Privacy Policy

What this policy covers

This policy describes how MyKonto, by Octet Solutions, handles information when you register, sign in, maintain business records or purchase access. A business using MyKonto is responsible for having authority to provide its customers' and other people's information.

This notice covers MyKonto. External providers, including sign-in and payment providers, explain their own processing in their privacy notices.

Information used by the service

Account information includes your name, email address, WhatsApp number and sign-in identifiers supplied by your selected login provider. Business information may include company details, GSTIN, addresses, logos, signatures and bank instructions you choose to add to invoices.

Your records may include buyers, products, invoice items, prices, taxes and related documents. Subscription records include plan, payment references and access dates. Payment details entered in Razorpay checkout are handled by Razorpay; MyKonto's subscription records are not a store of your full card credentials.

Requests to the service and its hosting providers may produce technical records, such as IP addresses, request times and errors, needed to deliver and troubleshoot the service. Avoid entering sensitive information that is unnecessary for your business records.

Why information is used

Information is used to identify your account, verify sign-in, maintain your business profile, save and retrieve records, generate invoice documents, manage purchased access, respond to support requests and investigate service problems or misuse.

Verification messages use the number supplied for that purpose. Buying access to MyKonto is separate from collecting payment from your customers.

Providers and sharing

MyKonto uses Google and Facebook for the sign-in options you select, Razorpay for checkout and payment verification, Fast2SMS for verification-message delivery, and Cloudinary for supported media. Render, Netlify and database infrastructure support hosting and storage. The information passed to a provider depends on the feature used.

Information may also need to be disclosed to comply with a valid legal requirement. We do not sell or rent your personal information. Service providers may process information outside your location; the service does not promise India-only storage.

Cookies and browser storage

Session cookies are used to keep you signed in. Browser storage may remember interface preferences, such as list settings. Blocking essential cookies can prevent sign-in and other account features from working.

External sign-in and payment pages may use their own cookies. Review their notices when using those services.

Keeping and deleting information

Account and business records are stored to provide the service. A deletion or account-closure request may need to be assessed against legal recordkeeping requirements, payment disputes, security needs and the rights of the business that owns the records.

Removing an item from the interface does not necessarily erase every stored copy or backup immediately. Contact support to discuss what can be deleted, what must be retained and how to obtain copies of important records. This draft does not promise a fixed deletion or backup-erasure period.

Your choices and requests

You can update information through the profile and business-record screens available to your account. Contact support to request access, correction or deletion of personal information, to raise a privacy concern, or to discuss withdrawing permission where processing depends on it.

We may need to verify your identity and authority over the records before acting. Withdrawing information required for a feature can prevent that feature from working. Send only the details necessary to explain your request, never a password or verification code.

Security and policy updates

Protect your sign-in account and device, and sign out on shared computers. No online service can guarantee that information is completely secure. Tell support promptly if you suspect unauthorised access.

An updated policy will show its review date and version. Material changes and any required notices or consents must be addressed before publication.