Privacy Policy

1. Who We Are (Data Fiduciary)

Bloghunch Software Pvt Ltd is the Data Fiduciary for personal data processed through Rezlance, incorporated under the Companies Act, 2013 and registered in India.

If you are a CA or CA firm using Rezlance to manage your clients' data, you are a separate Data Fiduciary for your clients' information and are responsible for obtaining appropriate consents from them.

2. Personal Data We Collect

2.1 Data You Provide

• Name, email address, and phone number
• Firm name and professional details (e.g., ICAI membership number)
• Billing details (processed securely via Razorpay)
• Client data, documents, and compliance records you upload

2.2 Data Collected Automatically

• IP address, device type, and browser information
• Session data, pages visited, and feature usage logs
• Cookies and similar tracking technologies

3. Purposes of Processing

• Service delivery: Providing, maintaining, and improving Rezlance
• Billing: Processing payments and issuing GST-compliant invoices
• Communication: Service notifications, product updates, and support
• Security: Detecting and preventing fraud or security incidents
• Legal compliance: Fulfilling obligations under applicable Indian laws

4. Security Measures

We implement technical and organisational safeguards under the IT (SPDI) Rules, 2011:

• End-to-end TLS 1.2+ encryption in transit and AES-256 encryption at rest
• Role-based access controls and multi-factor authentication
• Regular security audits and vulnerability assessments
• Automated backups with geo-redundant storage
• SOC 2 compliant cloud infrastructure

In the event of a data breach, we will notify you as required under applicable law.

5. Data Sharing

We do not sell your personal data. We share data only with:

• Service providers: Infrastructure, payment, and analytics partners bound by data processing agreements
• Legal authorities: When required by law or court order in India
• Business transfers: In mergers or acquisitions, subject to equivalent protections

6. Your Rights (DPDP Act, 2023)

• Access: Request a summary of personal data we hold
• Correction: Correct inaccurate or incomplete data
• Erasure: Request deletion, subject to legal retention obligations
• Grievance redressal: Raise complaints with our Grievance Officer
• Nomination: Nominate someone to exercise rights in case of incapacity

Contact support@rezlance.com to exercise any right. We respond within 30 days.

7. Data Retention

• Account data: retained for subscription duration plus 90 days for export
• Financial records: 7 years per Companies Act, 2013 and GST laws
• Security logs: 180 days

8. Cookies

We use essential cookies (login, security) and analytics cookies (usage insights). You may disable non-essential cookies via browser settings, though this may impact platform functionality.

9. Children's Privacy

Rezlance is not intended for persons under 18. We do not knowingly collect data from minors. If discovered, such data will be deleted promptly.

10. Cross-Border Transfers

We primarily store data in India. Where third-party processors handle data outside India, we ensure contractual safeguards under the DPDP Act, 2023 are in place.

11. Grievance Officer