Privacy Policy & Data Sovereignty Guarantee

01Statutory Framework & Regulatory Jurisdiction

This Enterprise Privacy Policy governs the processing, ingestion, encryption, and transmission of financial records, invoice images, and Tally Prime telemetry within the Bill2Tally.ai platform, owned and maintained by BJG TECHNOLOGIES PVT. LTD. This agreement strictly adheres to the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules), and applicable Indian financial data regulations.

02Data Ingestion Protocols & Ephemeral OCR Processing

When invoices, bills of supply, or purchase vouchers are uploaded via PDF, scanned image, or mobile camera stream, processing occurs under strict isolation:

• Ephemeral Vision Buffering: Image buffers are normalized in memory and evaluated by vision AI endpoints under zero-retention enterprise SLAs.
• Deterministic Math Rules: All tax splits (CGST 9% + SGST 9% vs IGST 18%), HSN code lookups, item discounts, and round-off ledgers are verified using deterministic local algorithmic checksums.
• Dual-Tier Inventory Normalization: Stock items are formatted to Title Case with indented ALL CAPS descriptions, preserving authentic Tally Prime accounting aesthetics.

03Cloudflare R2 Object Storage & Enterprise Encryption

Original invoice documents are stored in private Cloudflare R2 object buckets protected by AES-256 bit server-side encryption at rest. Network transit between your browser, our cloud API endpoints, and your local desktop gateway is enforced over TLS 1.3 with Strict Transport Security (HSTS).

04Tally Prime Local Network Perimeter (Port 9000)

The Bill2Tally synchronization agent communicates with Tally Prime locally over the internal network (default port 9000). At no point is your local Tally XML port opened or forwarded to the public Internet; all communication is outbound-initiated by your local authenticated agent session.

05Complete Data Deletion & Purge Guarantees

Subscribing organizations hold full sovereign rights over their data. Whenever an invoice is permanently deleted or an account contract concluded, associated binary files in Cloudflare R2 and daybook sync logs are permanently purged from all production clusters.