Privacy Policy

Ruhu AI is built for finance professionals, so we treat your data with the care your clients expect. This page explains, in plain language, what we collect and how we handle it.

What we collect

• Account: your name and email from Google sign-in.
• Conversations: the messages you send and the answers Ruhu returns.
• Files: documents you upload (e.g. spreadsheets, PDFs) so Ruhu can work on them.
• Usage & billing: token counts and wallet transactions, so we can charge per use.

How your data is processed

To generate answers, your messages and uploaded files are sent to third-party AI providers, OpenAI, Google and Anthropic in the USA, and DeepSeek and Z.ai in China (uploaded files are analysed by OpenAI in the USA). The provider for a given message depends on the model you pick or that Ruhu routes to, and each model's provider is shown in the picker. These providers process the data to produce a response and, per their API terms, do not use it to train their models. We never sell or share your data for advertising. The full list with locations is in our Data Processing terms.

For regions with stricter rules (UAE PDPL, India DPDP Act), Ruhu masks typed identifiers (such as TRN, GSTIN, PAN, IBAN and email) before sending text to the AI, then restores them in the reply you see. Uploaded files are analysed in a secure sandbox and deleted after the run, they are not masked, because the analysis needs the real figures to reconcile them. Region-resident processing is on our roadmap.

Storage & retention

Data is encrypted in transit and stored in a managed Postgres database (Neon, Singapore region). Your conversations and files are kept until you delete them or close your account; deleting a conversation removes its messages and attachments.

Deleting client data & your account

When you disconnect an accounting organisation, the connection is removed but the synced books are kept so reconnecting is painless. You can additionally request full erasure of a disconnected organisation's synced data; your own working papers (reviews, reconciliations) are kept by default in line with professional retention norms, and deleted only if you explicitly include them. You can also delete your entire account and its data. Erased records are removed from the live database immediately; copies persist in point-in-time backups until those backups rotate out, after which they are gone entirely.

Your choices

You can delete any conversation at any time, and request deletion of your account and associated data. Under the DPDP Act / PDPL you may also request access to or correction of your personal data.

Important

Ruhu is a decision-support tool, not a registered tax or legal practitioner. Answers can be wrong, always have a qualified professional confirm anything you rely on or file.

Contact

Questions about your data? Email [email protected].