Privacy policy
Version of 21 October 2026
Tagaada is a product of Surge Software Solutions Private Limited (CIN U72200KA2021PTC154343), Sy No. 13/1, #155, Shop No. 2, 1st Floor, 4th Main, BEML Layout, Thubrahalli, Bengaluru, Karnataka 560066 (“we”). Contact: [email protected].
1. Two kinds of data, two roles
Account data is about you and your team: name, work email, password (stored only as a hash), role, sign-in times and IP addresses, settings, and anything you send through the early-access form. We decide how it is used, so for this data we are the data fiduciary under the Digital Personal Data Protection Act, 2023.
Business data is what your business uploads to or receives through Tagaada: your customers’ names, contact names, phone numbers, email addresses and GSTINs; invoices, amounts and due dates; messages sent; customer replies; payments; bank-statement lines; and documents uploaded through Tagaada upload links. Your business is the data fiduciary for this data. We process it only to provide Tagaada to you and on your instructions, as your data processor. You confirm that you may share this data with us and contact your customers about money they owe you.
2. What we use it for
- To run Tagaada: import invoices, plan and send reminders, read replies, record payments, answer questions about your receivables and send your morning summary.
- To keep accounts secure: sign-in protection, the activity log and abuse prevention.
- To contact you about your account and early access.
We do not sell data, use your business data for advertising, or use it to train models for anyone else.
3. AI
Customer replies and “ask your books” questions are read by an AI model that runs on our own server in Bengaluru. Your data is not sent to any outside AI company. AI suggestions about promises, disputes and payments are checked against your records; anything uncertain, every dispute and every reply that is not in English goes to a person before it changes anything.
4. Where data is processed, and who helps us
| Service | What it does | Where |
|---|---|---|
| Our server (Surge Software Solutions Private Limited) | Runs the app, the database and the AI model | Bengaluru, India |
| Cloudflare, Inc. | Delivers this website and the app securely over the internet (HTTPS, protection from attacks) | Cloudflare’s global network |
| Cloudflare R2 | Stores encrypted copies of the nightly database backup | May be outside India |
| Resend, Inc. | Sends account emails such as password resets and invitations | May be outside India |
| Meta Platforms (WhatsApp Business) | Delivers WhatsApp reminders, only if your business connects its WhatsApp number | Meta’s global infrastructure |
| Your own email provider | Sends email reminders from your own mailbox, only if you connect it | As set by your provider |
| Razorpay | Payment links, only if your business connects its Razorpay account | India |
Messages to your customers pass through WhatsApp or your email provider, and backups and website delivery use Cloudflare, so we do not claim that all data stays in India.
5. How we protect it
- HTTPS for all traffic.
- Your WhatsApp, email and Razorpay credentials are encrypted at rest (AES-256-GCM); passwords are stored only as salted hashes.
- Team roles (owner, accountant, viewer), sign-in lockout after repeated failed attempts, and a log of every change.
- Nightly backups, encrypted before they leave our server.
If a personal data breach affects your data, we will tell you without undue delay, and the Data Protection Board of India as the law requires.
6. How long we keep it
- Account and business data: while your account is active.
- When an owner deletes the business account (Settings → Business), its data is removed from the live system at once. If you ask us by email instead, we delete it within 30 days. Backup copies expire within 30 days.
- Sign-in records: 180 days.
- Early-access sign-ups: until you ask us to remove them or early access ends.
- You can download all your business data at any time (Settings → Business → Download my data).
7. Your rights
You can ask to access, correct or erase your personal data, withdraw consent, nominate someone to act for you, and complain to us. If you are a customer of a business that uses Tagaada, please contact that business first, because it decides how your data is used; we will help it respond.
8. Grievance Officer
Venu Gopal Reddy Muvva, Director, Surge Software Solutions Private Limited, Sy No. 13/1, #155, Shop No. 2, 1st Floor, 4th Main, BEML Layout, Thubrahalli, Bengaluru, Karnataka 560066. Email [email protected]. We respond within the time the law requires. If you are not satisfied, you may complain to the Data Protection Board of India.
9. Cookies
The app uses one essential cookie to keep you signed in. This website uses no advertising or tracking cookies, and the free tools run in your browser without sending what you type to us.
10. Changes
We will tell account owners by email before material changes take effect.