Privacy Notice

Version: v1 · Last updated: 8 July 2026

This notice explains, in plain language, what personal data Intelayer processes when you connect your business to it, why, on what basis, how long we keep it, how we protect it, and the rights you and the individuals in your records have. It is written to be read on its own.

Status — provisional POC values (pre-incorporation). Intelayer is at the POC/PMF stage and is not yet incorporated. The operating name, address, and grievance contact below are current provisional particulars; they will be updated to the registered company details on formal incorporation, and this notice should get a lawyer's review before wider launch.

1. Who we are, and our role

Intelayer ("Intelayer", "we") is a business operated by Akshat Singhal (pending formal incorporation), based at 80, Jawahar Nagar Colony, Bhelupur, Varanasi, India. Intelayer is a decision-support layer that sits on top of your existing accounting system (such as Tally) and shows you dashboards, collections, stock, reconciliation, and data-health.

Under India's Digital Personal Data Protection Act, 2023 (DPDP Act):

• For the business records you connect (your ledgers, invoices, stock, receivables, payments and the individuals named in them), you are the Data Fiduciary — you decide why and how that data is used. Intelayer is your Data Processor: we process that data only on your instructions, under the Data Processing Authorization you accept, and only to provide the Intelayer services to you.
• For your own account and login information, Intelayer acts as the Data Fiduciary.

2. What we process

Itemised, by category:

• Account and login information — the details needed to create and secure access to Intelayer (name, email, phone, role, authentication data).
• Business records you connect from your accounting and business systems — ledgers, invoices, stock, receivables, payments, and related operational fields.
• Information you add inside Intelayer — notes, targets, tags, visits, settings, and access scopes.
• Technical logs and diagnostics — device, session, and reliability information needed to keep the service secure and working.

Some connected business records may contain personal data of identifiable individuals — for example the names, contact details, addresses, tax identifiers, or activity of your dealers, salespeople, customers, or staff — where that information is present in your own systems. You confirm you are authorised to share that data with us (see the Data Processing Authorization).

3. Why we process it, and on what basis

We process the connected business data on your documented instructions, as your processor, to:

• provide dashboards, analytics, collections, stock, reconciliation, data-health, and related workflows;
• keep your connected data up to date;
• provide support, troubleshoot, secure accounts, and prevent misuse;
• meet legal, audit, contractual, or security obligations that apply to us.

Your legal basis as Data Fiduciary for sharing this data with us is your own — typically the consent you have obtained, or another lawful basis available to you, for using your customers'/staff data in your business systems. Intelayer relies on your authorisation and instructions as your processor.

4. Who we share it with

We use trusted service providers for hosting, storage, backups, security, diagnostics, communication, and support. These providers process data only as needed to help us provide and secure Intelayer, under contractual confidentiality and security obligations. We do not sell your data and we do not use it to build advertising profiles. We disclose data to authorities only where legally required.

5. How long we keep it (storage limitation)

• We retain your connected data for as long as your evaluation or customer relationship is active and for the purposes above.
• If the relationship ends, we will delete or return your active data within the agreed window, and in any case erase it once the purpose is met and retention is no longer required by law.
• Limited backup, log, and legal/audit records may be retained for a bounded further period for security, reliability, legal compliance, or dispute resolution, then deleted.

6. How we protect it

We apply access controls, encryption of data in transit, restricted and logged personnel access, backups, and monitoring. Access within your organisation is controlled by you and limited to the users you authorise. No system is perfectly secure, but we maintain reasonable security safeguards appropriate to the data. In the event of a personal-data breach affecting your data, we will inform you (and, where we are the fiduciary, the Data Protection Board and affected individuals) as required by the DPDP Act.

7. Your rights, and the rights of individuals in your records

Under the DPDP Act, a Data Principal (the individual a piece of personal data is about) may:

• access a summary of their personal data and how it is processed;
• seek correction, completion, or updating, and erasure;
• nominate another person to exercise their rights in the event of death or incapacity;
• raise a grievance and have it addressed.

Because most personal data in the connected records belongs to your dealers, staff, and customers, you are their Data Fiduciary and those requests come to you first; Intelayer, as your processor, will assist you in fulfilling them. For your own account data, contact us directly using Section 9.

You may also ask us at any time to stop syncing your data, or to delete or export it, subject to contractual and legal limits.

8. Complaints to the Data Protection Board

If you are not satisfied with how a grievance has been handled, you have the right to complain to the Data Protection Board of India established under the DPDP Act.

9. Grievance Officer and contact

For any privacy question, request, or grievance, contact our Grievance Officer:

• Akshat Singhal, Intelayer
• privacy@intelayer.in
• 80, Jawahar Nagar Colony, Bhelupur, Varanasi, India

We aim to acknowledge promptly and to resolve grievances within the timelines required by the DPDP Rules (within 90 days).

10. Changes

We may update this notice as the product and the law evolve. The version and "last updated" date above change when we do, and we will make material changes visible before they take effect.