Privacy Policy

Effective Date: 14 August 2026 · Last Updated: 14 August 2026

SoarLedger is an accounting, invoicing, taxation, financial management and business management platform operated by WILLSOAR Technologies LLP (“Willsoar”, “we”, “us”, or “our”).

This Privacy Policy explains how we collect, use, process, store, disclose and protect personal data when you access or use SoarLedger through our website, web application, mobile application, desktop application, APIs, integrations and related services (collectively, the “Services”).

We are committed to protecting your personal data and processing it in accordance with applicable Indian laws, including the Digital Personal Data Protection Act, 2023 (“DPDP Act”), applicable rules and regulations made thereunder, the Information Technology Act, 2000 and applicable rules, and other applicable laws and regulatory requirements in India.

By accessing or using SoarLedger, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Services.

1. Who We Are

SoarLedger is operated by:

WILLSOAR Technologies LLP
2nd Floor, Standard Design Factory,
KINFRA Industrial Park,
Near Kannur Airport, Mattannur,
Kannur – 670702, Kerala, India.

For privacy-related matters:

Privacy Email: privacy@willsoarapp.com
Grievance Email: grievance@willsoarapp.com

For purposes of applicable data-protection law, WILLSOAR Technologies LLP may act as a Data Fiduciary for personal data that we process for our own purposes.

Where a business customer uses SoarLedger to store or process personal data relating to its customers, suppliers, employees or other individuals, that business customer may determine the purposes and means of processing such data. In such circumstances, the business customer may act as the Data Fiduciary, while WILLSOAR Technologies LLP may process such data as a Data Processor, subject to our contractual arrangements and applicable law.

2. Definitions

For this Privacy Policy:

“Personal Data” — means any data about an individual who is identifiable by or in relation to such data.
“Data Principal” — means the individual to whom the personal data relates.
“Data Fiduciary” — means the person or entity that determines the purpose and means of processing personal data.
“Data Processor” — means a person or entity that processes personal data on behalf of a Data Fiduciary.
“Processing” — includes collection, recording, organisation, storage, use, disclosure, transmission, alteration, retrieval, sharing, erasure or other operations performed on personal data.
“Customer Data” — means information entered, uploaded, generated or otherwise provided by a SoarLedger business customer through the Services, including information relating to customers, vendors, employees, products, transactions and financial records.

3. Information We Collect

Depending on how you use SoarLedger, we may collect the following categories of information.

3.1 Account and Business Information

This may include:

Full name
Business or organisation name
Email address
Mobile number
Business address
Registered office address
Billing address
GSTIN
PAN
Business registration details
User role and permissions
Login credentials and authentication information
Subscription and account information

3.2 Accounting and Financial Information

Because SoarLedger provides accounting and business-management functionality, users may voluntarily enter or upload:

Sales invoices
Purchase invoices
Credit notes
Debit notes
Expenses
Ledgers
Journal entries
Receivables
Payables
Bank transaction information
Bank statements
Payment records
Tax information
GST-related information
TDS-related information
E-invoice information
E-way bill information
Inventory and product information
Financial reports
Accounting documents
Supporting documents
Other information required to operate accounting and business functions

3.3 Customer, Vendor and Employee Information

SoarLedger users may enter information relating to individuals with whom they conduct business, including:

Name
Mobile number
Email address
Address
GSTIN
PAN
Customer/vendor identification information
Employee information
Transaction history
Invoice information
Payment information
Other information entered by the business user

The business customer is responsible for ensuring that it has an appropriate legal basis and authority to provide such information to SoarLedger.

3.4 Payment Information

When you purchase a subscription or make a payment through SoarLedger, we may receive information such as:

Payment status
Transaction reference
Order ID
Subscription details
Payment amount
Payment method
Payment gateway response

Payments may be processed by third-party payment service providers. Unless specifically stated otherwise, SoarLedger does not store complete credit/debit card numbers, CVV numbers or other complete payment credentials.

3.5 Government Verification Information

Where you voluntarily use features such as GSTIN, PAN or other government-identifier verification, we may process information required to perform the requested verification through authorised third-party providers, APIs, GST Suvidha Providers (GSPs), government systems or other permitted sources.

3.6 Communications

We may collect information contained in:

Support tickets
Emails
Chat messages
Feedback
Customer-service communications
Bug reports
Product enquiries
Other communications with us

3.7 Technical and Usage Information

We may automatically collect:

IP address
Device type
Operating system
Browser type
Application version
Device identifiers
Login timestamps
Session information
Error logs
Diagnostic information
Usage information
Feature interaction information
Security and audit logs

4. How We Collect Information

We may collect information:

Directly from you

When you:

Create an account
Log in
Complete your business profile
Enter accounting information
Upload documents
Create invoices
Subscribe to a plan
Contact support
Request verification services
Use SoarLedger features

Automatically

Through:

Cookies
Log files
Application technologies
Analytics technologies
Security monitoring
Similar technologies

From third parties

Where necessary to provide a requested service, information may be received from:

Payment gateways
GST Suvidha Providers
Government APIs
Tax-related service providers
Authentication providers
Communication providers
Cloud service providers
Other technology partners

5. Purposes for Which We Process Personal Data

We process personal data only for lawful and specified purposes. We may use personal data to:

Create and manage your SoarLedger account.
Provide accounting, invoicing and business-management services.
Generate invoices, reports and financial records.
Provide GST, taxation and compliance-related functionality.
Facilitate e-invoicing and related services where requested.
Facilitate TDS-related functionality where applicable.
Facilitate reconciliation and financial reporting.
Perform GSTIN and PAN verification when requested.
Process subscriptions and payments.
Send transaction-related communications.
Authenticate users and secure accounts.
Detect and prevent fraud, abuse and unauthorised access.
Provide customer support.
Troubleshoot technical problems.
Monitor system performance and reliability.
Improve our products and Services.
Develop new features and functionality.
Maintain security and audit records.
Comply with applicable legal and regulatory obligations.
Respond to lawful requests from government authorities.
Enforce our Terms of Service and other agreements.
Protect our rights, property, users and Services.
Provide AI-assisted functionality requested by the user.
Send important service, security and administrative communications.

We will not process personal data for purposes incompatible with the purpose for which it was collected unless permitted or required by applicable law.

Where consent is required under applicable Indian law, we will seek consent in an appropriate manner before processing personal data.

Where processing is permitted without separate consent under applicable law, including processing necessary for specified legitimate uses or compliance with legal obligations, we may process personal data without obtaining separate consent.

Where processing is based on consent:

Consent will be requested in a clear and understandable manner.
We will seek consent for specified purposes.
You may withdraw consent where legally applicable.
Withdrawal of consent will not affect processing that was lawfully carried out before withdrawal.
Withdrawal may affect our ability to provide certain features or Services.

Where you use SoarLedger on behalf of a business or organisation, you represent that you have the appropriate authority to provide information to us.

7. GST, Tax and Government Services

SoarLedger may integrate with or facilitate access to services relating to:

GST
GSTIN verification
PAN verification
E-invoicing
IRN generation
E-way bills
TDS
Tax reporting
Other government or authorised tax services

When you use these features, information may be transmitted to the relevant authorised service provider, GSP, government portal or API.

Such third parties may independently process information under their own legal requirements and privacy policies. SoarLedger is not responsible for the privacy practices of government portals or third-party services that operate independently of SoarLedger.

8. Banking and Financial Data

Certain SoarLedger features may allow you to import, upload, connect or otherwise provide banking or financial information for purposes such as:

Bank reconciliation
Transaction categorisation
Accounting
Financial reporting
Cash-flow analysis
Ledger reconciliation

We use such information only to provide the requested Services and related functionality, subject to applicable law and your instructions.

Where a third-party banking or financial-data provider is used, that provider may process your information according to its own terms and privacy policy.

9. AI Features

SoarLedger may provide AI-powered features, including an AI accounting assistant, financial insights, document assistance, data analysis, categorisation, search or other intelligent functionality.

Where AI features process information contained within your SoarLedger account:

Processing is performed to provide the requested AI functionality.
AI-generated information may be based on data available within your authorised account or workspace.
AI outputs may contain errors or inaccuracies.
You should independently verify important accounting, financial, tax or regulatory information before relying upon it.
AI functionality does not constitute professional legal, tax, accounting or financial advice unless expressly stated otherwise.

Where third-party AI service providers are used, appropriate contractual and security measures will be applied as required by applicable law. We will not use your personal data for unrelated purposes merely because you use an AI feature.

10. Cookies and Similar Technologies

SoarLedger may use cookies and similar technologies for:

Strictly Necessary Technologies

Used for:

Authentication
Session management
Security
Fraud prevention
Core functionality

These technologies may be required for the Services to function.

Analytics Technologies

We may use analytics services to understand:

How users interact with SoarLedger
Feature usage
Application performance
Errors
Product engagement

Where consent is legally required for non-essential cookies or analytics technologies, we will obtain appropriate consent. You may also manage cookies through your browser or device settings.

We do not sell personal data. We may share or disclose personal data where necessary and lawful with the following categories of recipients:

11.1 Service Providers

Including:

Cloud hosting providers
Database and infrastructure providers
Payment processors
Email providers
SMS providers
Communication providers
Security providers
Analytics providers
Customer-support providers
Technology and infrastructure partners

11.2 GST and Tax Service Providers

Where you request relevant functionality, information may be shared with:

GST Suvidha Providers
Government APIs
Authorised tax service providers
E-invoice service providers
E-way bill service providers

11.3 Legal and Regulatory Authorities

We may disclose information where required or permitted by applicable law, including in response to:

Court orders
Government requests
Regulatory requirements
Law-enforcement requests
Legal proceedings
Fraud investigations
Security investigations

11.4 Business Transfers

Personal data may be transferred as part of:

Merger
Acquisition
Corporate restructuring
Financing
Sale of assets
Business transfer

Any such transfer will remain subject to applicable law and appropriate safeguards.

12. Data Processors and Third-Party Service Providers

We may appoint third-party service providers to process information on our behalf. Such providers may only process information as necessary to provide the contracted service and subject to appropriate contractual, confidentiality and security obligations. Examples include:

Hosting providers
Payment providers
Communication providers
Analytics providers
Security providers
AI technology providers
Tax and GST service providers

We seek to work with service providers that maintain appropriate technical and organisational safeguards.

13. International Data Transfers

SoarLedger is primarily intended for users in India.

Where personal data is transferred, processed or stored outside India through our service providers, such processing will be carried out in accordance with the DPDP Act, applicable government notifications and other applicable Indian laws. Where appropriate, we may implement contractual, technical and organisational safeguards for such transfers.

14. Data Retention

We retain personal data only for as long as reasonably necessary for:

Providing the Services
Maintaining your account
Completing transactions
Meeting contractual obligations
Meeting legal obligations
Tax and accounting requirements
Resolving disputes
Preventing fraud
Maintaining security
Enforcing agreements

Financial, tax and accounting records may need to be retained for periods prescribed under applicable Indian laws. When personal data is no longer required, we may delete, anonymise or securely dispose of it, subject to applicable legal and regulatory requirements. Deletion of an account does not necessarily result in immediate deletion of information that we are legally required to retain.

15. Data Security

We implement reasonable technical and organisational security measures appropriate to the nature of the personal data we process. Depending on the feature and system involved, these measures may include:

Encryption of data in transit using HTTPS/TLS
Access controls
Authentication controls
Role-based access
Multi-tenant data isolation
Logging and monitoring
Security auditing
Rate limiting
Secure session management
Short-lived access tokens
Backup and recovery controls
Infrastructure security controls
Employee access restrictions
Incident management procedures

However, no electronic transmission or storage system can be guaranteed to be completely secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying us promptly if you suspect unauthorised access.

16. Personal Data Breaches

If we become aware of a personal data breach involving personal data processed by us, we will assess and respond to the incident in accordance with applicable law. Where required by the DPDP Act, applicable rules or other law, we will provide notifications to the relevant authority and affected Data Principals within the applicable legal requirements. We may also take steps such as:

Containing the incident
Investigating its cause
Restricting unauthorised access
Restoring affected systems
Strengthening security controls
Providing legally required notifications

17. Your Rights as a Data Principal

Subject to applicable law and any limitations prescribed by law, you may have rights including:

Right to Access Information

You may request information regarding personal data processed about you and information concerning its processing, as permitted by law.

Right to Correction

You may request correction of inaccurate or incomplete personal data.

Right to Erasure

You may request erasure of personal data where permitted by applicable law. This right may be subject to legal, regulatory, contractual, accounting or other legitimate retention requirements.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent.

Right to Grievance Redressal

You may raise a grievance concerning our processing of your personal data.

Right to Nominate

Where applicable under the DPDP Act, you may nominate another individual to exercise your rights in accordance with applicable law.

18. How to Exercise Your Rights

You may contact us at:

Privacy: privacy@willsoarapp.com
Grievances: grievance@willsoarapp.com

When submitting a request, we may ask for reasonable information necessary to verify your identity and protect against fraudulent requests. We will process requests within the timelines prescribed under applicable law.

If your personal data was provided to SoarLedger by a business customer that acts as the Data Fiduciary, you may need to submit your request to that business. We will reasonably assist the relevant Data Fiduciary where required under our contractual arrangements and applicable law.

If you are dissatisfied with our grievance response, you may have the right to approach the Data Protection Board of India or another competent authority, as applicable under Indian law.

19. Children's Personal Data

SoarLedger is primarily designed for businesses, professionals and organisations. Our Services are not intentionally directed toward children. We do not knowingly seek to collect children's personal data except where such processing is lawfully permitted and appropriate safeguards, including verifiable parental consent where required, are obtained in accordance with applicable law.

If you believe that a child has provided personal data to us unlawfully, please contact us so that we can investigate and take appropriate action.

20. Business Customer Responsibilities

If you use SoarLedger on behalf of a business, you are responsible for ensuring that:

You have appropriate authority to use the Services.
You have a lawful basis for providing personal data to SoarLedger.
Individuals whose data you provide receive appropriate privacy notices where required.
You do not upload information unlawfully.
You use appropriate access controls for your organisation.
You protect your account credentials.
You comply with applicable privacy, employment, tax and other laws.

Where SoarLedger acts as a Data Processor, the relevant business customer remains responsible for determining the lawful purpose and means of processing its Customer Data.

21. Third-Party Services and Links

SoarLedger may integrate with or provide links to third-party services, including:

Payment gateways
Banking services
GST portals
Government portals
Tax services
Analytics providers
Communication services
AI services
Other third-party applications

Third-party services are governed by their own terms and privacy policies. We recommend reviewing their privacy policies before using those services. We are not responsible for the privacy practices of third-party services that operate independently from SoarLedger.

22. Marketing Communications

We may send service-related communications necessary for the operation of your account, including:

OTPs
Login notifications
Security alerts
Payment confirmations
Invoice notifications
Subscription notifications
Service announcements
Important account notices

Where permitted by law, we may also send promotional or marketing communications. You may opt out of non-essential promotional communications using the unsubscribe mechanism provided in the communication or by contacting us. You will continue to receive essential transactional, security and legal communications where necessary.

23. Account Security

You are responsible for maintaining the confidentiality of:

Passwords
OTPs
Authentication information
API keys
Access tokens
Other account credentials

You must not share credentials with unauthorised persons. If you suspect that your account has been compromised, contact us immediately.

24. Data Accuracy

You are responsible for ensuring that information entered into SoarLedger is accurate, complete and up to date. SoarLedger may provide tools to help identify errors, duplicates or inconsistencies, but we do not guarantee the accuracy of information entered by users or received from third parties.

25. Automated Processing

Certain SoarLedger features may use automated systems, algorithms or artificial intelligence to:

Categorise transactions
Analyse accounting information
Identify patterns
Generate reports
Provide recommendations
Assist with accounting workflows
Answer questions
Automate repetitive tasks

Automated outputs may not always be accurate. Where a decision may have significant legal or financial consequences, users should independently review relevant information before acting upon it.

26. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

Changes to our Services
Changes in technology
Changes in applicable law
Changes in regulatory requirements
Changes to our privacy practices

When we make material changes, we may notify users through the Services, email or another appropriate method. The revised Privacy Policy will display a new “Last Updated” date.

27. Grievance Redressal

In accordance with applicable Indian law, WILLSOAR Technologies LLP maintains a mechanism for receiving and resolving privacy-related grievances.

Grievance Officer
Name: Rajil K
Designation: Grievance Officer
Organisation: WILLSOAR Technologies LLP
Email: grievance@willsoarapp.com
Address: 2nd Floor, Standard Design Factory, KINFRA Industrial Park, Near Kannur Airport, Mattannur, Kannur – 670702, Kerala, India.

You may submit a grievance concerning:

Personal data processing
Privacy requests
Consent
Data correction
Data deletion
Unauthorised use of personal data
Security concerns
Other privacy-related matters

We will acknowledge and address grievances within the timelines prescribed under applicable law.

28. Contact Us

For privacy questions, Data Principal requests or general privacy matters:

WILLSOAR Technologies LLP — SoarLedger
Privacy Email: privacy@willsoarapp.com
Grievance Email: grievance@willsoarapp.com
Registered Office: 2nd Floor, Standard Design Factory, KINFRA Industrial Park, Near Kannur Airport, Mattannur, Kannur – 670702, Kerala, India.

29. Governing Law

This Privacy Policy shall be governed by and interpreted in accordance with the applicable laws of India. Any dispute concerning this Privacy Policy shall be subject to the applicable jurisdiction of Indian courts and authorities, subject to mandatory rights and remedies available under applicable law.

30. Important Notice

SoarLedger is an accounting and business-management technology platform. SoarLedger does not provide legal, tax, accounting, investment or financial advice merely by providing software functionality, reports, calculations, automated suggestions or AI-generated information. Users remain responsible for verifying information and complying with applicable tax, accounting, financial and regulatory obligations.

31. Customers in the Gulf (GCC)

This section applies if you or your company are based in the United Arab Emirates, Oman, Bahrain, Qatar, Kuwait or Saudi Arabia.

Where your data is stored. SoarLedger stores customer data on servers in India (Mumbai). By using SoarLedger from the Gulf, your data is transferred to and processed in India under the safeguards described in sections 13 and 15.
Roles. For the accounting records you enter (customers, vendors, invoices, employees), your business decides what is collected and why; we process that data on your behalf to provide the service. For your own account details we are responsible as described in this policy.
Local laws. We aim to handle personal data in line with the data protection laws that apply to our Gulf customers, including the UAE Federal Decree-Law No. 45 of 2021, Oman's Personal Data Protection Law (Royal Decree 6/2022), Bahrain's Law No. 30 of 2018, Qatar's Law No. 13 of 2016 and Saudi Arabia's Personal Data Protection Law. If your business must keep data inside its own country, tell us before you subscribe.
Your requests. You can ask for access, correction, deletion or a copy of your data, or object to processing, using the contact details in section 28. We reply within the time the applicable law allows.