This policy explains how Bytehills Tech LLP ("Reconza", "we", "us") handles personal data when you visit our website or use the Reconza service. We process data in line with applicable Indian law, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023.
1. What we collect
- Account details: your name if provided, work email, company name, and a hashed password.
- Files you upload and the results we generate from them. These may contain personal data about third parties, such as driver names or codes. For that data you are the data fiduciary (controller) and we process it only to provide the service to you.
- Usage and audit records: actions taken in your account (for example runs, reviews and downloads), with timestamps and the user who took them.
- Technical data: IP address, browser type and request logs used for security, rate limiting and troubleshooting.
- Billing data: your plan, subscription status and invoices. Card, UPI and bank details are collected by our payment processors and never reach our servers.
2. How we use it
- To provide the service: reconciling your files, generating reports and statements, and keeping history and audit trails.
- To run your account: email confirmation, sign-in, team invitations, password resets and transactional emails such as "your checked report is ready".
- To secure the service: abuse prevention, fraud detection, malware checks and investigating incidents.
- To bill you and meet legal, tax and accounting obligations.
- To improve the product, using aggregated usage information. We do not sell personal data, and we do not use your uploaded files to train AI models.
3. AI features
Settlement calculations never use AI. If AI column suggestions are enabled, the column headers and a few sample rows of a file you are setting up are processed by an open-source model running on infrastructure we control. They are not sent to third-party AI providers.
4. Who we share it with
We share data only with service providers that help us run Reconza, under contracts that limit their use of it:
- our hosting and storage provider;
- our email delivery provider;
- payment processors (Razorpay and Stripe) if you subscribe.
We may also disclose data where the law requires it. We do not share your files with other customers.
5. Where and how long we keep it
- Uploaded files and generated reports are deleted automatically after your account's retention period, which is 30 days by default. You can change this in Settings, and you can delete a run's files at any time.
- Run summaries, exception decisions and audit logs are kept while your account is active, so your history stays complete.
- Account data is deleted within 30 days of a verified request to close your account. Records we must keep by law, such as invoices, are retained for the required period.
6. Security
Each company's data is isolated. Files are encrypted at rest, uploads are checked before processing, and access is logged. See Security & data handling for details. No system is perfectly secure; if a breach affects your data, we will notify you and the authorities as the law requires.
7. Cookies
We use only essential cookies: rz.auth keeps you signed in, rz.csrf protects forms against cross-site request forgery, and rz.msg briefly carries one-time notices such as "Saved". We do not use advertising or cross-site tracking cookies.
8. Your rights
You can ask to access, correct or erase your personal data, withdraw consent where processing relies on it, and nominate someone to exercise your rights. To make a request, email contact@bytehills.com from the address on your account. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
9. Changes
If we make material changes to this policy, we will notify account owners by email or in the app before they take effect.
10. Contact
Bytehills Tech LLP, Gangtok, Sikkim, India. Email: contact@bytehills.com.