Privacy Policy

Last updated: July 5, 2026

1. What we collect

Account data: name, email, phone, firm name, and password (stored as a salted hash, never in plain text).

Customer Data: client records, documents, and communications you and your clients upload or exchange through the Service, including WhatsApp messages sent via the platform.

Usage data: pages visited, features used, and device/browser information, collected to improve the Service.

Lead data: information submitted through our Contact, Book a Demo, and Signup forms, including honeypot spam-detection signals.

2. How we use data

To provide and operate the Service, including sending compliance reminders, processing documents, and enabling the client portal.

To communicate with you about your account, billing, and product updates.

To respond to support, sales, and demo requests submitted through our forms.

We do not sell your data or your clients' data to third parties.

3. Data storage and security

Production data is stored with providers offering data hosting in India-region availability zones. Sensitive fields, such as portal credentials stored on client records, are encrypted at rest.

Access to Customer Data is scoped by role: clients can only see their own records, and staff access is limited to what their role requires.

Passwords are hashed using bcrypt and are never stored or logged in plain text.

4. Third-party processors

We use sub-processors for specific functions: Resend for transactional email, Razorpay and Stripe for payment processing, and the WhatsApp Business Platform for messaging. Each processes only the data necessary for its function, under its own applicable terms.

5. Data retention and deletion

Account and Customer Data is retained for as long as your subscription is active. Upon cancellation, data remains available for export for 30 days, after which it is permanently deleted from production systems and backups on their normal rotation schedule.

6. Your rights

You may request a copy of your data, correction of inaccurate data, or deletion of your account data by contacting team@caassist.in. We will respond within 30 days.

7. Cookies

We use essential cookies/local storage for session management and theme preference (light/dark mode). We do not use third-party advertising trackers.

8. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified by email to account holders.

9. Contact

Privacy questions can be sent to team@caassist.in.