Privacy policy

Last updated: 5 October 2026. Applies to the Counter Diary website (counterdiary.com) and the Counter Diary app (app.counterdiary.com), provided by SN Corporates, SNC Building, Kanchanpur, North Tripura, Tripura 799270 ("we", "us"). We are the data fiduciary under India's Digital Personal Data Protection Act, 2023 for the account and billing data described below. For the diary entries your CSC records, you (the CSC owner) decide what is entered; we process it to provide the service to you.

1. What we collect

Account data

• Your name, email address and mobile number, and the same for staff you invite.
• Your CSC's name, address, state and district, and optionally your CSC ID and GSTIN (for invoices).
• A password, stored only as a one-way hash. We cannot read it.

Diary data (entered by you and your staff)

• Entries: amounts, entry type, service, date and time, notes, reference numbers, and which account the money moved between.
• Account names and balances, daily closings, expense categories.
• Customer names and mobile numbers, if you choose to save them.

Technical data

• Which devices have opened your CSC (a device label such as "Android · 5/10/2026", the browser type, and when it last synced), so the owner can remove a lost phone.
• An audit log of actions in your CSC: who did what, when, from which device.
• Server logs with IP addresses, kept for 30 days for security and troubleshooting.

We do not collect your location, contacts, photos or anything else from your phone. The website uses no advertising trackers.

2. Why we use it

• To run the service: show your diary on your devices, keep them in step, send invitation and password-reset emails, and send reminders inside the app.
• To bill you and issue GST invoices.
• To keep accounts safe: detect misuse, lock removed devices, answer support requests.
• To improve the product, using totals that do not identify any CSC or person.

We never sell personal data, and we do not use your diary data for advertising or share it with other businesses.

3. Where it is stored

On servers in Mumbai, India, operated by our hosting provider (Supabase, running on Amazon Web Services). Data is encrypted in transit and at rest. Daily backups are kept for 7 days. Transactional emails (invitations, password resets, invoices) are sent through an email delivery provider; it sees only the email address and the message.

A copy of your CSC's recent entries is also stored on each device that is logged in, so the app works offline. Logging out removes that copy from the device.

4. Who can see your data

• The owner of a CSC sees everything in that CSC.
• Staff see only what the owner has allowed through permissions. This is enforced on our servers on every request.
• Our support staff can open a CSC in a read-only support view only when you ask for help. The owner is notified, a reason is recorded, and every such view is logged.
• No one outside your CSC can see your diary.

5. How long we keep it

• While your subscription is active, and for 90 days after it ends, so you can renew and pick up where you left off.
• After that, diary and account data are deleted. Invoices and payment records are kept for 8 years, as required by Indian tax law.
• You can ask us to delete your CSC earlier at any time (see section 7).

6. Cookies and local storage

The app stores your login and a working copy of your diary on your device so it can work offline. The website stores nothing except what is needed for the pages to work. No third-party cookies.

7. Your rights

Under the Digital Personal Data Protection Act, 2023, you may:

• Ask what personal data we hold about you.
• Correct it (you can edit your profile and CSC details in Settings yourself).
• Download your diary as CSV at any time from Reports.
• Ask us to delete your account and CSC data.
• Withdraw consent, which means closing your account.
• Complain to the Data Protection Board of India if we do not resolve your concern.

Write to info@counterdiary.com. We respond within 7 days. Our grievance officer can be reached at the same address, or by post at SN Corporates, SNC Building, Kanchanpur, North Tripura, Tripura 799270.

8. Staff and customers

If you are a staff member, your owner invited you, and the owner controls the CSC's data, including entries you made. If you are a customer of a CSC whose name and number were saved in a diary, contact that CSC first; they can edit or anonymise your record. You may also write to us.

9. Children

Counter Diary is for businesses and is not meant for anyone under 18.

10. Changes

If we change this policy in a way that matters, we will tell you in the app and by email before it takes effect.