Sign in Create account
Legal

Privacy Policy

Last updated: 14 November 2026

In short. Your books are yours. We store them to run AgentKuber for you. We do not sell them, share them for advertising, or use them to train AI models. You can export them at any time and ask us to delete them.

1. Who we are

AgentKuber is operated by Wild Cats Media, Second Floor, SCO No. 47, Omaxe World Street, Sector 79, Faridabad, Haryana 121004, India. In this policy "we" and "us" mean that business, and "the service" means the AgentKuber website and application at https://agentkuber.com.

2. Two kinds of information

Account information is about the people who sign in: you and anyone your organisation adds.

Business records are what your organisation puts into the service: its companies, invoices, payments, bills, bank statements and documents. These can include details of your own customers and vendors. Your organisation decides what goes in and remains responsible for it; we handle it only to provide the service to you.

3. What we store

  • About you: name, e-mail address, phone number if you add one, role, and your organisation's name. Your password is stored only as a one-way hash. If you turn on two-step sign-in, its secret is stored encrypted.
  • If you sign in with Google: Google tells us your name, your e-mail address and its own identifier for your account. We receive nothing else from Google and send nothing about your books to Google.
  • Business records: companies and their registrations (PAN, GSTIN, TAN, addresses, partners or directors you enter); the documents and payment events your products send through the API (which may carry a buyer's name, e-mail, phone, state and GSTIN); bills and vendors (which may carry a vendor's PAN and GSTIN); bank statements you import; and files you upload.
  • Your phone number: only if you enter it, to send you the daily reminder on WhatsApp when you have switched that on yourself.
  • Records of use: the IP address and browser of each sign-in, when you were last active, and an audit trail of who changed what. Our web server also keeps ordinary request logs.

4. Cookies

We use only the cookies the service cannot work without: one that keeps you signed in, one that remembers which company you are looking at, one that carries a message from one page to the next, and two short-lived ones while you sign in with Google. There are no advertising cookies and no third-party analytics on this site.

5. What we use it for

  • To provide the service: keep your books, prepare your returns and workings, and show them to the people your organisation allows.
  • To keep it safe: limit sign-in attempts, detect misuse, and keep the audit trail.
  • To write to you about your account: confirming your address, password links, and a daily reminder of what is due. Each person can switch the reminder off under My account; it is sent on WhatsApp only to a person who switched that on.
  • To answer you when you ask for help.

We do not sell personal information or business records, do not use them for advertising, and do not use them to train AI models.

6. Others who handle information for us

  • Hosting: the service runs on servers we rent from a hosting provider. Encrypted backups are copied to a second server that we operate.
  • E-mail and WhatsApp: account e-mails and daily reminders are delivered through Trafficaro, a messaging service of our own group. It uses a commercial e-mail delivery provider for e-mail and the WhatsApp Business Platform (Meta) for WhatsApp. They receive the address or number a message goes to and the message itself; we do not count opens or clicks.
  • Google: only if you choose "Continue with Google", and only to confirm who you are.
  • Services your organisation connects itself: if your organisation adds its own Anthropic API key, a bill you ask the service to read is sent to Anthropic under your organisation's own account with them. Anthropic's own terms apply to what you send it.

We disclose information to a government authority only when the law requires it.

7. How it is protected

  • All traffic uses HTTPS.
  • Uploaded files are encrypted with AES-256-GCM before they are written to disk. API secrets, service keys and two-step secrets are stored encrypted.
  • Passwords are stored only as argon2id hashes. Two-step sign-in is available to every user.
  • Each organisation's records are kept apart, and every screen checks that a record belongs to the organisation of the person asking.
  • Every change is written to an audit trail that cannot be edited or deleted.
  • A backup is taken every night, encrypted, and copied to a second location.

No system can promise perfect security. If we learn of a breach that affects your organisation's information, we will tell its owners without undue delay and report it as the law requires.

8. How long we keep it

We keep an organisation's account and records for as long as the account is open. When an owner asks us to close it, we delete its records and files from the live service within 30 days; copies in backups are overwritten as those backups expire. A sign-up that is never confirmed creates no account, and the record of the request is deleted within 30 days.

Tax laws oblige a business to keep its own books for several years. Export what you must keep before you close an account.

9. Your choices

  • See and correct: your own details are under My account. An owner or administrator can correct anyone's details and all business records.
  • Take it out: every list exports to Excel and CSV, and the CA pack downloads registers, ledgers and workings for any period.
  • Delete: an owner can ask us to close the organisation's account. If you are a member of someone else's organisation, ask its owner first: the records belong to that organisation.
  • If your details appear in someone's books (for example as their customer or vendor), ask that business. We will pass on a request sent to us.

You also have the rights given by India's Digital Personal Data Protection Act, 2023, including access, correction, erasure and grievance redressal.

10. Children

The service is for businesses. It is not meant for anyone under 18.

11. Changes to this policy

If we change this policy in a way that matters, we will say so on this page and tell account owners by e-mail or inside the service before the change takes effect.

12. Contact and grievances

Questions, requests and complaints about privacy go to the Grievance Officer, Wild Cats Media, Second Floor, SCO No. 47, Omaxe World Street, Sector 79, Faridabad, Haryana 121004, India. We acknowledge a complaint within 3 working days and aim to resolve it within 30 days.