Opifex Labs ("we", "us") publishes LendaarMitra — GST Rule 37 & 180-Day ITC Compliance. LendaarMitra is an Opifex Labs product; our house policies live at opifex.in. For this policy under the Digital Personal Data Protection Act, 2023 ("DPDP Act"), we are the Data Fiduciary and you are the Data Principal.
| Data | When | Why (purpose) |
|---|---|---|
| Name, firm, email, phone, city, profession, GSTIN (optional) | Download form / purchase checkout | Sending your download link and license key; support; and — only if you tick the consent box — product updates and GST tips |
| Payment details (card/UPI etc.) | Purchase | Processed entirely by our payment provider Razorpay; we never see or store your card/UPI credentials — we receive only a payment reference, your name, email and phone |
| License key, plan, expiry, activation timestamps, IP address | Trial / activation / periodic license checks | Operating the license you purchased; preventing abuse and fraud |
| Hardware identifier hashes | Trial / activation | Binding the license to your PC. We store one-way SHA-256 hashes of machine identifiers (Windows machine id, motherboard/disk serial, CPU id) — not the identifiers themselves; they cannot be reversed into your hardware details |
| A sanitised ledger sample, and the accounting package and version that produced it | Only when you send one, to have a new ledger format supported | Building and maintaining the parser for that format. The sample is sanitised by you, with the Ledger Sanitiser in the product, before it is sent. If an unsanitised file reaches us we delete it on receipt without opening it. Full terms: section 6 of the Terms of Use |
We do NOT collect: your clients' ledgers, the workbooks LendaarMitra produces, supplier names, invoice numbers or any figure from them. All processing happens offline on your PC. The one exception is a sample you deliberately send us under section 6 of the terms, which you sanitise first.
We process the data above to perform the contract you request (trial, purchase, license service) under section 7 of the DPDP Act. A ledger sample is processed on the basis of your request to have that format supported, and you may withdraw it and ask us to delete the sample at any time. Marketing email is sent only with your explicit opt-in consent, which you may withdraw at any time using the unsubscribe link present in every marketing email or by writing to us.
Website, licensing and lead data are stored with Cloudflare, Inc. (Workers/D1 infrastructure), which may store data outside India. Payments are processed by Razorpay Software Pvt. Ltd. in India. Transactional and marketing emails are delivered via Resend. Sanitised ledger samples are held on our own development machines and are not uploaded to any third-party service. Each provider processes data only on our instructions.
You may request: access to your personal data, correction, erasure (where we are not legally required to retain it), and grievance redressal. Write to hello@opifex.in. We respond within 30 days. If unsatisfied, you may complain to the Data Protection Board of India.
A ledger you process with LendaarMitra belongs to your client, not to you and not to us, and your own professional confidentiality obligations apply to it. Because the software works offline, we are not a processor of that data at all. If you send us a sample, please sanitise it first — that is what the Ledger Sanitiser is for, and section 6 of the terms sets out what we do with what arrives.
Grievance Officer, Opifex Labs · hello@opifex.in · Ghaziabad, Uttar Pradesh, India
This site uses no advertising or analytics cookies. Only strictly-functional storage (if any) is used to make the site work.
We will post any changes to this page and update the date above. Material changes will be emailed to active license holders.