Privacy notice

Version 2026-10 ยท Applies to Arthos 1.3 at arthos.saurikit.in

In short: your invoices, clients, products, expenses and bank statements stay in your own browser. They are never sent to us. We keep only what we need to run your account and your licence: your email address, business name, optional GSTIN, and your trial and payment records.

Who we are

Arthos is provided by Saurik IT Private Limited, 173 A Manipuri Para, Barjala, Agartala, Tripura 799002 ("we", "us"). We are the Data Fiduciary for the personal data described below, under India's Digital Personal Data Protection Act, 2023.

Questions, requests and complaints: contact@saurikit.in.

What we collect and why

DataWhy we need it
Email addressTo send your sign-in codes, identify your account, and send service emails about your account and trial.
Business name and GSTIN (optional)To set up your account and greet you in emails. GSTIN helps us spot repeated free trials.
Trial and licence dates, planTo give you the right access: full during the trial or a paid period, read-only after.
Sign-in times and the last time the app checked your licenceTo run your licence and keep the service secure.
Marketing choice, with the time and notice versionTo send tips and offers only if you agreed.
Record of which account emails we sentSo each email is sent once.
Payment records (when payments start)To apply your purchase and keep tax records.

What we never receive

Invoices, quotations, customers, products, prices, expenses, bank statements, reconciliations, signatures, logos, and staff passwords stay in your browser on your device. We cannot see them and cannot recover them for you. Backups you download are files on your own computer.

If you send invoices with Gmail, your browser talks directly to Google with your permission. The Gmail access token stays in your browser's memory and is never sent to us.

Emails we send

Where your data is kept and who helps us

ServiceWhat it does for us
SupabaseAccount database and sign-in. Servers in Mumbai, India.
ResendDelivers our emails. It processes your email address and the email content.
VercelHosts the app's files. Like any web host it sees your IP address in its access logs.
Razorpay (when payments start)Takes payments. We never see your card or bank details.

Each provider handles data only to provide its service to us. We do not sell your data or share it for advertising.

How long we keep it

Your rights

You can ask us to tell you what personal data we hold about you, correct it, or delete it. You can withdraw marketing consent at any time with the unsubscribe link, and that does not affect your account. You can nominate someone to exercise these rights if you die or become unable to.

If you are not satisfied with our answer to a complaint, you can complain to the Data Protection Board of India.

Security

All connections use HTTPS. Access to account data is restricted per user in the database. Sign-in codes expire after 10 minutes. Your licence is digitally signed so it cannot be altered.

Children

Arthos is a business tool for adults. Do not create an account if you are under 18.

Changes

If we change this notice, we will update the version above and, for important changes, tell you by email or in the app before they apply.