# Privacy policy

Last updated 22 October 2026

This policy explains what personal data Closio handles, why, and the choices you have. It is written for India's Digital Personal Data Protection Act, 2023.

## 1. Who we are

Closio (closio.cc) keeps the books, runs the monthly close and prepares GST and TDS workings for private limited companies and CA firms in India. In this policy, “Closio”, “we” and “us” mean Ujjwal Preenja, the founder, who runs Closio as a sole proprietor in India.

## 2. What this policy covers

This policy covers personal data we handle through our website, when you contact us or book a demo, and when we provide our service to customers. Every customer signs an agreement with us. Where that agreement says something different about customer data, the agreement applies.

## 3. Information we collect

**Information you give us.** Your name, work email, phone number, company and role when you book a demo, write to us or sign an agreement.

**Customer data.** To keep a company's books we receive bank statements, sales invoices, purchase bills, payroll records, ledgers, PAN, GSTIN and similar records. These can contain personal data of the company's directors, employees, vendors and customers.

**Usage information.** Basic logs and device information when you use our website or product, and cookies as described below.

## 4. How we use it

-   To provide the service: bookkeeping, bank matching, the monthly close, GST and TDS workings and financial statements.
-   To respond to enquiries, onboard customers and give support.
-   To keep the service secure, find faults and prevent misuse.
-   To meet our legal and tax obligations.

We do not sell personal data, and we do not use customer data to train AI models.

## 5. Our role under the DPDP Act

For website visitors, demo enquiries and our own customer contacts, Closio is the Data Fiduciary. For customer data, the customer (the company, or the CA firm acting for its clients) decides why the data is processed, and Closio processes it on the customer's behalf under our agreement.

## 6. Who we share it with

We share personal data only with service providers who help us run Closio, such as hosting, email and AI model providers, under contracts that limit their use of it. Today these are our hosting provider in India, OpenAI (AI models) and our email provider.

We may also disclose data where the law requires it, or as part of a merger or acquisition, in which case this policy continues to protect it.

## 7. Where data is stored

Customer data is stored in India. When Closio's AI reads a document or answers a question, the text it needs is processed by OpenAI, which may be outside India. If data is transferred outside India, we do so only as permitted under the DPDP Act and the rules made under it.

## 8. How long we keep it

We keep customer data for as long as our agreement with the customer runs, and delete or return it within 30 days after it ends, unless the law requires us to keep it longer. Enquiry data is kept for 12 months.

## 9. Security

Accounting records are among the most sensitive data a company has. Our safeguards are set out on our [security page](/security).

## 10. Your rights

Under the DPDP Act you can ask for a summary of the personal data we hold about you, ask us to correct or erase it, withdraw consent you have given, nominate someone to act for you, and raise a grievance with us.

If your data is in a company's books that Closio keeps, please contact that company or its CA first, since they control those records. We will help them respond.

## 11. Cookies

Our website uses cookies that are needed for it to work. We do not use analytics or advertising cookies.

## 12. Grievance officer and contact

For any question or grievance about personal data, write to our grievance officer, Ujjwal Preenja, at [ujjwal@workpaper.co](mailto:ujjwal@workpaper.co). We will respond within 7 days. If you are not satisfied, you may complain to the Data Protection Board of India.

## 13. Changes to this policy

We will post any changes here and update the date at the top. If a change materially affects customer data, we will tell customers before it takes effect.

---
Source: https://closio.cc/privacy