Effective 8 October 2026. This policy explains what information is collected, why, where it is kept and what control you have, for (a) this website, vikashkhanal.in, and (b) Vee Trade Finance OS, the finance and compliance application at app.vikashkhanal.in, including its Secretarial workspace. Both are operated by Vikash Khanal, Delhi NCR, India (“we”, “us”). Contact: connect@vikashkhanal.in.
1. This website (vikashkhanal.in)
- Calculators and checkers run in your browser. Figures you type are not sent to our server. A calculation is put in the page address only when you press “Copy link”.
- No advertising or analytics trackers. We do not use advertising cookies, analytics scripts or tracking pixels. The site stores your light / dark theme choice in your browser.
- Server logs. Our host, Hostinger, and its content delivery network keep standard access logs (IP address, time, page requested, browser type) for security and operations, under Hostinger's own retention rules.
- E-mail. If you write to us, we use your message and address only to reply.
2. Vee Trade Finance OS (app.vikashkhanal.in)
What we collect
- Account: your name, e-mail address, a hash of your password (never the password itself), and your two-step sign-in setting.
- Organisation data you or your colleagues enter: for example company and party details, invoices, books, tax and compliance records, and, in the Secretarial workspace, company master data, directors and key managerial personnel (names, DIN, e-mail, phone), meetings, minutes, resolutions, statutory registers and compliance due dates.
- Security and audit records: sign-in events, an audit trail of changes (who changed what and when, with IP address and browser type) and a session cookie.
- Connected accounts: only when a member chooses to connect them (Google or Microsoft, see section 3).
Why we use it
To provide the service you signed up for: sign you in, keep each organisation's data separate, generate due dates and reminders, keep the audit trail the law or your auditors expect, and send service e-mails (sign-in codes, password links and, if you keep it switched on, a daily digest of filings due). We do not sell personal data, and we do not use it for advertising.
Who can see it
Data belongs to the organisation (workspace) it was entered in. Members of that organisation see it according to their role. Members of other organisations cannot. We access it only to operate, secure or support the service, or where the law requires.
3. Google user data
Finance OS can connect to Google only when a user chooses to, and asks only for the permissions a feature needs:
| Feature | Google permission (scope) | What we do with it |
|---|---|---|
| Secretarial: documents in Google Drive | drive.file, plus your e-mail address (openid email) |
Create a folder tree for each company in the Drive of the account you choose, upload the files you select into it, and list or link
those files. With drive.file we can see only the files and folders the app created or that you open with it. We cannot see
anything else in your Drive. |
| Finance OS: Gmail, Calendar, Tasks (optional) | Read-only Gmail, Calendar and Tasks scopes, as shown on Google's consent screen | Show your finance-related mail, events and tasks inside the app for you. We never send mail or change your mailbox. |
- Storage: files stay in your Google Drive. We store only the folder and file IDs and links, and an encrypted refresh token so the connection keeps working. When you upload through the app, the file passes through our server on its way to Google and is not kept.
- Sharing: we do not sell Google user data, transfer it to third parties, or use it for advertising. We do not use it to develop, improve or train artificial-intelligence or machine-learning models. People do not read it, except with your consent, for security or abuse investigations, or to comply with law.
- Limited Use: Vee Trade Finance OS's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- Disconnecting: use “Disconnect” in Secretarial → Drive & settings (or in Finance OS settings), or remove the app at myaccount.google.com/permissions. We then delete the stored token. Your files remain in your Drive.
4. Service providers
- Hostinger: web hosting, database and e-mail delivery for vikashkhanal.in and app.vikashkhanal.in.
- Google and Microsoft: only for features a user connects.
- Optional features that a member switches on and runs on their own documents (for example AI-assisted extraction or identity verification) send that document or detail to the provider named in the app at the time. They never receive Google user data.
5. Security and retention
- HTTPS everywhere. Passwords are hashed, and tokens and secrets are encrypted at rest. Two-step sign-in is available, and organisations can require e-mailed sign-in codes.
- Expired sessions are removed automatically. Organisation data is kept while the organisation uses the service. Audit-trail records that the law requires to be kept are retained for the period the law requires.
- When an organisation or user asks us to delete an account, we delete or anonymise its data within 30 days, except records we must keep by law.
6. Your rights
Under the Digital Personal Data Protection Act, 2023 and the rules made under it, you can ask us for a summary of the personal data we hold about you, and ask us to correct, complete, update or erase it. You can also withdraw consent for an optional feature, nominate someone to act for you, and raise a grievance. If you are a member of an organisation, some requests are best made to that organisation's owner, who controls its data. Write to connect@vikashkhanal.in (grievance contact: Vikash Khanal). We reply within 30 days.
7. Children
The service is for businesses and professionals and is not meant for anyone under 18.
8. Changes
If this policy changes, the new version will be posted here with a new effective date. If a change materially affects how we use Google user data, we will ask for your consent again before relying on it.