Privacy Policy

Who we are

ReconPe ("ReconPe", "we", "us", "our") provides AI-assisted data reconciliation software and is a business registered in India under the MSME (Udyam) framework. This Privacy Policy explains what personal data we collect, how we use and share it, and the rights and choices you have. It applies to reconpe.com and the ReconPe application.

We act as the data controller / data fiduciary for the account, billing, and usage data you provide to us directly. For the personal data contained inside the files you upload (for example counterparty or payee details), we act as a processor on your behalf, processing it only on your instructions to deliver the reconciliations you request.

1. Information we collect

We collect the following categories of information:

• Account information you provide when you register - name, work email, organisation name, and authentication credentials.
• Reconciliation data you upload - settlement, payment, bank, ledger, and related files. These may contain transaction records and counterparty details. We process this data solely to perform the reconciliations you request.
• Billing information - when you subscribe to a paid plan, payments are handled by third-party payment processors (such as Razorpay and Stripe). We receive billing metadata (plan, status, invoices) and do not store full payment-instrument numbers.
• Usage and device data - log data, IP address, browser and device type, and product interactions, used for security, debugging, and improving the service.

2. How we use your information

We do not sell your personal data.

To deliver AI features, we share the content needed for the task with third-party AI providers (such as Anthropic, OpenAI, and Google) acting as our sub-processors under contracts that restrict their use of your data; we do not permit them to use your reconciliation data to train their models.

We do not make decisions producing legal or similarly significant effects about you based solely on automated processing. AI features assist with reconciliation, but outputs are presented for human review and you remain responsible for final decisions.

• To provide, operate, and secure the reconciliation service;
• To process the files you upload and return reconciliation results, exceptions, and reports;
• To manage your account, subscription, and billing;
• To provide support and respond to your requests;
• To maintain and improve product quality, reliability, and security;
• To comply with applicable legal obligations.

3. Legal bases for processing

Where the Digital Personal Data Protection Act, 2023 (India) applies, we process personal data on the basis of your consent and to provide the service you have requested. Where the EU/UK GDPR applies, our legal bases are performance of a contract; our legitimate interests in operating, securing, and improving the service (including fraud and abuse prevention, network and information security, and debugging), balanced against your rights; your consent where required; and compliance with legal obligations. Where we rely on legitimate interests, you may object at any time.

4. How we share information

We share personal data only with:

• Service providers and sub-processors that help us run the service - including cloud infrastructure hosting, the third-party AI providers that power our AI features, payment processors, and transactional email - under contracts that require them to protect your data and use it only on our instructions;
• Authorities or other parties where required by law, or to protect the rights, property, or safety of ReconPe, our users, or the public.

5. Data retention

We retain account data for as long as your account is active. Uploaded reconciliation data is retained while your account is active and according to your instructions; you can delete reconciliations and request deletion of your data at any time. Following account termination, we delete or anonymise your uploaded reconciliation data within a reasonable period, except for limited records we must retain to meet legal, tax, audit, and security obligations.

6. Security and breach notification

We use technical and organisational measures designed to protect your data, including encryption of data in transit, access controls, per-organisation data isolation, and audit logging. No method of transmission or storage is completely secure, but we work to protect your information.

If a personal data breach occurs, we will notify the relevant authorities and affected users in the manner and within the timelines required by applicable law - including, in India, the Data Protection Board and affected individuals under the DPDP Act, and, where the GDPR applies, the relevant supervisory authority and affected individuals.

7. Your rights

Depending on your jurisdiction, you may have the right to access, correct, update, or delete your personal data; to restrict or object to certain processing; to data portability; to withdraw consent (withdrawal does not affect processing carried out before it); and, in India, to nominate another individual to exercise your rights. To exercise any of these rights, contact us using the details below. We will respond within the timeframes required by applicable law.

If you are in the EU/UK and are dissatisfied with our response, you may lodge a complaint with your local data protection authority (in the UK, the Information Commissioner's Office). If you are in India and are dissatisfied with our Grievance Officer's response, you may complain to the Data Protection Board of India.

8. International transfers

ReconPe is based in India and may process and store data in India and in other locations where our service providers operate. India is not currently the subject of an EU/UK adequacy decision, so where we transfer EEA or UK personal data we rely on appropriate safeguards (such as the applicable Standard Contractual Clauses) together with supplementary measures including encryption in transit and access controls. A copy of the relevant safeguards is available on request.

9. Cookies

Our marketing site uses only the essential cookies needed for the site to function. We do not use advertising or tracking cookies.

Some pages embed a third-party product walkthrough (provided by Supademo); that embed may set its own cookies, which are governed by the provider's own policy.

10. Children

ReconPe is a business product, is not directed to individuals under 18, and we do not knowingly collect personal data from children. If we become aware that we hold a child's personal data without the consent required by law, we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a new effective date and, where appropriate, notify you.

12. Contact

For questions, requests, or complaints about this policy or your personal data, contact us at support@reconpe.com.

Grievance Officer (Digital Personal Data Protection Act, 2023): support@reconpe.com.