Privacy Policy

AccoMee ("we", "us", "our") is operated by Mee Group. This policy explains what data we collect when you use AccoMee, why we collect it, who we share it with, and the rights you have over it. AccoMee handles business financial records, so we have written this in plain terms rather than dense legal language.

Data we collect

• Account information: your name, email address, and password (stored as a one way hash, never in plain text). If you sign in with Google or Microsoft, we receive your name and email address from that provider instead, and no password is stored.
• Business information: business name, GSTIN, state, and address you enter when setting up a business in AccoMee.
• Financial data: receipt and invoice images you upload, the data extracted from them, ledger entries, journal entries, and GST summaries generated from your records.
• Voice recordings: if you use voice entry, the audio you record is processed to extract a transaction. We do not keep the audio file after processing; the transcript is stored as part of the resulting entry.
• AI Coach conversations: questions you ask the AI Coach and its answers are stored against your account, so you can see your conversation history. If you choose to let the Coach see your numbers, a summary of your balance sheet and trial balance for that business is included in the question sent to generate the answer.
• Bank transaction data (only if you use bank reconciliation): bank statement files (CSV, PDF, or image) you upload, the individual transactions extracted from them, and which invoice, if any, each transaction is matched to. We do not connect to your bank account directly; you choose when to upload a statement.
• GSTR-2B reconciliation data (only if you use this feature): the GSTR-2B Excel file you download from the GST portal and upload, and the invoice level data read from it (supplier GSTIN and name, invoice numbers, dates, and amounts), so we can compare it against the invoices in your books.
• GST portal (GSTN) connection (only if you use this feature): if you connect your GSTIN, we request an OTP from the GST Network through our GST Suvidha Provider partner and store an encrypted session token. We never see or store your GST portal password; the connection uses OTP authentication only.
• Gmail data (only if you connect it): if you choose to connect Gmail, we request read only access. When you press scan, and automatically about every six hours while Gmail stays connected, we search your current financial year for three kinds of email: messages that look like receipts or invoices (including receipts written in the body of the email itself), messages that look like bank statements with a PDF, Excel or CSV file attached, and messages in your Sent folder that look like invoices you issued to customers. From matching messages we import the attachment, or the text of the email saved as an image, and we keep a record of which messages we already imported, so we do not import the same one twice. If a bank statement PDF is locked, we ask you for its password, use it once to open the file, and do not store it. We do not read, store, or otherwise process any other email in your inbox.
• Year end progress data (only if you use the Flow page): for each financial year, a checklist of where your books stand, worked out from your own records, plus the GST return confirmations you record yourself (the month, whether you have filed it or it is a nil return, and an optional acknowledgement number) and the date you mark the year as sent to your Chartered Accountant. These confirmations are recorded exactly as you enter them. AccoMee does not verify them against the GST portal and does not file any return through the Flow page.
• Google Business Profile setup data (only if you use the Google Profile page on the Business plan): your answer on how customers reach you, whether you already have a Google Business Profile, the business category, phone number, website, address or service areas, opening hours and description you enter, the Google Maps link to your listing if you share one, your confirmation that you own or manage the business, and the status of your request for the verified tick. AccoMee does not connect to your Google account and does not create or edit your Google profile; you copy the details into Google yourself. We use the Google Maps link only so our team can open the public listing and check that it exists and belongs to your business. The verified tick only means our team reviewed that link. It is not a government registration check or a certification.
• Automatic bookkeeping entries: journal entries that our software generates from your records, such as sorting purchases into categories, settling bank transactions against invoices, setting off GST input credit against output tax, and posting year end depreciation on equipment. These are calculated by fixed rules on our own servers and are not sent to any AI service.
• Language preference: if you switch the app to Hindi, your choice is saved in your browser on your own device so it is remembered next time. Our servers also receive the chosen language with each request, only so we can reply in that language. We do not use it for anything else.
• Bug reports (only if you send one): if you use Report a bug in the app, we receive the message you write, the email of the account it was sent from, which business you had open, the page you were on, and basic browser details. We store this and also forward a copy by email, through Resend, to our bug report inbox, so we can look into the problem and reply to you. Please do not include passwords or card numbers in a bug report.
• Usage data: login timestamps and basic device or browser information used for security and troubleshooting.
• Microsoft Excel data (only if you connect it): if you choose to sign in with or connect Microsoft, we request access to your OneDrive so AccoMee can read and write to a single Excel workbook you connect or create for this purpose (the "connected workbook"). Microsoft's permission model grants OneDrive access at the account level, but we only ever read or write the connected workbook itself, never any other file in your OneDrive.
• WhatsApp number and messages (only if you connect it): if you connect a WhatsApp number to a business, we store that phone number against the business. Any receipt, invoice, or bank statement image or document sent from that number to our WhatsApp Business number is received and processed the same way as a manual upload. We do not read or store the content of any other WhatsApp conversation, and messages that are not receipts, invoices, or statements are not processed.

How we use your data

• To extract and organize data from receipts and invoices you upload.
• To transcribe and structure voice entries into transactions.
• To automatically process receipts, invoices, and bank statements sent to your connected WhatsApp number, the same way as a manual upload, only if you have connected a number.
• To generate ledger entries, journal entries, GST summaries, and reports inside your account.
• To answer questions you ask the AI Coach, optionally grounded in a summary of your own business numbers when you opt in to that.
• To sync your ledger and GST summaries into your connected Excel workbook, and to read from and write to that workbook when you use the AI Coach's Excel editing mode, only if you have connected Microsoft.
• To extract transactions from bank statements you upload and match them against your invoices, and to compare your GSTR-2B file against your books, only if you use those features. GSTR-2B comparison runs on our own servers and the file is not sent to any AI service.
• To connect your GSTIN to the GST portal, and to import receipts, invoices and bank statements from Gmail and invoices from your Sent folder, only if you choose to connect them. We do not use Gmail data for advertising, we do not sell it, and we do not use it to develop or train generalized AI or machine learning models.
• To show you a step by step checklist of your financial year, from connecting your business to sending your accounts to your Chartered Accountant, and to remember the confirmations you record there.
• To prepare the details you paste into Google when you set up a Google Business Profile, and to review your Google Maps link before showing a verified tick on your AccoMee dashboard.
• To automatically categorise entries, settle bank transactions, set off GST credit, and post year end depreciation in your books, using fixed rules that you can review and correct.
• To remember your language choice and to reply in Hindi or English as you chose.
• To read and respond to bug reports you send us.
• To operate, secure, and improve the AccoMee service.
• To communicate with you about your account, such as sign in or security notices.

We do not sell your data. We do not use your financial data for advertising.

Who we share data with

We share limited data with the following service providers, only as needed to run AccoMee:

• Google Cloud Vision API: receipt and invoice images you upload are sent to Google Cloud Vision for text extraction (OCR). Google processes this image data under its own data processing terms.
• Google Gemini API: voice entry audio is sent to Google's Gemini API to be transcribed and structured into a transaction. Questions you ask the AI Coach, and, if you opt in, a summary of your business's balance sheet and trial balance figures, are also sent to Gemini to generate a response. Google processes this data under its own data processing terms and does not use it to train models made available to other customers. Receipts, invoices and bank statements you upload, or that we import from Gmail, are also sent to Gemini so it can read the amounts, dates and parties on them.
• Google Sign In: if you choose to sign in with Google, Google shares your basic profile information (name and email) with us to create or access your account. We never see or store your Google password.
• Microsoft Sign In: if you choose to sign in with Microsoft, Microsoft shares your basic profile information (name and email) with us to create or access your account. We never see or store your Microsoft password.
• Microsoft Graph API (only if you connect it): if you choose to connect Microsoft, we access your OneDrive through Microsoft's Graph API to read from and write to the single Excel workbook you connect or create, as described in Section 1. We store an encrypted refresh token to maintain this connection. You can disconnect Microsoft at any time from your account settings, which revokes our access. Our use of data received from Microsoft APIs adheres to the Microsoft APIs Terms of Use.
• Meta WhatsApp Business Platform (only if you connect it): if you connect a WhatsApp number to a business, documents sent to our WhatsApp Business number are received and downloaded through Meta's WhatsApp Business Platform (Cloud API). Meta processes this message data under its own Business Data Processing Terms. You can disconnect WhatsApp at any time from your account settings, which stops us accepting further documents from that number.
• Resend: we use Resend to send account emails, such as a welcome email when you sign up and a notification when an invoice is confirmed and added to your ledger. Resend processes your email address and name to deliver these emails on our behalf.
• Google Gemini API (documents): receipt and invoice images, and bank statement files you upload, are also sent to Gemini to extract structured data such as amounts, dates, and vendor or transaction details.
• Gmail API (only if you connect it): if you choose to connect Gmail, we access your Gmail account through Google's Gmail API, limited to the read only scope, solely to search for and import receipts, invoices and bank statements, and invoices you sent, as described in Section 1. We store an encrypted access token to maintain this connection. We store the files we import, and for emails where the receipt is in the message itself, the text of that email saved as an image, because these become your accounting records; we do not store any other email. Human review of your Gmail data happens only if you ask us to look into a problem, if it is needed for security, or if the law requires it. You can disconnect Gmail at any time from Account → Connections, which revokes our access immediately. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• WhiteBooks / MasterGST (GST Suvidha Provider, only if you connect a GSTIN): we send your GSTIN, GST portal username, and the OTP you enter so it can authenticate with the GST Network on your behalf. We store the resulting session token encrypted and it expires automatically after a few hours.
• Hosting infrastructure: your account and business data is stored on servers we operate, hosted with our infrastructure provider.
• Google Search Console and Bing Webmaster Tools: we use these to see how our public website (not the app or your account) appears in search results, such as which search terms bring visitors to our site. These tools do not have access to your account, business, or financial data, and do not collect personal data about app users.
• Google Business Profile (only if you use the Google Profile page): AccoMee does not send your profile details to Google and does not access your Google account. You create or claim your profile yourself on Google, using your own Google account. Anything you enter on Google is handled by Google under its own terms and privacy policy.

We do not share your data with any other third party, and we do not share it with advertisers.

AI Coach and grounding your data

The AI Coach is a scoped assistant for bookkeeping and GST questions, not a general purpose chatbot and not a substitute for a Chartered Accountant. By default, the Coach answers using only the question you type. If you choose to let the Coach see your numbers for a business, a compact text summary of that business's balance sheet and trial balance (totals and account balances, not raw invoice images) is included when your question is sent to Google's Gemini API to generate a response. You can ask questions without opting into this at any time. The Coach can reply in Hindi or English depending on the language you have chosen in the app. Hindi questions and answers are handled in exactly the same way as English ones, and the same privacy terms apply. Hindi answers are machine generated and may contain mistakes. Coach conversations are stored against your account so you can see your history, and are not used by us for any purpose other than showing you that history and improving the Coach itself. If you turn on the Coach's Excel editing mode, the current contents of your connected workbook, and any changes the Coach proposes, are also sent to Gemini to decide what to read or write.

Data retention

We retain your account, business, and financial data for as long as your account is active. If you delete your account, we delete your associated data within a reasonable period, except where we are required to retain records for legal, tax, or accounting purposes. If you connect Microsoft, we retain the encrypted refresh token and a reference to the connected workbook until you disconnect Microsoft or delete your account, whichever comes first. If you connect WhatsApp, we retain the connected phone number until you disconnect it or delete your account, whichever comes first.

Year end checklist confirmations, GST return confirmations you record, and year close records are kept with your business until you delete the business or your account. Bank transaction data and GSTR-2B files are kept for as long as your account is active, unless you delete them earlier.

Bug reports you send are kept so we can investigate and follow up, and the stored copy is deleted when you delete your account. The copy we receive by email sits in our support inbox, so if you want that removed too, write to [email protected].

Google Profile details and the status of your verified tick request are kept with your business until you delete the business or your account, or ask us to remove them. You can withdraw your verified tick request or remove the tick yourself at any time from the Google Profile page.

Security

• Passwords are hashed and never stored in plain text.
• Access to your account is protected using token based authentication.
• All data in transit between your browser and our servers is encrypted (HTTPS).
• Access tokens and session tokens for connected services (Gmail, Microsoft, and the GST portal) are encrypted at rest, never stored in plain text.

Your consent

When you create an AccoMee account, we ask you to confirm you are 18 or older and to agree to this Privacy Policy and our Terms of Service before we process your personal data. We record the date and time you give this consent against your account, so we have a clear record of when and that you agreed. You can withdraw your consent at any time by deleting your account or writing to us, though this does not affect the lawfulness of anything we did with your data before you withdrew it, and we may need to keep some records where the law requires it (see Section 5).

Separately, the first time you connect Gmail, connect Microsoft Excel, or use voice commands in the AI Coach, we show you a specific screen describing what that feature accesses, and record the date and time you agree to it against your account.

Your rights as a Data Principal

Under the Digital Personal Data Protection Act, 2023 (DPDPA), you can, at any time:

• Access a summary of the personal data we hold about you and your business, through your account or by contacting us.
• Correct or update inaccurate business or invoice data directly in the app, or by asking us to fix it.
• Erase your data by requesting deletion of your account, except where we must retain records for legal, tax, or accounting reasons.
• Withdraw consent given at signup, as described in Section 7.
• Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.
• Register a grievance with us, and if unresolved, with the Data Protection Board of India.

To exercise any of these rights, contact us at [email protected]. We will respond within the timelines required under the DPDPA.

Grievance Officer

In accordance with the DPDPA, our Grievance Officer is Yash Agrawal (Founder, Mee Group), reachable at [email protected]. You can write to this address with any complaint about how your personal data is handled.

Legal basis and applicable law

AccoMee is operated from India by Mee Group, which acts as the Data Fiduciary for the personal data described in this policy. This policy is written in accordance with the Digital Personal Data Protection Act, 2023 (DPDPA). If you access AccoMee from outside India, your data may still be processed in India and, where relevant, in accordance with applicable data protection law in your region.

Changes to this policy

We may update this policy as AccoMee evolves. If we make material changes, we will notify you by email or through a notice inside the app.

Contact

Questions about this policy or your data can be sent to [email protected].