Tizori Accounts Privacy Policy
Effective 4 September 2026
This policy describes how Vebryks Systems LLP handles personal data through Tizori Accounts. Contact info@vebryks.com or write to 142, 2nd Floor, Avtar Enclave, Paschim Vihar, New Delhi, India for privacy requests.
Data we process
We process account identifiers, encrypted contact and profile information, organization records, security and audit events, service diagnostics, and the business data users enter. We do not require passwords to be stored in readable form.
Purposes
We process data to provide and secure accounts, deliver transactional email, operate accounting features, prevent abuse, diagnose failures, preserve audit history, meet legal obligations, and improve service reliability.
Security and storage
Sensitive application payloads are encrypted with organization-specific keys. Passwords are salted and hashed. Session tokens and account-action tokens are stored as hashes. Access is restricted by organization and role. Backups and audit anchors must be protected by the deployment operator with equivalent care.
Sharing
Data may be processed by hosting, email, support, compliance, or integration providers necessary to deliver requested features. We do not sell personal data. We may disclose information when legally required or necessary to protect users and the service.
Retention
Account and diagnostic information is retained while needed to provide the service and meet security or legal requirements. Accounting and audit evidence may require longer retention and may be append-only. Backup copies expire according to the configured retention policy unless preserved for legal reasons.
Your choices and rights
Depending on applicable law, you may request access, correction, export, restriction, or deletion of personal data. Some requests may be limited where financial, audit, security, or legal-retention duties apply. Organization administrators can manage user access within the service.
Cookies and local storage
The service uses strictly necessary session and security cookies. If offline mode is enabled, encrypted business data and a protected local key are stored in the browser. Users can remove that local copy from the Offline & Sync page.
International processing and updates
If providers process data in another jurisdiction, appropriate contractual and technical safeguards should be used. Material policy changes will be communicated through the service or account contact information.