Privacy
Last updated 9 October 2026. DRAFT: to be reviewed before launch.
Without an account, what you type stays in your browser
If you don't sign in, your firm details, PAN, account numbers, bank details and invoices are never sent to us. The bank forms, the RBI form and your export invoices are generated on your device.
If you sign in with a Ratify account
Signing in is optional. It uses your Ratify account (the same account works on getratify.com), operated by Ratify. When you're signed in:
- Your firm profile and the pack you're preparing are saved to your account so you can continue on any device. They are encrypted before they are stored.
- When you download a pack, it is filed: we keep a copy of the details you entered, your sign-off ("I've checked every field…") with its time and IP address, and the exact files you downloaded, with a fingerprint (SHA-256) of each.
- Filed packs can't be edited or deleted, by you or by us. Corrections are filed as new versions and the earlier version is kept. This is so there is a reliable record of what was filed if a question ever comes up later.
- We keep filed packs for 8 years from filing (to be confirmed with a chartered accountant), including after an account is closed. Your profile, draft and account can be deleted on request; filed packs are kept until their retention date.
- Where: Ratify's servers and file storage are in Frankfurt, Germany (AWS, EU).
- Reminders: if you turn on "Email me before deadlines", we email you before EDF deadlines and before money is due to arrive. Turn it off at any time in the account menu.
What is saved on your device
So you don't have to retype them next month, your firm details, draft invoices, a copy of each pack you download (for "Repeat last month"), invoice maker settings, client list, logo and signature image are saved in this browser's local storage. They stay on this device until you click "Forget saved details" on the EDF page or clear your browser data. On a shared computer, use "Forget saved details" when you finish.
Feature requests
If you click "I want this" and send the form, we receive the feature you picked, your email, your type of firm and anything you write in the message. We use them only to reply and to tell you when the feature is ready, and we don't share them. Ask us at any time to delete them.
What we measure
We use PostHog to count page visits and downloads (for example, "an HDFC workbook with 3 invoices was downloaded") and where visitors came from. We do not record sessions, we do not capture what you type, and we do not use advertising cookies.
Files loaded from other services
The page loads fonts from Google Fonts and two open-source libraries (JSZip and pdf-lib) from cdnjs. Like any website, these services see your IP address when your browser fetches them.
If you email us, we use your message only to reply. Please don't email documents that contain account numbers.