Privacy Policy

1 Introduction & Scope

CogFocus Technologies (“we”, “our”, or “us”) is committed to protecting your privacy and ensuring the security of your business and personal data. This policy applies to the CogFocus Finance mobile application (Package: com.cogfocus.finance) and our cloud web portal.

2 Information We Collect

• Account & Company Credentials: Company code, username, email address, and encrypted passwords used for authentication.
• Billing & Business Records: Customer/party details, GSTIN, billing addresses, inventory item catalogs, transaction records, tax invoices, purchase vouchers, and payment receipts.
• Device & Usage Data: IP address, device model, operating system version, and anonymous performance telemetry to deliver fast and reliable services.
• Push Notification Tokens: Firebase Cloud Messaging (FCM) registration tokens used exclusively to deliver critical accounting, transaction, and system alerts to your device.

3 Device Permissions & Purpose

4 How We Use Your Data

We use your information strictly to provide and enhance our GST billing platform:

• Generating GST-compliant tax invoices, GSTR reports, and financial ledgers.
• Synchronizing data securely in real time across your authorized mobile and desktop devices.
• Delivering Over-the-Air (OTA) engine bug fixes and stability improvements.
• Enforcing strict rate limiting and multi-tenant security barriers against unauthorized access.

5 Data Security & Tenant Isolation

All data transmitted between your device and CogFocus Finance is encrypted in transit using industry-standard TLS/HTTPS protocols. Each tenant company operates in an isolated environment protected by row-level cryptographic safeguards. We do not sell, rent, or monetize your business or financial records to third parties.

6 Third-Party Infrastructure

We utilize verified infrastructure providers to ensure high availability:

• Google Firebase: Cloud Messaging for push notification dispatch.
• Google Play Services: Core application distribution and in-app updates.
• Shorebird: Secure, signed binary over-the-air code execution.

7 Data Retention & Deletion Rights

You retain full ownership of all data created within your account. You have the right to request access, modification, export, or permanent deletion of your account and related records at any time by contacting our support team.