Privacy policy

1. Who we are

Surge Software Solutions Private Limited ("Surge", "we"), Sy No. 13/1, #155, Shop No. 2, 1st Floor, 4th Main, BEML Layout, Thubrahalli, Bengaluru, Karnataka 560066, India, is the data fiduciary (data controller) for CABookkeeper at cabookkeeper.com. Questions: [email protected].

2. What we collect

Account details: your name, email address and, if you sign in with Google, your profile picture. Google sign-in shares only your name, email and profile picture with us.

What you put into CABookkeeper: client records, bank statements, invoices, ledgers, documents, forms and messages, and the results CABookkeeper makes from them.

Connected accounts: if you choose to connect another service, we receive the data that connection needs to do the job you asked for. You can disconnect at any time.

Payments: if you add a prepaid balance, Razorpay processes the payment. We receive a payment reference and status, not your full card or bank details.

Technical data: IP address, browser, pages used, errors and timestamps, kept in server logs to run, secure and debug the service.

Enquiries: what you send through the site assistant or by email.

3. How we use it

To provide CABookkeeper, including its AI features; to sign you in, secure your account and prevent abuse; to send service emails such as password-reset links, alerts and receipts; to charge usage from your prepaid balance; to answer your questions; and to fix problems and improve the product.

We do not sell personal data, we do not show ads, and we do not share your data with advertisers. We do not use your content to train AI models for anyone else.

4. Where your data is processed

Our servers: CABookkeeper's application and database run on Surge's own servers in Bengaluru, India.

Network: traffic to this website passes through Cloudflare's global network, which may handle it outside India.

AI: AI features run first on Surge's own AI server in Bengaluru. Where a backup model (Anthropic's Claude, outside India) is used, it is used only as described on our pricing page and in your settings.

Email: service emails are sent through Resend, outside India.

When data leaves India, it goes only to the service providers listed in this policy, for the purposes listed here.

5. Service providers

Cloudflare: network and security for this website.

Resend: service email.

Razorpay: payments for prepaid balances.

Google: sign-in with Google.

Anthropic: cloud AI fallback (Claude), only when our own AI server fails.

Sarvam AI (India): client voice notes to text and replies read aloud.

Meta (WhatsApp Cloud API): WhatsApp messages sent from our server, when that is switched on.

Each provider receives only what it needs for its task, under its own terms and privacy policy.

6. Data we process for our customers

When a business uses CABookkeeper with data about your clients and their staff, that business decides why and how the data is used, and we process it on its behalf. Requests about that data should go to the business first; we will help it respond.

7. Cookies

CABookkeeper uses cookies to keep you signed in and secure your session. We do not use advertising or cross-site tracking cookies.

8. How long we keep data

We keep your account and content while your account is open. When you delete content or close your account, we delete it from our live systems, except where the law requires us to keep records (for example payment records) or where we need it to resolve a dispute.

9. Your rights (India's DPDP Act 2023)

Under the Digital Personal Data Protection Act, 2023, you can: ask what personal data we hold about you and how we use it; ask us to correct, complete or update it; ask us to erase it, and withdraw consent you gave; nominate another person to exercise these rights for you; and raise a grievance with us, and then with the Data Protection Board of India if you are not satisfied.

Email [email protected] from the address on your account. Most rights can also be used from your account settings.

Grievance officer: Venu Gopal Reddy Muvva, Director, Surge Software Solutions Pvt Ltd, Sy No. 13/1, #155, Shop No. 2, 1st Floor, 4th Main, BEML Layout, Thubrahalli, Bengaluru, Karnataka 560066, India. Email [email protected], phone +91 91600 57000.

10. Children

CABookkeeper is for adults and businesses. It is not meant for anyone under 18, and we do not knowingly collect children's data.

11. Security

We use encryption in transit, access controls, separate data per workspace and audit logs. No system is perfectly secure. If a breach affects your personal data, we will tell you and the authorities as the law requires.

12. Changes and contact

If we change this policy, we will update the date on this page and, for important changes, tell account holders by email.

Contact: Surge Software Solutions Private Limited, Sy No. 13/1, #155, Shop No. 2, 1st Floor, 4th Main, BEML Layout, Thubrahalli, Bengaluru, Karnataka 560066, India. [email protected], +91 91600 57000. See also our terms of use (/terms).