Privacy policy — SignReady

Brainy Accountant Solutions Pvt Ltd ("PracticeGuru", "we"). Version 1.2, effective 8 October 2026.

1. Who is responsible for what

• Your account data (you and your team): we decide how it is used, as described here.
• Your clients' data (trial balances, statements and what is made from them): your firm decides why it is processed; we process it only on your behalf and on your instructions, under the Data Processing Addendum.

2. What we collect and why

Data	Purpose
Account data: name, email, mobile number; firm details (firm name, FRN, partners and membership numbers, address)	Your login, your firm's workspace, letters and reports that carry your firm's details, service emails and support. We also email alerts about your finalisations (a client replied, a file is ready to sign or changed after sign-off, due dates) and a few getting-started tips in your first days — switch either off any time under Account → Emails or with the unsubscribe link in the email. Emails about your plan and your data (renewal, deletion) always come.
Client data you upload or enter: trial balances, financial statements, client details, directors / partners, answers, and the review points, queries, statements and documents made from them	Only to produce the analysis, drafts and documents you ask for
People you invite (staff, the client's accountant): name and email	To give them the access you choose
Payment data: payment ID and amount from Razorpay (we do not receive card or bank details)	Subscriptions, invoices and tax records
Website analytics: pages visited, device and browser, approximate location and how you reached us, collected by Google Analytics with cookies	To understand how people find and use SignReady. Page addresses are sent without their query details, pages inside the app by name only, and never client names or client data. Pages your client opens from a query link are not measured. You can block these cookies in your browser.
Usage and security logs: logins, uploads, downloads, acceptance of these terms (with time, IP address and browser)	Security, support, counting finalisations and keeping a record of what was accepted

We do not sell personal data, and we do not use client data for advertising.

3. AI and service providers

• The contents of client documents are not sent to AI services, with one exception: when a trial balance you upload does not import, SignReady's AI help (Anthropic's Claude) reads its column headings and a sample of its ledger rows — with the title rows, the names of customers, suppliers and other parties, PAN, GSTIN, email addresses and phone numbers removed (standard account names such as Sales or Rent are kept) — to explain the problem and suggest which columns to read. SignReady's own rules then check every figure; the AI never changes one. Anthropic processes this under its commercial API terms and does not use it to train AI models. No other document is sent to an AI service, and client data is not used to train any AI model. SignReady's checks are fixed calculations and rules.
• To run the service we use vetted providers: our hosting provider (servers and storage), Amazon Web Services (storage of the workings you attach, in the Mumbai, India region, encrypted and not publicly accessible), an email delivery provider (service emails), Razorpay (payments), Anthropic (AI help on a trial balance that does not import, as described above) and Google Analytics (website usage, as described above). They process data only as needed to provide their service to us. We share data otherwise only where required by law.

4. How long we keep it

Client data, including original uploaded files, is kept until you delete it, or until 180 days after your plan ends if it is not renewed. Details are in the data retention policy.

5. Security

We use reasonable technical and organisational safeguards: HTTPS for all traffic, uploaded files stored under random names in storage that is not publicly accessible, and access checks on every request. A finalisation can be opened by your firm's Partners, by staff the Partners allow, and by people from the client whom your firm invites to that finalisation. No system is completely secure; if a personal data breach affects you, we will inform you and the authorities as the law requires.

6. Your rights

You can see, correct and update your account and firm details in SignReady, delete any finalisation, or delete all your firm's client data from Subscription & data. You may also ask us to access, correct or erase your personal data, withdraw consent, or nominate someone to exercise your rights. Requests about a client's data should go to the firm that uploaded it. Write to the grievance officer below; we aim to respond within 30 days.

7. Grievance officer

Sachin Mohite, Brainy Accountant Solutions Pvt Ltd · [email protected] · WhatsApp 9136667325. If you are not satisfied with our response, you may approach the Data Protection Board of India.