Last updated: November 2026
IndASBridge ("IndASBridge", "we", "us", "our") is an early-stage, India-based technology venture building AI-assisted tools to support Ind AS (Indian Accounting Standards) compliance workings for Indian companies, Chartered Accountancy firms, and pre-IPO businesses. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information in connection with our website at indasbridge.in (the "Site"), our waitlist and early-access communications, and — as they become available — our product features (together, the "Service"). This Policy is written to be consistent with the principles of India's Digital Personal Data Protection Act, 2023 and its accompanying Rules, 2025 (together, the "DPDP Act"), which govern the processing of digital personal data in India and of data relating to individuals in India processed anywhere.
IndASBridge is currently operating in a pre-launch, pilot/waitlist stage. At this stage, we collect limited personal information — primarily what you voluntarily provide when joining our waitlist or contacting us, and basic website analytics as described in Section 14. This Policy also describes, in advance, how we intend to handle data once the product moves beyond pilot and begins processing actual accounting and financial information on behalf of our customers, so that early users and prospective customers understand our direction and commitments before that stage begins.
At this stage, we collect information you choose to give us directly:
We also collect limited website analytics automatically, as described in Section 14. We do not currently operate an interactive product that collects accounting, financial, or lease data through the Site. Once such features launch, this Policy will be updated to describe the categories of Service Data collected, and a separate Data Processing Addendum will govern how we handle data our business customers submit on behalf of their own clients.
Under the DPDP Act, we process your personal data only on the basis of your free, specific, informed, unconditional, and unambiguous consent, given through a clear affirmative action (such as submitting your email through our waitlist form or emailing us directly). We seek separate consent for distinct purposes rather than bundling unrelated uses together, and you may withdraw your consent at any time, as easily as you gave it, by emailing [email protected]. Withdrawing consent will not affect the lawfulness of processing carried out before withdrawal, and may mean we are no longer able to keep you updated on pilot access or product developments.
We use the information you provide to: respond to your inquiries; keep you informed about IndASBridge's pilot access, feature availability, and product launch; understand and prioritise interest in specific Ind AS modules; and improve how we communicate about and build the product. We do not use your information for unrelated marketing, and we do not use it to make any automated decision that produces a legal or similarly significant effect concerning you.
We do not sell your personal data. We may share limited personal data with service providers who help us operate the Site and our communications (for example, our domain registrar, DNS and email-routing provider, hosting provider, and website analytics provider), and only to the extent necessary for them to perform that function on our behalf, under confidentiality obligations consistent with this Policy. We may also disclose personal data where required to comply with applicable law, a valid legal process, or to protect the rights, property, or safety of IndASBridge, our users, or others.
As IndASBridge develops beyond the pilot stage, our business customers (CA firms, companies, and pre-IPO businesses) will submit Service Data — such as lease agreements, consolidation schedules, revenue contracts, and tax figures — for processing through the product. In that relationship, our customer remains the data fiduciary/controller for their own and their clients' data, and IndASBridge acts as a data processor, processing Service Data only on the customer's documented instructions, under a separate commercial agreement and Data Processing Addendum. This Policy will be expanded at that stage to specifically address: sub-processors we engage, security and access controls applied to Service Data, data residency, retention and deletion on customer request, and audit rights.
We retain waitlist and correspondence information only for as long as reasonably necessary to fulfil the purposes described in this Policy — generally, for the duration of the pilot/pre-launch period and a reasonable period thereafter, or until you ask us to delete it, whichever is earlier. We do not retain personal data indefinitely without a documented purpose, and we intend to implement a formal retention schedule as the product and user base grow.
Under the DPDP Act, you have the right to: obtain a summary of the personal data we hold about you and the processing activities carried out; request correction, completion, or updating of inaccurate or outdated personal data; request erasure of personal data that is no longer necessary for the purpose it was collected for; withdraw consent at any time; and nominate another individual to exercise these rights on your behalf in the event of your death or incapacity. To exercise any of these rights, email us at [email protected] with your request, and we will respond within a reasonable time.
If you have a grievance regarding how we have processed your personal data, you may contact our designated point of contact for privacy matters at [email protected], with the subject line "Privacy Grievance." We will acknowledge and work to resolve grievances promptly. As IndASBridge is currently a small, early-stage venture (not a Significant Data Fiduciary under the DPDP Act), we do not yet have a statutory obligation to appoint a formal Data Protection Officer, but we intend to designate a named Grievance Officer, consistent with DPDP Rules, 2025 practice, as the Service and our user base grow. If you remain dissatisfied with our response, you may approach the Data Protection Board of India through the applicable statutory process.
We take reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction, including restricting access to personal data to those who need it, and using reputable third-party infrastructure providers (such as Cloudflare for domain, DNS, and hosting) with their own security practices. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we are committed to notifying affected Data Principals and the Data Protection Board of India, without unreasonable delay, in the event of a personal data breach, as required under the DPDP Act.
The Site and Service are intended for use by businesses and professionals and are not directed at, or intended for use by, individuals under the age of 18. We do not knowingly collect personal data from individuals we know to be under 18 without verifiable parental or guardian consent, and we do not engage in behavioural monitoring, targeted advertising, or any processing likely to cause detrimental effect to a child. If we become aware that we have inadvertently collected personal data from a child without appropriate consent, we will take steps to delete it.
The DPDP Act permits the transfer of personal data outside India except to countries specifically restricted by the Central Government. We may use service providers (including cloud infrastructure, website analytics, and email providers) whose servers are located outside India. Where personal data is transferred outside India, we take reasonable steps to ensure it continues to receive a standard of protection consistent with this Policy and the DPDP Act.
The Site uses Google Analytics (GA4) to understand aggregate visitor behaviour — such as which pages are viewed and how visitors found the Site — so we can improve the Site and our communications. Google Analytics may set cookies and process limited technical data (such as IP address and device/browser information) on Google's infrastructure, consistent with Google's own privacy practices. We do not use this data to identify individual visitors, and we do not currently use advertising or cross-site tracking cookies. If you wish to opt out of Google Analytics tracking, you may use a browser extension such as Google's Analytics Opt-out Browser Add-on, or adjust your browser's cookie and tracking settings. As we introduce further analytics or tracking tools, we will update this Policy to describe what is collected and provide appropriate choices, consistent with applicable law.
IndASBridge is being built as an AI-assisted tool. Where artificial intelligence or automated systems are used to process Service Data in the product (for example, to support lease or revenue recognition workings), such processing will be used to support — not replace — professional judgment, and no automated process will make a final compliance or audit determination without the opportunity for human professional review. Further detail will be published as these features launch.
We may update this Policy from time to time, particularly as IndASBridge moves from a pilot/waitlist stage to a full product that processes Service Data. We will update the "Last updated" date above whenever we make changes, and for material changes, we will take reasonable steps to notify active users directly, such as by email.
For any questions, requests, or grievances relating to this Policy or our handling of personal data, please contact us at [email protected].