Privacy Policy

Cashflow OS · last updated 26 October 2026

Cashflow OS — the Android and iOS apps and the Cashflow OS Tally Connector for Windows — is provided by S. P. Techno Solution Private Limited ("SPTSPL", "we", "us"), India. This policy explains what we collect, why, and the choices you have. It applies to anyone who uses Cashflow OS.

1. What we collect

Your account: your mobile number (to sign you in), and the name and e-mail address you choose to add to your profile.
Your company: the business details you or the Tally Connector provide — company name, GSTIN, PAN, address, state and phone.
Your accounting data: when you connect the Tally Connector, it reads from TallyPrime on your PC and sends us your company's books: groups, ledgers and their balances, vouchers (sales, purchases, receipts, payments, journals), bill-wise outstanding, stock items, and the contact details stored on your ledgers (such as your customers' and suppliers' names, phone numbers, e-mail addresses, addresses, GSTINs and bank details). The connector changes your books only when you (or someone you invited) create or edit an entry in Cashflow OS: it then posts that entry into TallyPrime, and you can switch writing off in the connector.
What you and your team add in the app: documents (quotations, proforma invoices, purchase orders, delivery challans), items you create, showroom walk-ins, field visits, wishlists and sales orders — including the names, mobile numbers and other details of the customers you enter there.
Photos and images you choose to upload: item photos for your catalogue, and your logo, letterhead, footer and signature for documents. We receive only the pictures you pick; the app does not read your photo library otherwise.
Location, only at chosen moments: when a salesperson starts or ends a field visit, or starts or ends their working day (Field attendance), the app records where they are at that moment (with permission). It is not collected at any other time and never in the background. You can say no; the visit or day is saved without it. A customer's location may be saved from the first visit so the company can see whether later visits happened at the customer.
Attendance selfies, only if your company turns them on: a photo taken with the front camera when you start or end your working day. Only your company's owner and admins, and you, can see it.
Sign-in records: the time of each sign-in and a short device description (for example "CashflowOS Android"), so we can secure your account.
Technical logs: our servers record IP addresses, request times and errors, to keep the service running and to stop abuse.

We do not read your phone's contacts, files, SMS messages or call logs, we do not use advertising identifiers, and we do not track you across other companies' apps or websites. The camera is used to scan QR codes (to connect Tally or sign in on a computer) and barcodes, and to take item photos when you choose to; scanning happens on your phone and only photos you save are uploaded. The app contains no analytics, advertising or crash-reporting SDKs from other companies.

2. How we use it

To sign you in and keep your account secure.
To show you your own books: ledgers, statements, outstanding, cash and bank balances, reports, GST returns and forecasts.
To create the documents, entries, catalogues and links you ask for, and to send them where you choose (for example WhatsApp).
To let you share a company with people you invite (they see that company's data according to the role you give them).
To answer your support requests and to fix problems.

We do not sell your data, we do not show ads, and we do not use your accounting data for anything other than providing Cashflow OS to you.

3. Signing in with your mobile number

To prove a number is yours, the app asks you to send one SMS (or WhatsApp message) from that phone to our verification service, operated by SPTSPL. We receive the sender's number and the code in the message, nothing else. No one-time password is sent to you, and the app does not read your messages.

4. Who we share it with

People you invite to a company, as described above.
Service providers that run our infrastructure on our behalf, under confidentiality obligations: our hosting provider, and Cloudflare, which carries traffic between your devices and our servers. If you choose WhatsApp to verify your number, WhatsApp (Meta) handles that message.
Authorities, only when Indian law requires it.

We do not share your data with advertisers, data brokers or any other third party.

5. Where it is kept and how it is protected

All traffic between the apps, the Tally Connector and our servers is encrypted (HTTPS).
Each Tally company connected from a PC gets its own key, which can only upload that company's books, and which you can revoke.
On your phone, sign-in tokens are kept in the system's encrypted storage. A copy of your books may be saved on the phone so the app works offline; it is removed when you log out or delete your account.
On your PC, the Tally Connector keeps a copy of your books in your Windows user folder. Uninstalling the connector leaves this copy in place so nothing is lost by accident; delete the folder it names if you no longer need it.

6. How long we keep it

We keep your data while your account is active. When you delete your account, we delete it straight away from our live systems: your account, and every company you are the only member of together with all its synced Tally data. Companies you share with others stay available to them. Backups that may still hold deleted data are overwritten within 30 days. Technical logs and sign-in records are kept for up to 90 days.

7. Your choices and rights

See and correct: your profile and company details are in the app; your books come from Tally, so correct them in Tally and they sync again.
Stop syncing: switch a company off, or disconnect it, in the Tally Connector.
Delete your account: in the app, Settings → Delete account. Without the app, see how to request deletion.
Under India's Digital Personal Data Protection Act, 2023 you may also ask us for a summary of your data, ask us to correct or erase it, nominate someone to act for you, and raise a grievance with us — write to us at the address below.

8. Children

Cashflow OS is a business tool for adults. It is not meant for anyone under 18, and we do not knowingly collect data from children.

9. Changes

If we change this policy we will update the date above, and tell you in the app before a significant change takes effect.

10. Contact and grievances

S. P. Techno Solution Private Limited (SPTSPL) · sptspl.com
Privacy questions, data requests and grievances: [email protected]. We reply within 7 working days and resolve grievances within 30 days.