Data Usage & Security Policy

Last Updated: 08-10-2026

This policy summarises how data is owned, used and protected in caTantr. The full details are in our Privacy Policy and Terms of Service.


1. Ownership

  • Your data: the Firm owns the client records, documents and other content it keeps in caTantr.
  • Service data: BharatTantr Pranali owns service logs and aggregated, anonymised statistics about how the Services perform. These never identify a Firm's clients and never include Google user data.

2. How Data Is Used

  • Data is used only to provide the Services to the Firm, keep them secure and provide support.
  • Google user data (Drive, Gmail, Calendar and Contacts) is used only for the features the Firm turns on, in line with the Google API Services User Data Policy, including its Limited Use requirements.
  • We do not sell data, use it for advertising, or use Google user data to train AI models.

3. Security

  • Our commitments: encryption in transit (HTTPS/TLS) and at rest, Google access tokens kept on our servers only, the narrowest Google permissions that support each feature, role-based access inside each Firm, signed client upload links, and records of sensitive actions such as sent emails.
  • Your responsibilities: keep your devices and Google account secure (we recommend 2-Step Verification), give Users only the permissions they need, and share client portal access, upload links and Drive links only with the right people.

4. Third-Party Services

caTantr runs on Google Cloud and Firebase and connects to Google Workspace and the Google Gemini API as described in the Privacy Policy. These services are run by Google under their own terms.


5. Backups and Deletion

  • Documents uploaded through caTantr are stored in the Firm's own Google Drive, which the Firm controls.
  • Firms can export many records (such as clients, contacts, tasks and finance data) from caTantr. We recommend keeping your own copies of important records.
  • When the Firm account is deleted, the Firm's data in caTantr is permanently deleted and Google access is revoked. Data in the Firm's Google account is not deleted.

6. Liability

Our liability for any loss or unauthorised disclosure of data is limited as set out in the Terms of Service, to the extent the law allows. Nothing in this policy limits liability that cannot be limited under applicable law.

    caTantr