Privacy policy

This policy has not yet been reviewed by a lawyer, and the entity and contact details are still to be confirmed. It is accurate about what the product does with data.

For your team's accounts, Varynt (India) is responsible for the data. For your clients' data, you are responsible and we process it on your behalf — your workspace's settings are your instructions to us. We answer to India's Digital Personal Data Protection Act.

Name, email, role, sign-in times, two-factor settings if used, and the actions each person takes (the audit log your Owner and Admins can read). Held to run the account.

What you enter to invoice them: name, GSTIN and PAN, billing and shipping addresses, contact names, emails and phone numbers, and the documents and payments you record against them. Your clients' data is yours. We use it only to run your workspace — never for marketing, never shared with other Varynt products or third parties.

When a client opens a document link, we record that it was viewed and when, so you can see it; we set no tracking cookies on those pages.

If you use Purchases, we hold what you enter to record what you buy: the vendor's name and legal name, GSTIN and PAN, GST treatment, billing address, one contact person's name, email and phone, and the purchase orders, bills, payments and expenses you record against them. It is yours in exactly the way your clients' data is, and we use it only to run your workspace.

We don't process payments, so we hold no card or bank credentials of your clients. Your own UPI ID and bank details are stored because they are printed on your invoices. We keep no card on file for you: your subscription is invoiced.

If you use Banking, we also hold the accounts you set up and the statement lines you import: an account's name, bank, IFSC and only the last four digits of its number — the rest is masked in the database as well as on screen, because reconciling a statement never needs it. There is no connection to any bank: nothing is fetched, and nothing here can move money.

Documents you send by email go through our mail service to the address you choose, and each send is logged with its status. WhatsApp sharing opens WhatsApp on your own device; nothing passes through us.

• Issued invoices, quotations and payments: for the life of the workspace. Tax law expects you to keep invoices for several years, so export before closing a workspace.
• After a workspace closes: its data is deleted within 30 days, and from backups as they roll over.
• Audit log: kept for the life of the workspace and not editable.
• In-app notifications: cleared some days after being read.

Exact windows will be stated here before publication.

Our sub-processors are our hosting provider and our email relay; we will tell your Owner before adding another.

Your team can see and correct their own profile. Requests about your clients' data go to you, and the product lets you correct, export or delete what you hold. For anything else, write to invoice@varynt.in.

This marketing site sets no cookies, keeps nothing in your browser except your light or dark choice, loads its fonts from itself, and makes no third-party requests. The contact form sends what you type to us and nowhere else.

We will email your Owner before a material change to this policy takes effect.