Privacy Policy

1. Who We Are

ThynkFile is a product of Oris Intelligence Private Limited, a company registered in Bangalore, Karnataka, India. We build compliance technology for Indian Chartered Accountants. When we say “we,” “us,” or “ThynkFile,” we mean Oris Intelligence Private Limited.

2. Data We Collect

Account Information

When you sign up, we collect your name, email address, firm name, and phone number (optional). This information is used to create and manage your account, send you important service communications, and provide customer support.

Trial Balance Data

You upload Trial Balance files (Excel, CSV) containing GL account names, account groups, and financial amounts. This data is processed to generate financial statements and ROC filing packages for your clients.

Supplementary Data

You may optionally provide additional data such as fixed asset registers, receivables ageing schedules, loan registers, and related party details. This data enriches the generated financial statements.

Usage Analytics

We collect anonymised usage data (page views, feature usage, error rates) to improve the product. We use PostHog for product analytics and Sentry for error tracking. No financial data is included in analytics events.

3. Data Residency

All your data is stored in India. Our database runs on PostgreSQL hosted in Mumbai, India (AWS ap-south-1) and files are stored in encrypted file storage in the same region. Your client financial data never leaves Indian territory.

We have contractual data processing agreements with our infrastructure providers that ensure Indian data sovereignty.

4. How We Use AI

ThynkFile uses AI (via the ORIS AI layer) to classify GL account names to the correct Schedule III taxonomy nodes. Here is what you need to know:

• We never send financial amounts to AI. Only GL account names and debit/credit directions are sent for classification.
• Our AI provider does not train on data sent through their API. Your GL names are not used to improve any AI models.
• Enterprise plan customers can opt out of AI entirely and use 100% rule-based classification.
• Every AI classification shows its reasoning, confidence score, and the model used. Full transparency.

5. Data Retention

We retain your data only as long as needed. Default retention periods:

Professional and Enterprise plan customers can extend retention to 365 days. All deletions are hard deletes — data is permanently removed, not just hidden. You can also delete your data at any time from your dashboard.

6. DPDP Act Compliance

We comply with the Digital Personal Data Protection Act, 2023 (DPDP Act). Oris Intelligence's registration as a Data Fiduciary is in progress. We process personal data only for the purposes you have consented to, and we implement reasonable security safeguards as required by the Act.

7. Third-Party Processors

We use the following third-party services to operate ThynkFile:

8. Encryption & Security

All data is encrypted at rest using AES-256 and in transit using TLS 1.3. We use row-level security (RLS) on all tenant-scoped database tables to ensure that one firm can never access another firm's data. For more details, visit our Trust Centre.

9. Your Rights

Under the DPDP Act and our own policies, you have the right to:

• Access all data we hold about your firm
• Export all your data in standard formats (one-click full export)
• Delete your data at any time from your dashboard
• Correct inaccurate personal information
• Withdraw consent for data processing (this may limit service functionality)
• Lodge a grievance with our Data Protection Officer or the Data Protection Board of India

10. Cookies

We use essential cookies for authentication and session management. We use analytics cookies (PostHog) to understand how the product is used. We do not use advertising cookies or sell your data to third parties.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email to the account owner. Continued use of ThynkFile after changes constitutes acceptance of the updated policy.

12. Contact for Privacy Inquiries

For privacy-related questions, data requests, or to contact our Data Protection Officer: