Who this policy covers
This policy applies to visitors, people making enquiries, account holders, business owners and stakeholders, authorised workspace users, service clients and people whose information is supplied for a legitimate engagement.
StartupPact is operated by Happyhands Accounting Solutions Private Limited, which is responsible for the processing described here.
Information we collect
Depending on the service, we may collect names, contact details, identity records, addresses, signatures, photographs, business structure and activity, CIN, PAN, TAN, GSTIN, bank or payment references, director or shareholder information, employment records, financial information, contracts, notices, filings and uploaded documents.
We also keep enquiry messages, quotations, orders, invoices, service status, consent and preference records, support conversations, account activity, device/browser details, IP address and security logs.
Where information comes from
Most information comes from you or an authorised colleague. We may also receive limited information from Google sign-in, Razorpay, assigned professionals, government portals or public registers when required to verify or complete an engagement.
If you provide information about another person, you confirm that you are authorised to do so and have given them appropriate notice.
How we use information
- Provide recommendations, quotations, registrations, filings, drafting, reviews, consultations and workspace tracking.
- Verify identity and authority, prepare invoices, process payments and maintain engagement records.
- Communicate document requests, filing status, statutory deadlines, support responses and service notices.
- Prevent fraud, secure accounts, troubleshoot errors, improve reliability and meet legal or professional obligations.
- Send optional updates or offers only where permitted; you may opt out of promotional messages.
Why processing is permitted
We process information to perform requested services and contracts, comply with legal obligations, respond to consented requests and pursue legitimate interests such as account security, service improvement, record keeping and dispute prevention.
Where consent is the basis, you may withdraw it prospectively. Withdrawal does not affect earlier lawful processing and may prevent a requested service from continuing.
AI-assisted features
StartupPact may use AI-assisted tools to organise information, explain general requirements, suggest services or help prepare drafts. Important outputs should be checked by a person before filing or reliance.
We limit the information sent to such tools to what is reasonably needed for the feature and apply access controls. StartupPact does not develop or fine-tune its own public model using identifiable client documents. Technology providers process inputs under their applicable contractual and privacy terms. Do not enter unnecessary sensitive information into open-ended AI questions.
Payments and third-party services
Razorpay processes payment credentials under its own privacy terms. StartupPact receives transaction identifiers, amount, status and limited payer details but does not store complete card details, UPI PINs or banking passwords.
Google sign-in and embedded Google Maps may receive device and request information when used. Links to external sites are governed by their own privacy policies.
Retention and deletion
We retain information while an account or engagement is active and afterwards for the period reasonably needed to provide records, handle queries, establish or defend claims, and meet tax, company, professional and other statutory obligations.
Retention differs by record type. When information is no longer required, we delete, anonymise or securely isolate it, subject to backup cycles and legal holds. An account-deletion request does not require deletion of records we must lawfully retain.
Your privacy rights
Subject to applicable law, you may ask for a summary of personal data and processing, correction of inaccurate data, completion of incomplete data, erasure where retention is not required, withdrawal of consent, and grievance redressal. You may also nominate another person to exercise relevant rights in circumstances recognised by law.
Send requests from your registered email and describe the account or service involved. We may verify identity and authority before responding.
Security and incidents
We use managed infrastructure, encrypted connections, access controls and operational safeguards appropriate to the nature of the information. Access is limited according to role and service need.
No online system is completely secure. Please report suspected unauthorised access promptly. Our Security and trust page provides more detail without making unverified certification claims.
Children’s privacy
StartupPact is intended for adults and business use. We do not knowingly solicit accounts from children. Information about a minor is processed only when legitimately required for a service and supplied by an authorised adult or as permitted by law.
Service locations and transfers
Our providers may process information in India or other locations where they operate. Where cross-border processing occurs, we use contractual and technical safeguards and comply with applicable transfer restrictions. We do not claim India-only storage unless it is independently confirmed for every provider.
Questions, grievances and changes
Privacy requests and grievances may be sent to Happyhands Accounting Solutions Private Limited using the company email below. Include your registered email, order reference if relevant, the request and enough detail for us to investigate.
We may update this policy as the service or law changes. Material changes will be posted here with a revised date and, where appropriate, communicated through the service.
