Privacy Policy
Learn how BankToTally collects, safeguards, and processes your account information, and read our strict zero-retention guarantee for financial statement documents.
1. Introduction & Overview
At BankToTally ("we", "our", or "us"), accessible via banktotally.com, the confidentiality and privacy of our users and their clients' financial records is our foremost priority. This Privacy Policy outlines what information we collect, how it is used, and the rigorous safeguards we implement to protect your sensitive financial data.
2. Information We Collect
We collect information in two main categories:
- Account Registration Data: When you register on BankToTally, we collect your name (or firm name), email address, and an encrypted password hash. This information is used solely to authenticate your access and manage your conversion credit balance.
- Billing & Payment Records: When purchasing credit packs, payment transactions are handled through our payment gateway partner, Razorpay. We receive and log the payment ID, order ID, package purchased, and timestamp. We never view or store sensitive payment card details, CVVs, or NetBanking credentials.
- Operational Technical Logs: Standard web server logs such as IP address, browser type, and system response codes used to troubleshoot errors, enforce rate limiting, and prevent bot abuse.
3. Financial Document Safety & Zero Permanent Retention
- Temporary Memory-Based Parsing: When you upload a bank statement PDF (e.g. SBI, HDFC, ICICI, Axis, BOI), the file is processed locally on our secure application server solely to extract transaction lines into structured data.
- Automatic 60-Minute Purge: Uploaded PDF files and temporary raw text extracts are permanently and irreversibly deleted from our storage disks within 60 minutes of processing.
- No Machine Learning Training: We never use your client financial statements, UPI narration strings, or accounting records to train public AI models.
- No Secondary Sharing: Your statement data is never sold, leased, or distributed to advertisers, credit bureaus, or marketing agencies.
4. Secure Payment Processing via Razorpay
All online payments for prepaid credit packs are processed securely by Razorpay Software Private Limited. Razorpay is certified under the Payment Card Industry Data Security Standard (PCI-DSS Level 1), which is the highest security standard in the global payments industry.
When you enter your payment details (UPI, Debit Card, Credit Card, NetBanking), that data is encrypted and transmitted directly to Razorpay's secure servers. BankToTally does not store, capture, or have access to your full card numbers, CVV codes, or banking PINs.
5. Cookies & Local Session Storage
We use strictly essential session cookies to maintain your authenticated login state and preserve CSRF security tokens across page navigation. Our session cookies are configured with:
HttpOnly = true: Prevents malicious client-side JavaScript or XSS attacks from reading session cookies.SameSite = Lax: Defends against cross-site request forgery attacks.Secure = true(Production): Transmitted exclusively over encrypted HTTPS connections.
We do not use invasive third-party cross-site advertising cookies.
6. User Data Rights & Account Deletion
Under applicable data protection guidelines, you have the right to request access to the personal data we hold about you, request corrections, or request complete account deletion. You can also delete individual conversion records and stored data anytime directly from your dashboard using the "Delete" action.
To request total account erasure, email our grievance officer at support@banktotally.com.
Privacy Grievance Officer & Contact Information
For any questions, concerns, or requests regarding this Privacy Policy, please reach out to our team: