Legal

Privacy Policy

Effective from 20 July 2026 · Last updated 23 September 2026 · Margyn Labs Pvt Ltd

Draft notice: this policy is a first draft prepared for the pilot and has not yet been reviewed by counsel. It will be finalized before Margyn is generally available.

Margyn helps you see your business's financial health by reading data you choose to connect, including TallyPrime (through the Margyn desktop agent), Zoho Books, Odoo, Razorpay, Cashfree and Shopify, plus uploaded files, bank information and GST figures. This page explains, in plain terms, what we collect, why, and what rights you have over it under India's Digital Personal Data Protection Act, 2023 ("DPDPA"). If anything here is unclear, email us at business@margynlabs.com and we'll explain it directly.

01Who this policy covers

This policy applies to anyone who creates an account on Margyn (margynlabs.com and the Margyn application at margynlabs.com/app.html), operated by Margyn Labs Pvt Ltd ("Margyn," "we," "us"). It covers both your personal account information and the business financial data you choose to upload or connect.

02What we collect

Category	Examples
Account information	Email address, password (encrypted, never stored in plain text)
Business profile	Company name, revenue range, industry, city, GSTIN
Financial data you provide	Bank balances, receivables and payables ledgers, revenue, net profit, monthly operating expenses, GST payable and unclaimed input tax credit, entered manually or via an uploaded Excel/Tally export
Financial data via connected accounts	Where you choose to connect them, we read (read-only: we cannot modify or delete anything in these systems): ledgers, vouchers and outstanding bills from TallyPrime; invoices, bills, payments, ledgers and GST records from Zoho Books or Odoo; payments, settlements and refunds from Razorpay or Cashfree; and orders and refunds from Shopify
Documents you send us	Spreadsheets, PDFs and images you upload in the app or forward to the Margyn WhatsApp number (for example invoices, bills and receipts), so we can propose how to record them. Nothing is recorded until you approve it
Financial data via future connected accounts	Where you choose to connect a bank account (via RBI Account Aggregator) or the GST portal (via a licensed GSP), the read-only data those rails provide
Usage data	Which parts of the app you use, timestamps, and general interaction events, used only to improve the product
Communications	Your WhatsApp number and opt-in status, the messages you exchange with Margyn on WhatsApp and in the in-app chat, and, if you add them, names and WhatsApp numbers of colleagues or customers you ask Margyn to message on your behalf

We do not collect more than what's needed to calculate your Pulse Score, generate your briefing, and operate your account.

03How we use it

To calculate your six financial vitals and composite Pulse Score
To generate your briefings, answer your questions in the app and on WhatsApp, and propose how to record documents you send (the relevant financial data is sent to Anthropic's Claude API for these purposes only, see Section 5)
To send WhatsApp messages you have enabled: your Opening and Closing Bell briefings, and, only if you turn on payment reminders and approve them, reminders to your customers about invoices they owe you
To show you your snapshot history and trend over time
To operate the financing-interest feature, only if and when you explicitly submit that form (see Section 6)
To respond to support requests you send us
To improve the product, using aggregated, non-identifying usage patterns

We never use your financial data to train external AI models, and we never sell it. Full stop, this isn't a "unless you opt out" clause, it's a standing rule.

04What we don't do

We don't sell, rent, or trade your data to anyone, for any reason.
We don't share your financial data with a lending partner unless you've explicitly submitted the consent checkbox on the Financing tab, and only for the specific purpose of that introduction.
Every Margyn connection (Tally, Zoho Books, Odoo, Razorpay, Cashfree, Shopify, and, once live, bank and GST) is read-only. We cannot move money, make payments, place orders, change your books, or file anything on your behalf.
Margyn's agents never act on their own on data only one source reports. Proposed changes to your Margyn records wait for your approval.
We are not a lender, credit bureau, or loan broker, and we don't share data with anyone for credit-scoring purposes outside a lending introduction you've consented to.

05Third parties who process data on our behalf

Provider	Purpose	What they see
Supabase	Database hosting and authentication for all account and financial data, including data pulled from your connectors	All account and financial data, protected by row-level security so only you can read your own records
Razorpay / Cashfree	Payment settlements and transaction data, if you connect either gateway	Read-only access to your payments, settlements, and refunds, via API credentials you provide
Shopify	Order, refund, and product data, if you connect your Shopify store	Read-only access via a Custom App token you generate and provide
Zoho Books	Invoices, bills, ledgers, and GST records, if you connect your Zoho Books organization	Read-only access via OAuth 2.0, scoped to a single Zoho Books organization you approve
Odoo	Invoices, bills and cash balances, if you connect your Odoo database	Read-only access via an API key you provide
TallyPrime (Margyn desktop agent)	Ledgers, vouchers and outstanding bills, if you install the agent	The agent runs on your own computer, reads Tally locally, and sends data to Margyn over HTTPS. Tally data never passes through any third party
Anthropic (Claude API)	Briefings, answering your questions, proposing how to record documents you send, and suggesting review items	The data a given request needs: your vitals and Pulse Score, relevant ledger entries (for example open invoices and counterparty names), your question, and any document you uploaded or forwarded. Anthropic does not use data sent through its API to train its models
Gupshup and Meta (WhatsApp)	Delivering WhatsApp messages between you and Margyn	Your WhatsApp number and the content of those messages, including documents you forward
Vercel	Application hosting	Standard web request logs

Each of these providers is a data processor acting on our instructions, not an independent owner of your data. As we add bank (Account Aggregator) and GST (GSP) connectivity, this table will be updated before those integrations go live.

06The Financing tab, specifically

Margyn is not a lender and does not currently have a signed agreement with any lending partner. If you submit the Financing tab's interest form, you are consenting to us storing your business's Pulse Score and vitals and sharing them with a lending partner only once one is formally onboarded, and only for the purpose of a funding introduction. You can withdraw this consent at any time by emailing business@margynlabs.com, and we will delete the associated lead record on request.

07Your rights under the DPDPA

As a person whose data we process ("Data Principal" under the DPDPA), you have the right to:

Access: request a copy of the personal and business data we hold about you
Correction: fix inaccurate information (most of this you can already edit directly on your Profile tab)
Erasure: request deletion of your account and associated data, subject to any legal retention requirement
Withdraw consent: for any consent you've given us, including the Financing tab consent, at any time
Grievance redressal: raise a complaint about how we've handled your data

To exercise any of these rights, email business@margynlabs.com with the subject line "DPDPA request." We will respond within a reasonable time and in any case within the period required under the DPDPA.

08Data retention

We retain your account and financial data for as long as your account is active, so your Pulse Score history remains meaningful. If you request account deletion, we will delete your personal and business data within a reasonable period, except where we're required to retain records for legal, tax, or audit purposes.

09Cookies

margynlabs.com uses essential cookies required for the site to function, and, only if you accept them via the cookie banner, analytics cookies to understand how the site is used. We do not use third-party advertising cookies, and Margyn does not run ads.

10Security

Data is encrypted in transit (HTTPS/TLS) and at rest. Access to your records is enforced at the database level through row-level security, so your data is only ever readable by your own authenticated account. Margyn staff do not look at your financial data except to resolve a support request you make; our internal operations reporting uses counts and connection health, not your figures. No system is perfectly secure, and we will notify affected users without undue delay in the event of a data breach materially affecting their information, as required under applicable law.

11Children's data

Margyn is a business tool intended for use by adults operating or advising an SME. We do not knowingly collect data from anyone under 18.

12Changes to this policy

We may update this policy as the product evolves, particularly as bank (Account Aggregator) and GST (GSP) integrations go live. Material changes will be notified via email or an in-app notice before they take effect.

13Contact

For any question about this policy or how your data is handled, email business@margynlabs.com. Until we formally designate a Grievance Officer under the DPDPA, this address serves that function.