Privacy Policy

1. Who we are

Chopda is a product of Ellvero Technologies Private Limited, Ahmedabad, Gujarat, India ("Ellvero", "Chopda", "we", "our", or "us"). This policy applies to the Chopda mobile application, chopda.app, the Chopda API, the Windows Tally Connector, and related support and administration services (together, the "Service").

For privacy questions or requests, contact our Privacy and Grievance Contact at hello@chopda.app.

2. Information we collect

Account and authentication information

We collect your name, email address, mobile number, hashed password, mobile-verification status, and authentication/session records. For WhatsApp OTP verification, we process the mobile number, a hashed OTP, expiry and attempt information, and the messaging provider's reference ID. We do not store your password or OTP in readable form.

Mobile-device and security information

We collect an app-generated installation UUID, device display name, platform, app version, operating-system version, push token if enabled, last-seen time, and revocation status. The app installation UUID is not a hardware identifier. We use this information to secure sessions and enforce the phone limits included with your plan.

Business workspace and connector information

We store the company and branch names you create in Chopda, their slugs and service identifiers, branch configuration, connector pairing records, connected Windows device information, agent version, connection status, and last-seen time. These records let us map your Chopda account to the correct Tally connection and enforce branch and connector limits.

Tally accounting information

When you synchronise a branch, the Service retrieves information such as Tally company details, ledgers, vouchers, balances, AlterIDs, stock information, and accounting reports. This information is transmitted from your Tally computer through the Ellvero Tally Connector and TallyAPI, through the Chopda API, and to your authorised mobile app. The Chopda customer database does not intentionally persist the detailed accounting response. TallyAPI may temporarily process or cache an export to complete large or paginated synchronisations.

The mobile app stores synchronised Tally information in a local SQLCipher-encrypted database. The encryption key and session credentials are held using the device's secure storage facilities. Local records remain on the device until you clear the relevant cache or app data, or uninstall the app. Revoking a device blocks future authenticated access, but you should also clear or remove the app from a lost or transferred device whenever possible.

AI questions and responses

When you use the AI question feature, we process the question, selected language, and any optional context supplied by the app. This content is sent to OpenAI to generate an answer. Chopda stores a request ID, a one-way hash used to prevent duplicate charging, token counts, and your question allowance usage; it does not store the readable question or AI answer as backend conversation history.

Plan, usage, and payment information

We store your plan, subscription status and dates, monthly question count, provider request metadata, and applicable branch, phone, connector, and history limits. For payments, we store order and transaction references, plan, amount, tax, currency, status, payment method category, and completion date. Cashfree processes the checkout and payment credentials. Chopda does not receive or store full card, bank-account, or UPI authentication credentials.

Leads, support, and website information

If you submit an early-access or partner form, we may collect your name, mobile number, business name, city, role, accounting software, branch count, form source, and follow-up status. If you contact us, we process the contents of your request and our response. Our web and API infrastructure may also generate IP address, request, error, security, and diagnostic logs. We do not currently use third-party advertising trackers on chopda.app.

3. How we use information

We use information to:

• create and protect your account and verify your mobile number;
• connect authorised branches and devices to Tally;
• retrieve, synchronise, and display accounting information you request;
• answer accounting and Tally questions and measure plan usage;
• provide subscriptions, process payments, calculate GST, and maintain transaction records;
• enforce plan limits and prevent abuse, fraud, and unauthorised access;
• operate, troubleshoot, secure, and improve the Service;
• respond to support, privacy, and grievance requests; and
• comply with legal, tax, accounting, and regulatory obligations.

We do not sell your personal information or Tally data, and we do not use your accounting records for third-party advertising.

4. Why we are allowed to process it

Depending on the activity and applicable law, we process information with your consent, to provide the Service you requested and perform our agreement with you, for uses permitted by law, and to comply with legal obligations. Where processing is based on consent, you may withdraw it by contacting us. Withdrawal does not affect processing already completed and may prevent us from continuing features that require that information.

5. Service providers and disclosures

We disclose only the information reasonably needed for the following recipients to perform their functions:

• Ellvero TallyAPI and the Windows Connector to authenticate your branch and retrieve Tally information;
• OpenAI to process AI questions and optional context. Chopda sends Responses API requests with storage disabled. OpenAI may separately retain limited abuse-monitoring logs under its API data policy, unless stricter retention controls apply to our account;
• Cashfree Payments to create and verify orders and process payments;
• PingDaily and WhatsApp messaging infrastructure to deliver login and mobile-verification OTPs;
• cloud hosting, database, monitoring, and security providers that operate the Service on our behalf;
• professional advisers and authorities when reasonably necessary to comply with law, enforce our terms, protect rights or safety, or investigate fraud; and
• a successor or participant in a genuine merger, financing, reorganisation, or sale, subject to appropriate confidentiality and legal safeguards.

These providers process information under their own terms and privacy practices where they act independently. You can review Cashfree's privacy policy and OpenAI's privacy policy.

6. How long we keep information

We retain account and workspace information while your account is active and afterwards only for as long as reasonably necessary for support, security, dispute resolution, and legal compliance. Transaction and tax records may be kept for the period required under applicable accounting, tax, payment, and anti-fraud laws. OTPs expire quickly, although challenge and delivery metadata may be retained for security and audit purposes. Security and operational logs are retained for limited periods appropriate to their purpose.

Detailed Tally records held by the mobile app remain on that device until its cache or app data is cleared, or the app is removed. Temporary export caches used for large synchronisations expire automatically. Deletion from active systems may take additional time to cycle through restricted backups and logs.

7. Security

We use technical and organisational safeguards appropriate to the information we process, including encrypted network transport, password hashing, short-lived access tokens, revocable device-bound sessions, role-restricted administration, server-only provider credentials, OTP rate limits, and a SQLCipher-encrypted mobile database with keys stored in secure device storage. No online system can guarantee absolute security, so you must protect your password, OTPs, pairing codes, device access, and Tally computer.

8. Your choices and rights

Subject to applicable law and any lawful exceptions, you may ask us to:

• confirm whether we process your personal data and provide a summary;
• correct, complete, or update inaccurate personal data;
• erase personal data that is no longer required;
• withdraw consent where consent is the basis of processing;
• revoke a mobile device or Tally connector;
• close your account; or
• address a grievance about our handling of personal data.

You can update some profile and device information inside the app. To close your account, follow the steps on our Delete Account page. For other requests, email hello@chopda.app from the address or mobile number associated with your account. We may need to verify your identity before acting. We will respond within the period required by applicable law. Where available under applicable law, you may also nominate another person to exercise your rights in the event of death or incapacity and may approach the competent data-protection authority after using our grievance process.

9. International processing

Some service providers may process information outside India. Where this occurs, we use providers and contractual arrangements intended to protect the information and comply with applicable transfer restrictions. Different countries may have different data-protection laws.

10. Children

Chopda is a business accounting service and is not intended for anyone under 18 years of age. We do not knowingly request accounts from children. If you believe a child has provided personal data, contact us so we can review and delete it where appropriate.

11. Changes to this policy

We may update this policy when the Service, our providers, or applicable law changes. We will publish the revised version here, update the date above, and provide additional notice through the app, email, or another appropriate channel when a material change requires it.