Privacy Policy

Astryan Labs Private Limited is a private limited company incorporated in India, with its registered office at 192, Whitefield Road, B Narayanpura, Mahadevapura, Bangalore North, Bangalore 560048, Karnataka. For any question about this policy or your data, write to shravan.raikar@astryanlabs.ai.

For the purposes of the Digital Personal Data Protection Act, 2023, we act as the Data Fiduciary for personal data we determine the purpose and means of processing for. Where we process business records on behalf of a customer, we act as a Data Processor on that customer’s instructions.

This website does not use analytics, advertising or tracking cookies, and sets no cookies of its own. Pages are served as static files, and the fonts are served from this domain rather than a third-party CDN, so loading the site does not disclose your visit to anyone else.

When you contact us by email, we receive whatever you send us — typically your name, email address, and the content of your message. We keep that correspondence so we can reply and maintain a record of the conversation.

Where you use one of our products, we collect:

• Account data — name, email address, password hash, role, and the business you belong to.
• Business records you upload — receipts, invoices, bank statements, payroll files and similar documents, together with the transactions derived from them.
• Usage and audit data — a record of actions taken in the product, including decisions made by automated systems, retained as an append-only audit trail.

Uploaded business records may contain personal data about third parties, such as your employees, customers or vendors. Where they do, you remain responsible for having a lawful basis to share that data with us, and we process it only to provide the service to you.

• To provide, operate and support the products you use.
• To maintain the audit trail and other records we are contractually or legally required to keep.
• To secure our systems, prevent abuse, and investigate incidents.
• To reply to you when you contact us.
• To meet obligations under applicable law, including tax and company law.

We do not sell personal data. We do not use your business records to train publicly available machine-learning models.

Our products use automated systems, including large language models, to read documents and propose or record accounting entries. Where the system’s confidence is low, the decision is routed to a person for review rather than recorded automatically. Every automated decision is written to an audit trail that identifies it as such, and you can review, correct or reverse it.

We share personal data only with service providers who help us run the service — cloud hosting and storage, model inference providers, email delivery, and payment processing — and only to the extent needed for them to perform that function. These providers may process data outside India; where they do, we rely on contractual protections with the provider.

We may also disclose data where required by law, court order, or a valid request from a public authority, and in connection with a merger, acquisition or sale of assets, in which case we will tell you before your data becomes subject to a different policy.

We keep account and business records for as long as your account is active, and afterwards for as long as we are required to by law — accounting and tax records in India generally carry a retention obligation of eight years. Audit trail entries are append-only by design and are not deleted individually, because their integrity depends on the chain remaining unbroken. Correspondence is kept for as long as it is useful to the relationship.

Data is encrypted in transit. Access to production systems is restricted to those who need it. Roles inside the product separate who can enter data from who can approve or review it. No system is perfectly secure, and we do not claim otherwise; if a breach affects your data we will notify you and the Data Protection Board of India as required under the DPDP Act.

Subject to applicable law, you may ask us to give you a copy of your personal data, correct data that is inaccurate or incomplete, erase data we no longer have a basis to keep, or nominate another person to exercise these rights on your behalf. You may also withdraw consent where our processing relies on it.

Write to shravan.raikar@astryanlabs.ai and we will respond within a reasonable period. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

Our products are for business use and are not directed at children. We do not knowingly collect personal data from anyone under 18.

If we change this policy we will update the date at the top of this page. Where a change materially affects how we handle your data, we will tell you directly.