Anantam VenturesThis policy explains what personal data the Anantam Ventures app collects, why, where it is processed, how long it is kept, and the choices and rights you have. It is written to meet the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and to prepare for the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025 as their provisions come into force.
Who we are
- Service
- Anantam Ventures (www.anantamventures.com)
- Run by
- Anantam Ventures, a partnership firm
- Address
- 146, Ground Floor, 7th Main, Behind Mangalore Jewels, next to BESCOM, JP Nagar 3rd Phase, Bengaluru, Karnataka 560078, India
- Partners
- [TO BE PROVIDED BY OWNER]
- Grievance & privacy
- The Partners, Anantam Ventures — haritms87@gmail.com
Anyone 18 or over can sign up free with a Google account for business use; the sign-up creates your account and your first project, with you as its administrator. Accounts can also be created by an administrator on request.
Two roles: our data and your business's data
- Your account (staff and team members): we decide how this is used, so we are responsible for it (the "data fiduciary").
- Records a business keeps in the app about its vendors, payees, labourers and customers: the business decides what to record and why, so the business is the data fiduciary and we process it on its behalf (the "data processor"). See our Data Processing terms. If you are a vendor, labourer or customer, please contact that business first; we will help them respond.
What we collect
| Data | Why | Basis |
|---|---|---|
| Name, username, email, phone, role and project memberships | Sign-in, showing who did what, notifications | Your consent at first sign-in; needed to provide the service |
| Login codes (hashed), sign-in times | Secure sign-in | Needed to provide the service |
| Sign-up details: the project name you choose, sign-up time, your acceptance of these terms and your 18+/business-use confirmation, hashed IP; last-active time and free-plan usage counts (uploads, AI reads, emails, storage) | Creating your account, preventing abuse, enforcing free-plan limits, counting sign-ups | Your consent at sign-up; needed to provide the service; security |
| Project records: bills, vendors, budgets, payments, materials, labour, attendance and wages, milestones, site photos, documents, customer bookings, sales invoices to clients and payments received | Running the project | Entered for the business (fiduciary) that owns the project |
| Payee payment details: UPI ID or number, QR code, bank account number and IFSC | Paying vendors and payees | Financial information is "sensitive personal data" under the SPDI Rules: collected only with the acknowledgment of the person submitting it |
| Guest submissions through a share link: your name, optional email or phone, bill files | Sending a bill or payment request to the project | Your acknowledgment on the form (recorded with a version, time and hashed IP) |
| Audit log: who changed what and when | Security, accountability, disputes | Legitimate use / legal obligation (logs) |
| IP address | Rate limiting against abuse; stored only as a one-way hash in consent records | Security |
| Consent records: what you agreed to, version, time, hashed IP | Proving consent | Legal obligation |
We do not collect Aadhaar, health, biometric or children's data, and we do not use your data for advertising or sell it to anyone.
Cookies and local storage
One essential cookie, av_session, keeps you signed in (HttpOnly, Secure, SameSite=Strict, expires after 12 hours).
The browser's local storage holds only a "signed in last time" flag and the project you last opened. There are no analytics,
tracking or advertising cookies, so there is no cookie banner.
Sign in with Google
If you choose "Sign in with Google", we receive only the basic openid, email and profile information,
to sign you in, or, when you sign up, to create your account with your Google name and verified email. We do not access Gmail,
Drive or contacts and do not store Google tokens. Google sign-in creates an account only from the sign-up page, after you accept these terms.
Optional processing you can switch off
- Email notifications (bill status updates and the daily digest).
- Telegram alerts, only if you connect Telegram. Telegram is outside India.
- AI bill reading: Azure AI Document Intelligence reads amounts and details from bills you upload, and Azure OpenAI suggests a category from a short extract with account numbers, UPI IDs, IFSC, GSTIN, PAN and emails removed. Turned off, you enter bill details yourself.
Change these any time in the app under Privacy & data. Withdrawing works from then on; it does not undo earlier processing.
Each project is kept separate
Every project works like its own workspace: its records, files, clients, vendors, invoices, share links, integrations and audit log are visible only to that project's members. Invoices, emails and guest pages carry the project's own name and logo, with a small "Hosted via Anantamventures.com" line. The platform administrator can open a project only to provide support or investigate a problem; each such visit is recorded in that project's audit log ("Platform support viewed this project"), which the project's owner can see.
Where your data is processed
| Provider | Purpose | Location |
|---|---|---|
| Microsoft Azure Static Web Apps and Functions | Web app and API | East Asia (Hong Kong) |
| Azure Cosmos DB | Database | Central India (Pune) |
| Azure Blob Storage | Uploaded files | Central India |
| Azure AI Document Intelligence | Reading bills | Central India |
| Azure OpenAI | Categorising bills (redacted text) | South India (Chennai) |
| Azure Communication Services | Emails (login codes, notifications) | Global service; data stored in India |
| Telegram | Optional alerts | Outside India |
| Optional sign-in | Outside India | |
| Zoho Books (Zoho Corporation) | Accounting sync, only if a project's admin connects Zoho Books: vendor names and GSTINs, bill amounts, dates and categories, payments | India data centre by default (the Zoho organization's own data centre) |
So some data is processed outside India. We do not claim India-only data residency. Transfers follow the law; if the Government restricts transfers to a country, we will comply.
How long we keep it
| Data | Kept for |
|---|---|
| Bills, payments and other accounting records | Up to 8 years after the financial year, to meet GST and income-tax record-keeping |
| Your account after you delete it | Name, email and phone erased 30 days after deletion; records you entered stay with the project as "Deleted user" |
| Audit log | About 13 months (at least 1 year, as the law requires for logs) |
| Consent records | As long as needed to show consent was given |
| Login codes | 10 minutes |
| Files of a deleted record | Deleted with the record (backup copies expire within 7 days) |
Your rights
- Access and portability: "Download my data" in Privacy & data gives you a file with your profile, consents, activity, and the project records your role lets you see.
- Correction: edit your details or ask an administrator.
- Erasure: "Delete my account" in Privacy & data. Records the business must keep by law stay, without your contact details.
- Withdraw consent for optional processing at any time.
- Nominate someone to exercise these rights if you die or become unable to: write to us.
- Grievances: see Grievance redressal.
Security
HTTPS everywhere (with HSTS); one-time email codes or Google sign-in; per-project access, so people see only projects they were added to; files served only to members of that project; bank account numbers masked wherever full details are not needed; rate limits; an audit log of changes; encryption at rest by Azure. If a breach affects you, we will tell you without delay and report it as the law requires.
Children
The app is a business tool for people aged 18 and over. We do not knowingly process children's data.
Changes
When this policy changes we update the version above, and you will be asked to review and accept it at your next sign-in.