1. Introduction & Scope
IndASBridge ("IndASBridge", "we", "us", "our") is an early-stage, India-based technology venture building AI-assisted tools to support Ind AS (Indian Accounting Standards) compliance workings for Indian companies, Chartered Accountancy firms, and pre-IPO businesses. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information in connection with our website at indasbridge.in (the "Site"), our waitlist and early-access communications, and — as they become available — our product features (together, the "Service"). This Policy is written to be consistent with the principles of India's Digital Personal Data Protection Act, 2023 and its accompanying Rules, 2025 (together, the "DPDP Act"), which govern the processing of digital personal data in India and of data relating to individuals in India processed anywhere.
IndASBridge is currently operating in a pre-launch, pilot/waitlist stage. At this stage, we collect limited personal information — primarily what you voluntarily provide when joining our waitlist or contacting us. This Policy also describes, in advance, how we intend to handle data once the product moves beyond pilot and begins processing actual accounting and financial information on behalf of our customers, so that early users and prospective customers understand our direction and commitments before that stage begins.
2. Definitions
- "Personal Data" means any data about an individual who is identifiable by or in relation to such data, as defined under the DPDP Act.
- "Data Principal" means the individual to whom the personal data relates — generally, you.
- "Data Fiduciary" means the entity that determines the purpose and means of processing personal data — in this context, IndASBridge.
- "Processing" means any operation performed on personal data, including collection, storage, use, sharing, and erasure.
- "Service Data" means data that our business customers (such as CA firms or companies) submit to or process through IndASBridge on their own behalf, including their clients' or their own accounting, financial, and lease data — distinct from the personal data we collect about you directly as a visitor or user.
3. Information We Collect
At this stage, we collect information you choose to give us directly:
- Your email address, name, and any other details you provide when joining the waitlist or emailing us.
- The content of any correspondence you send us, including questions, feedback, or feature requests.
- If you apply for early/pilot access, information about your organisation (such as company name, role, and the Ind AS areas you are interested in), to help us prioritise and tailor pilot access.
We do not currently operate an interactive product that collects accounting, financial, or lease data through the Site. Once such features launch, this Policy will be updated to describe the categories of Service Data collected, and a separate Data Processing Addendum will govern how we handle data our business customers submit on behalf of their own clients.
4. Legal Basis & Consent
Under the DPDP Act, we process your personal data only on the basis of your free, specific, informed, unconditional, and unambiguous consent, given through a clear affirmative action (such as submitting your email through our waitlist form or emailing us directly). We seek separate consent for distinct purposes rather than bundling unrelated uses together, and you may withdraw your consent at any time, as easily as you gave it, by emailing indasbridge@gmail.com. Withdrawing consent will not affect the lawfulness of processing carried out before withdrawal, and may mean we are no longer able to keep you updated on pilot access or product developments.
5. How We Use Information
We use the information you provide to: respond to your inquiries; keep you informed about IndASBridge's pilot access, feature availability, and product launch; understand and prioritise interest in specific Ind AS modules; and improve how we communicate about and build the product. We do not use your information for unrelated marketing, and we do not use it to make any automated decision that produces a legal or similarly significant effect concerning you.
6. Disclosure & Sharing
We do not sell your personal data. We may share limited personal data with service providers who help us operate the Site and our communications (for example, our domain registrar, DNS and email-routing provider, and hosting provider), and only to the extent necessary for them to perform that function on our behalf, under confidentiality obligations consistent with this Policy. We may also disclose personal data where required to comply with applicable law, a valid legal process, or to protect the rights, property, or safety of IndASBridge, our users, or others.
7. Data We Process on Behalf of Customers (Future Scope)
As IndASBridge develops beyond the pilot stage, our business customers (CA firms, companies, and pre-IPO businesses) will submit Service Data — such as lease agreements, consolidation schedules, revenue contracts, and tax figures — for processing through the product. In that relationship, our customer remains the data fiduciary/controller for their own and their clients' data, and IndASBridge acts as a data processor, processing Service Data only on the customer's documented instructions, under a separate commercial agreement and Data Processing Addendum. This Policy will be expanded at that stage to specifically address: sub-processors we engage, security and access controls applied to Service Data, data residency, retention and deletion on customer request, and audit rights.
8. Data Retention
We retain waitlist and correspondence information only for as long as reasonably necessary to fulfil the purposes described in this Policy — generally, for the duration of the pilot/pre-launch period and a reasonable period thereafter, or until you ask us to delete it, whichever is earlier. We do not retain personal data indefinitely without a documented purpose, and we intend to implement a formal retention schedule as the product and user base grow.
9. Your Rights as a Data Principal
Under the DPDP Act, you have the right to: obtain a summary of the personal data we hold about you and the processing activities carried out; request correction, completion, or updating of inaccurate or outdated personal data; request erasure of personal data that is no longer necessary for the purpose it was collected for; withdraw consent at any time; and nominate another individual to exercise these rights on your behalf in the event of your death or incapacity. To exercise any of these rights, email us at indasbridge@gmail.com with your request, and we will respond within a reasonable time.
10. Grievance Redressal
If you have a grievance regarding how we have processed your personal data, you may contact our designated point of contact for privacy matters at indasbridge@gmail.com, with the subject line "Privacy Grievance." We will acknowledge and work to resolve grievances promptly. As IndASBridge is currently a small, early-stage venture (not a Significant Data Fiduciary under the DPDP Act), we do not yet have a statutory obligation to appoint a formal Data Protection Officer, but we intend to designate a named Grievance Officer, consistent with DPDP Rules, 2025 practice, as the Service and our user base grow. If you remain dissatisfied with our response, you may approach the Data Protection Board of India through the applicable statutory process.
11. Security Measures
We take reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction, including restricting access to personal data to those who need it, and using reputable third-party infrastructure providers (such as Cloudflare for domain, DNS, and hosting) with their own security practices. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we are committed to notifying affected Data Principals and the Data Protection Board of India, without unreasonable delay, in the event of a personal data breach, as required under the DPDP Act.
12. Children's Privacy
The Site and Service are intended for use by businesses and professionals and are not directed at, or intended for use by, individuals under the age of 18. We do not knowingly collect personal data from individuals we know to be under 18 without verifiable parental or guardian consent, and we do not engage in behavioural monitoring, targeted advertising, or any processing likely to cause detrimental effect to a child. If we become aware that we have inadvertently collected personal data from a child without appropriate consent, we will take steps to delete it.
13. Cross-Border Data Transfer
The DPDP Act permits the transfer of personal data outside India except to countries specifically restricted by the Central Government. We may use service providers (including cloud infrastructure and email providers) whose servers are located outside India. Where personal data is transferred outside India, we take reasonable steps to ensure it continues to receive a standard of protection consistent with this Policy and the DPDP Act.
14. Cookies & Tracking
The Site does not currently use tracking cookies or third-party advertising trackers. If we introduce analytics tools in the future to understand how visitors use the Site, we will update this Policy to describe what is collected and provide appropriate choices, consistent with applicable law.
15. AI & Automated Processing
IndASBridge is being built as an AI-assisted tool. Where artificial intelligence or automated systems are used to process Service Data in the product (for example, to support lease or revenue recognition workings), such processing will be used to support — not replace — professional judgment, and no automated process will make a final compliance or audit determination without the opportunity for human professional review. Further detail will be published as these features launch.
16. Changes to This Policy
We may update this Policy from time to time, particularly as IndASBridge moves from a pilot/waitlist stage to a full product that processes Service Data. We will update the "Last updated" date above whenever we make changes, and for material changes, we will take reasonable steps to notify active users directly, such as by email.
17. Contact Us
For any questions, requests, or grievances relating to this Policy or our handling of personal data, please contact us at indasbridge@gmail.com.