Privacy Policy
Last updated: 13 October 2026
EximSathi is a service of Atelier Raul, a proprietorship of Sandeep Arora, K-18 B, Block K, Saket, New Delhi 110017, India (GSTIN 07AHMPA2538G2ZJ). This policy explains what personal data we collect through the EximSathi website and Invoice Checker app, and how we use and protect it. It is written with India's Digital Personal Data Protection Act, 2023 in mind.
What we collect
- Account details: name, work email, company name, GSTIN, and a securely hashed password (we never see your actual password).
- Billing details: billing name, address, GSTIN, purchase order number and payment references.
- Documents you upload: invoices and agreed terms, which you submit for checking.
- Reports: the result of each check, and which user ran it.
- Usage and technical data: number of checks, login times, and error logs needed to run and secure the Service.
- Website forms: if you sign up for updates or early access, your email and any details you enter.
How uploaded documents are handled
- Files are used only to produce your report. They are deleted as soon as the check is complete. We do not keep copies.
- To read the documents, they are sent securely to our AI provider, Anthropic (USA), which processes them on our behalf under its commercial terms. Anthropic does not use this data to train its models.
- Only the report (charges, amounts and findings) is stored in your account, visible to users of your company.
- Saved rate contracts: if you save a vendor contract for reuse, its rates and terms are stored as text in your account (the uploaded file itself is not kept), visible to users of your company, until you delete it.
How we use your data
To provide and secure the Service, issue invoices, support you, send service and billing messages, and, if you agreed, send product updates. We do not sell your data or use it for advertising.
Who we share it with
- Hostinger (website and database hosting)
- Anthropic (AI document processing, as above)
- Formspree (delivery of website form submissions and notifications)
- Authorities, where the law requires it
Cookies
The app uses one essential cookie to keep you logged in. We do not use advertising cookies.
How long we keep data
Account data and reports are kept while your account is active. Billing records are kept as long as Indian tax law requires. You can ask us to delete your account and reports at any time.
Security
Data is transmitted over encrypted connections (HTTPS), passwords are hashed, each company can access only its own data, and access to our systems is restricted.
Your rights
You can ask to access, correct or delete your personal data, or withdraw consent for updates, by writing to us.
Contact and grievances
Grievance officer: Sandeep Arora · sandeep.arora@eximsathi.com · K-18 B, Block K, Saket, New Delhi 110017. We aim to respond within 7 working days.