256 encryption for data at rest and TLS 1.3 for data in transit
• Data Location: All data stored in AWS Mumbai (ap-south-1) servers within India
• Access Control: Role-based access with multi-factor authentication
• Certifications: ISO 27001 certified, SOC 2 Type II compliant
• Audits: Quarterly penetration testing by third-party security firms

4. Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

• Service Providers: AWS (hosting), Razorpay (payments), MSG91 (SMS), Twilio (WhatsApp)
• Your Authorized Users: Team members and CAs you invite to your account
• Legal Requirements: When required by law, court order, or government authority
• Business Transfers: In case of merger, acquisition, or sale of assets

5. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Export: Download your data in a portable format
• Opt-out: Unsubscribe from marketing communications
• Restriction: Request limitation of data processing

To exercise these rights, contact us at privacy@onefinops.com.

6. Data Retention

Data Type	Retention Period
Account Information	Until account deletion + 90 days
Compliance Records	8 years (as per Indian tax laws)
Payment Records	7 years (as per financial regulations)
Usage Logs	2 years

7. Cookies

We use cookies for authentication, preferences, and analytics. See our Cookie Policy for details.

8. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

9. International Data Transfers

Your data is stored in India. If we transfer data internationally, we ensure appropriate safeguards are in place.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or in-app notification.

11. Contact Us

For privacy-related inquiries:

Data Protection Officer
VentureSpin Pvt. Ltd.
B209, The Platina, Gachibowli
Hyderabad, Telangana, India - 500032
CIN: U62099TS2025PTC205120
Email: privacy@onefinops.com