Digital NexusPrivacy Policy
This Privacy Policy explains what personal data Digital Nexus (MCP) collects, why we collect it, who we share it with and the choices you have. The Service at mcp.digitalnexus.tech is operated by Digital Nexus ("Digital Nexus", "we", "us" or "our"). We follow the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and the rules made under them.
The short version
- We collect what we need to run your account and show your Tally reports, and nothing more.
- We never sell your data, and we do not use advertising trackers.
- Your Tally data is visible only to your organisation's team and, if you connect it, to Claude AI when you ask it a question.
- You can delete your account and all synced data yourself, at any time, from Settings.
1. Data we collect
| Category | What it includes |
|---|---|
| Account details | Your email address, name if you provide it, and sign-in records (one-time code and passkey records). For your organisation: business name, mobile number and GSTIN. |
| Tally data you sync | Company names, ledger and group names, balances, vouchers (date, type, number, party, amounts, narration, items), stock items, and contact details stored on party ledgers in Tally, such as GSTIN, phone and email. |
| Team details | Email addresses of team members you invite, and their roles. |
| Billing records | Plan, billing period, subscription status, and payment records from Razorpay (payment ID, amount, method type, status and date). We do not receive or store full card numbers, UPI PINs or bank passwords. |
| Technical data | Sync logs (time, number of records, errors), the name you give each sync key, and the IP address, browser and device information that our hosting provider records for security. |
| Messages to us | Anything you send us by email or phone, and the optional reason you give when you delete your account. |
2. Your Tally data and your customers' data
Your Tally data belongs to you. It may include personal data about your customers, suppliers or employees. For that data, you decide what is synced and why, and we process it only on your instructions to provide the Service. You are responsible for having a lawful basis to share it with us. The Connector reads data from Tally only; it never changes your books.
3. How we use your data
- To create and secure your account, and to let you and your team sign in.
- To sync, store and display your Tally data as dashboards and reports.
- To answer questions through Claude AI, when you have connected it.
- To run your free trial and subscription, process payments through Razorpay and issue GST invoices.
- To send essential service messages, such as sign-in codes, payment receipts, failed payment notices and important changes to the Service or these policies. We do not send marketing emails without your consent, and you can opt out of them at any time.
- To keep the Service secure, prevent fraud and misuse of free trials, fix problems and improve features.
- To meet legal obligations, such as tax and accounting record keeping, and to respond to lawful requests from authorities.
We process your personal data on the basis of the consent you give when you create an account, and for legitimate uses permitted under Indian law, such as meeting legal obligations.
4. Who we share data with
We do not sell or rent your personal data. We share it only with service providers that help us run the Service, and only as much as they need:
| Provider | Purpose |
|---|---|
| Cloud hosting provider | Hosting the website, database and sign-in system, and sending sign-in emails. |
| Razorpay Software Private Limited | Processing subscription payments and payment mandates. Razorpay handles your card, UPI and bank details under its own privacy policy. |
| Anthropic (Claude AI) | Only if you connect Claude: the parts of your Tally data needed to answer each question you ask are sent to Claude. |
We may also disclose data when required by law, court order or a lawful request of a government authority, or to protect the rights and safety of our users and the Service. If our business is transferred to another entity, your data may be transferred with it, subject to this Policy.
Some of these providers may store or process data on servers outside India. Where this happens, we rely on providers that protect data with appropriate security and contractual safeguards, in line with Indian law.
5. Cookies and local storage
We use only essential cookies that keep you signed in and protect your session. The dashboard also stores small preferences in your browser, such as the company you last selected. We do not use advertising or cross-site tracking cookies.
6. How we protect your data
- All data travels over encrypted HTTPS connections.
- Each organisation's data is kept separate, and every request checks that you belong to that organisation.
- Sync keys are stored only as one-way hashes, and you can revoke them at any time.
- The Connector has read-only access to Tally and does not open any port on your PC.
- Access to production systems is limited to people who need it to run the Service.
No system is completely secure. If a personal data breach affects you, we will inform you and the relevant authorities as required by law.
7. How long we keep data
- Tally data is kept while your account exists. It is erased when you remove a company or delete your account. If an account has had no active trial or plan for more than 180 days, we may delete its synced Tally data after notifying the owner by email.
- Account and team details are deleted when the account is deleted.
- Payment and invoice records are kept for as long as Indian tax and accounting laws require, currently up to 8 years.
- A record that a free trial was used (the email address only) is kept to prevent repeated trials.
- Security logs are kept for a limited period by our hosting provider.
8. Your rights
Under the Digital Personal Data Protection Act, 2023, you have the right to:
- get a summary of the personal data we hold about you and how we use it;
- correct, complete or update your personal data (you can edit business details in Settings);
- erase your personal data (the account owner can delete the account from Settings > Delete account);
- withdraw your consent, which will mean we can no longer provide the Service to you;
- nominate another person to exercise your rights in case of death or incapacity;
- raise a grievance with us, and if you are not satisfied, with the Data Protection Board of India.
To use these rights, email us at our support email from the email address on your account. We may need to verify your identity before acting on a request.
9. Children
The Service is meant for businesses and is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us personal data, please contact us and we will delete it.
10. Changes to this Policy
We may update this Privacy Policy from time to time. We will post the new version on this page with a new "Last updated" date, and notify account owners by email of any significant change.
11. Contact and Grievance Officer
For any privacy question, request or complaint, contact our Grievance Officer:
- Grievance Officer
- Designated Grievance Officer
- Operated by
- Digital Nexus
- Address
- —
- our support email
- Phone
- —
We will acknowledge your request within 48 hours and respond within 15 days.