Privacy Policy | Turia Practice

1. INTRODUCTION AND SCOPE OF APPLICATION

Turiabooks Technologies Private Limited ("Turia", "Company", "We", "Us", or "Our") operates Turia Practice (collectively, the "Service"), a suite-of-services delivered-as-a-Service (SaaS) platforms designed exclusively for Chartered Accountants, financial professionals, and businesses requiring financial workflow management.

This Privacy Policy ("Policy") constitutes a legally binding agreement between Turia and you ("User", "You", or "Your"). This Policy outlines our commitment to compliance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") regarding the lawful collection, processing, storage, and protection.

BY ACCESSING, REGISTERING FOR, OR USING THE SERVICE, YOU EXPRESSLY ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO BE BOUND BY THIS POLICY IN ITS ENTIRETY. IF YOU DO NOT AGREE WITH ANY PROVISION OF THIS POLICY, YOU MUST IMMEDIATELY DISCONTINUE ALL USE OF THE SERVICE.

2. DEFINITIONS AND DATA PROCESSING ROLES

For purposes of this Policy and in accordance with the DPDP Act:

Data Principal: Any natural person whose personal data is being processed through the Service.
Data Fiduciary: Turia, acting in its capacity as the entity that determines the purpose and means of processing personal data.
Data Processor: Third-party service providers engaged by Turia.
Personal Data: Any data about an individual who is identifiable.

3. USER ACKNOWLEDGEMENT OF DUAL ROLE AND RESPONSIBILITY

You acknowledge and expressly agree that when you upload personal data into the Service, you act as a Data Fiduciary with respect to such data.

You hereby indemnify and hold harmless Turia from any claims, penalties, or liabilities arising from your failure to obtain proper consent or comply with DPDP Act obligations in your capacity as Data Fiduciary.

3.1 User Authorization and Consent Requirements

By using Turia Practice and uploading any data to the Service, You represent, warrant, and confirm that:

Authorized to Upload: You have the full legal right, authority, and necessary permissions to upload, store, and process all data including client information, service details, task records, employee information, documents, and files
Client Consent: You have obtained proper consent from your clients to collect, store, and process their personal and financial information on cloud-based platforms, as required by your engagement letters or service agreements
Employee Authorization: You have the lawful authority to collect and process employee data (including personal details, attendance records, and payroll information) and have informed employees about data processing practices
Service and Task Data: All information regarding services, tasks, compliance requirements, and project details uploaded to the platform is done with proper authorization from relevant stakeholders
Document Rights: You have the right to upload, store, and manage all documents, files, and attachments shared through the Service
Compliance Obligation: You comply with all applicable professional standards, ethical guidelines, and data protection laws in your jurisdiction

Professional Practice Context: As users of Turia Practice are typically Chartered Accountants, tax professionals, and accounting firms, You acknowledge that:

Your client engagement letters or service agreements authorize you to process client data
You have informed clients that their data will be stored on secure cloud infrastructure
You maintain professional confidentiality and data security standards as required by ICAI or your relevant professional body
Employee data processing complies with employment contracts and labor laws
All uploaded financial records, tax documents, and compliance data are handled with proper authorization

Your Responsibility: You are solely responsible for ensuring that all data uploaded to Turia Practice is done with proper consent, authorization, and in compliance with applicable laws. Turia assumes no liability for unauthorized data uploads or Your failure to obtain necessary permissions.

4. CATEGORIES OF PERSONAL DATA COLLECTED

4.1 Data We Collect Directly From You

Registration Data: Full name, email, mobile number, firm name, GSTIN
Authentication Data: Username, encrypted password, two-factor authentication
Billing Information: Payment details, billing address, GST details
Technical Data: IP address, browser type, device identifiers, usage analytics

4.2 Data You Upload

Client Data: Client names, contact details, PAN, GSTIN, financial records
Employee Data: Staff names, roles, contact information
Financial Data: Invoice details, payment records, expense reports

5. DATA SECURITY MEASURES

Encryption: TLS 1.3 for data in transit; AES-256 for data at rest
Access Controls: Role-based access, multi-factor authentication
Infrastructure Security: AWS security groups, VPC isolation, DDoS protection
Data Backups: Daily encrypted backups with 30-day retention

6. YOUR RIGHTS UNDER DPDP ACT

Right to Access: Obtain confirmation and access your personal data
Right to Correction: Request correction of inaccurate data
Right to Erasure: Request deletion when processing purpose is fulfilled
Right to Data Portability: Receive data in structured format
Right to Withdraw Consent: Withdraw consent anytime

To exercise these rights, contact: support@turia.in

7. DATA USE AND THIRD-PARTY SHARING

7.1 No Sale of Data

We do not sell, rent, lease, or trade your personal data to any third party for their marketing purposes. Your data is exclusively used to provide and improve the Service.

7.2 No Marketing Use

We do not use your data for unsolicited marketing campaigns or promotional activities. Any communications from us are strictly service-related, such as account notifications, security alerts, or service updates.

7.3 Third-Party Data Sharing

We do not share your personal information with any third parties except in the following limited circumstances:

Service Providers: Essential infrastructure providers (e.g., AWS for hosting) who are contractually bound to protect your data
Payment Processors: Secure payment gateways for processing subscription payments
Legal Requirements: When required by law, court order, or government authority
Your Explicit Consent: When you have explicitly authorized such sharing

7.4 Data Sovereignty

Your data is stored on secure servers located in India. We do not transfer your personal data outside of India without your explicit consent and adequate safeguards.

8. CONTACT INFORMATION

For privacy-related inquiries:

Turiabooks Technologies Private Limited

Email: support@turia.in

Website: https://turia.in

BY ACCESSING OR USING TURIA PRACTICE, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO BE BOUND BY THIS PRIVACY POLICY.