Effective Date: September 2026 · Compliant with the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable rules notified by the Ministry of Electronics & Information Technology (MeitY), Government of India.
Settlr operates as a Data Fiduciary for the business and personal data you provide. We only collect the minimal digital personal data required to generate legal GST tax invoices, compute MSMED Act 45-day statutory late fees, generate dynamic NPCI UPI QR payment links, and audit expenses. You possess statutory rights to access, download a complete data export, correct, or permanently erase your personal data at any time from your account settings.
This Privacy Notice applies to all digital personal data processed by Settlr ("we", "us", "our"), having its primary digital platform at usesettlr.in. Settlr provides financial operating tools for Indian micro, small, and medium enterprises (MSMEs), independent contractors, and freelance professionals.
We adhere to the principle of Data Minimization under Section 6 of the DPDP Act. We only collect data essential for the performance of our financial and legal compliance services:
| Data Category | Specific Data Points | Statutory / Operational Purpose |
|---|---|---|
| Identity & Contact | Full Name, Email Address, Phone/WhatsApp number, Business Name. | Account creation, user authentication, customer support, and sending payment reminder notifications. |
| Tax & Statutory Identifiers | GSTIN (Goods and Services Tax Identification Number), PAN, MSME Udyam Registration Number. | Generating statutory GST-compliant invoices and computing Section 15-16 MSMED Act late interest claims. |
| Banking & Payment Details | UPI VPA (Virtual Payment Address), Bank Account Number, IFSC code, Bank Name. | Embedding dynamic NPCI-compliant UPI QR codes on client invoices and enabling direct customer-to-vendor settlement. |
| Client / Counterparty Data | Client Name, Company Name, Client GSTIN, Billing Address, Client Email/Phone. | Printing consignee and purchaser details on statutory tax invoices and delivery memos. |
| Documents & OCR Data | Uploaded contract documents, physical receipt photos, invoice line items. | Performing automated AI OCR expense categorization and contractual risk assessment via secure cloud AI capabilities. |
Under Section 4 and Section 6 of the DPDP Act, Settlr processes your personal data on the following lawful bases:
To deliver resilient cloud services, Settlr engages trusted Data Processors who are bound by stringent confidentiality and security obligations:
We retain your personal data only as long as necessary to fulfill the purposes for which it was collected or to satisfy legal, regulatory, or tax obligations:
As a Data Principal under the DPDP Act 2023, you have the following enforceable legal rights:
You can download a complete, structured JSON archive of your personal profile, clients, invoices, and expenses anytime via Settings → Data Rights.
You have the right to correct, update, or complete any inaccurate or obsolete personal and business details directly in your Profile settings.
You may trigger an immediate account deletion and personal data purge through the Data Rights tab, subject to statutory tax compliance hold periods.
You have the right to nominate an individual who shall, in the event of your death or incapacity, exercise your rights as a Data Principal.
In compliance with Section 8(10) and Section 13 of the DPDP Act, Settlr has designated a dedicated Grievance Redressal Officer to address your queries, requests, or complaints:
Name: Grievance Redressal Desk, Settlr Compliance
Email: grievance@usesettlr.in (copy: privacy@usesettlr.in)
Response Time (SLA): Initial acknowledgment within 24 hours; formal resolution within 7 business days.
If you are unsatisfied with the resolution provided by our Grievance Officer, you may file an appeal before the Data Protection Board of India (DPBI) in accordance with Section 13(4) of the DPDP Act, 2023.