1. Who we are and what this notice covers
AI Zeny is provided by Velirden Technologies LLP, with its registered office at H-117, Hatkeshwar Vihar, Ujjain, Madhya Pradesh 456006, India ("we", "us"). This notice explains how we handle personal data in three places that work differently: this marketing website, the AI Zeny cloud service (the portal and the AI Zeny API), and the AI Zeny Windows app that your organization installs on its own PC.
AI Zeny is a service for businesses. Your organization decides which accounting data AI Zeny reads, which systems receive it and what its scripts do. When personal data about your organization’s own customers, suppliers or staff appears in that accounting data, your organization decides why and how it is processed, and we handle it on your organization’s behalf. For that data, your organization’s own privacy notice and obligations apply; this notice does not replace them.
2. This website and your enquiries
With website analytics switched off, as it is now, the public marketing pages set no cookies, store nothing in your browser and load no analytics or advertising scripts. There are no advertising measurement or remarketing pixels on these pages. Visiting from an advertisement does not by itself enable tracking here. The Cookie Notice gives the details.
Our hosting and security infrastructure may process ordinary request information, such as your IP address and the time of a request, to deliver pages and protect the service. The exact web-server log fields and how long they are kept have not been confirmed for publication yet.
If you write to support@aizeny.com or support@aizeny.com, call, or send a WhatsApp message to the number on the contact page, we receive what you send: for example your name, email address or phone number and your message. We use it to answer you and keep it while the conversation needs it. WhatsApp messages are also handled by WhatsApp under its own terms. If you use the contact form, your name, email address, topic and message are emailed to AI Zeny support through the same email service that sends account verification codes, with your address as the reply-to address. The website and the AI Zeny API do not store the message; to limit abuse they keep short-lived counters based on one-way digests of your network address, your email address and the message, which expire within an hour. The email is kept in the support mailbox while the conversation needs it.
3. Your organization account
When an administrator registers an organization or uses the portal, the AI Zeny cloud service keeps:
- the organization’s name and country;
- the administrator’s name, email address and WhatsApp number, and when each was verified;
- the password, which Indian law treats as sensitive personal data, stored only as a one-way hash (portal passwords have at least 12 characters);
- security records: sign-in sessions with the IP address and a one-way hash of the browser’s user-agent string, sign-in attempts with the IP address and a one-way hash of the email address, failed sign-in counts and temporary lockouts, password-recovery and verification requests with the IP address they came from, and an audit trail of account actions with the IP address;
- plan and subscription records;
- API token records: each token’s name, scope, expiry and when and from which IP address it was last used (the token itself is kept only as a one-way digest and is shown once);
- the enrolled PC’s record: the name given to it in the portal, the app version, when it was last seen and the health state of the app’s components;
- your organization’s Pusher Channels settings, with the app secret stored encrypted and never shown again.
Verification codes sent by email and WhatsApp are six digits, valid for 10 minutes and stored only as a one-way digest; their records are deleted 7 days after they expire. Email is sent through an email (SMTP) service and WhatsApp codes through a WhatsApp messaging service; see Subprocessors.
We use this data to create and secure the account, verify contact details, sign you in, run the service, keep an audit trail, prevent misuse, provide support and meet legal obligations.
4. Partner accounts and referral links
If you register a partner account, we keep your name, optional firm name, country, email address and WhatsApp number, verification status, password hash, referral code, account status and security records. We use them to operate and secure the partner account and its links to organizations. A partner account does not itself put a partner agreement in force; the registration notice explains its current status.
Registering an organization through an active partner’s referral link can link that organization to the partner. AI Zeny administrators can also manage these links. A linked partner can see the organization’s name, country, registration and link dates, and access status, and can change its name or country and pause or resume access under the partner controls. This view does not give the partner your accounting records, administrator contact details, passwords or API tokens. Ask support about your organization’s partner link.
5. The AI Zeny Windows app on your PC
The Windows app runs on a PC your organization controls. It connects to the BUSY database on that PC or network (SQL Server or Microsoft Access) using connection details your organization enters there. Queries and the API’s read operations do not change BUSY data. Write APIs create or change accounting records, including accounts, items and supported vouchers, using the details your organization submits. Those details may contain personal data such as names, addresses and contact details. Voucher posting writes to BUSY only after an authorized user of your organization has reviewed and authorized that posting. A SQL Server password entered in the app is stored encrypted on that PC only.
The app keeps these records on the PC, not in the AI Zeny cloud:
- company connections, saved queries, scripts and schedules;
- a Local API request log (time, operation, result status and a token fingerprint, without request or response content or the caller’s IP address), kept for 30 days;
- a history of scheduled script runs (names, times, status and any error message, which can include text written by the script’s author); these records are not deleted automatically yet;
- application log files, rotated daily and kept for 14 days; the app does not write request content, query text, results or sign-in details to them;
- the verifier for the app’s local password or PIN, which is created on the PC and never sent anywhere.
To enrol, the app sends only the one-time enrollment code and its version to the AI Zeny API. Afterwards it reports its version, uptime and component health about every five minutes; it does not send the PC’s name, operating-system details or hardware identifiers, although the AI Zeny API sees the network address a connection comes from. The app checks for updates by contacting GitHub, where the update files are published, so GitHub also sees that network address.
6. Local API requests and requests relayed through the cloud
Local API requests travel only inside your network, from your systems to the app on your PC. They do not pass through AI Zeny’s servers.
A request to the AI Zeny API is relayed to your PC. The request details, such as the operation, company, financial years and any query text, reach the PC through your organization’s own Pusher Channels app, which your organization holds under Pusher’s terms. The PC runs the request against BUSY and sends the full answer back through the AI Zeny API to the caller. The answer can contain personal data held in your accounting records, such as customer names, phone numbers, email addresses and tax details.
The AI Zeny API processes that answer in memory to pass it back to the caller; it does not store, cache or log the accounting data in it. (Cloud-mode snapshots, described below, are a separate, stored copy.) For each relayed request the service keeps a record of the operation, company code, financial years, a one-way digest of the request parameters, timings, response size, outcome and the token used.
7. Your queries, scripts, schedules and integrations
Queries and JavaScript scripts are stored and run in the Windows app on your PC, never in AI Zeny Cloud. Scripts can run when called, when you test them, or on a daily schedule you set.
A script can send data to other services only when your organization allows it to make web requests, and then to the addresses the script calls. AI Zeny does not send messages to your customers itself: reminders or messages go through your organization’s own WhatsApp, email or SMS provider accounts under their terms. Your organization is responsible for what its scripts send, to whom, and for having a lawful basis and any consent or opt-out the recipients are entitled to. A script that reshapes answers also changes what is returned to callers of the AI Zeny API.
8. Connecting your own Google account
If your organization connects Google through AI Zeny, Google asks you to authorize access. AI Zeny receives the Google account identifier, email address and permissions granted, and keeps connection, device and usage records. Refresh tokens and cached access tokens are stored encrypted in the cloud service; the Windows app can receive short-lived access tokens for the connected account. The portal does not receive these tokens.
For supported Sheets and Drive operations, AI Zeny sends authorized requests to Google and returns the requested results to your organization. This can include spreadsheet values and file metadata. The cloud keeps a file register with identifiers and titles; it does not persist spreadsheet preview values or place file contents in its logs. Data you choose to write to your own Google files is held by Google under your Google account and Google’s terms. The Google connection is separate from a script calling a provider directly.
You can disconnect the Google connection in the portal. Disconnecting destroys AI Zeny’s stored connection tokens and attempts revocation with Google; it does not delete your Google files or erase the connection, file-register, security and usage history. You can also remove AI Zeny’s access in your Google account. Contact support about retained records; no additional retention period is promised here. Google account data is used to provide the connection and requested functionality, not for advertising.
9. Cloud mode and the AI debugging exception
Cloud mode: when your organization uses Cloud mode, encrypted snapshots of the BUSY data it chooses to synchronize are stored on AI Zeny’s servers and refreshed approximately every 10–15 minutes, so the API can answer from them while the PC is off. Access to them is tied to your organization’s authentication and API tokens. How long snapshots are kept after they are replaced or after an account closes has not been set yet and will be stated here.
AI features: The AI Agent is part of Max and is not available yet. The following describes its intended data handling, not a feature you can use today. In normal use the AI agent builds queries and retrieves results from your BUSY data; it does not send your accounting data in full to a third-party AI provider. If a query the AI agent built returns a wrong result, and only with your explicit consent, a small relevant sample of the affected data can be sent to the OpenAI API to correct it. AI Zeny deletes its own temporary copy immediately after the correction; you can delete it yourself at any time, and a nightly cleanup removes anything left. What OpenAI keeps or does with data sent this way is governed by OpenAI’s own terms, not by AI Zeny’s deletion. See AI and your data.
11. How long data is kept
Retention periods that are already set are stated in the sections above: verification-code records (7 days after expiry), the Local API log (30 days) and the app’s log files (14 days). For other account, security, audit, relay and device records, no retention period has been decided yet, and the service does not currently delete them automatically. We will publish their retention periods here once they are decided.
Account deletion is handled manually after an emailed request; there is no self-service account deletion option or self-service data export yet. To close your organization’s account or ask for your data to be deleted or exported, write to support@aizeny.com from the administrator’s email address. Some records may be kept where the law requires it or to resolve a dispute or security incident. Records the Windows app keeps on your PC stay under your organization’s control. Uninstalling removes the app and its Windows services, but preserves local settings, databases, enrollment credentials, logs and the service account. It does not delete your BUSY books, close your AI Zeny account or remove Cloud-mode snapshots. Contact support if you also need help removing retained AI Zeny data. See uninstall instructions.
12. Security
We use reasonable security safeguards suited to the data, including one-way hashing of passwords, verification codes and API tokens, encryption of the Pusher app secret and of stored database passwords on the PC, signed commands between the service and your PC, and session cookies that the website’s pages cannot read. The Security practices page describes them. No security measure removes every risk, and we do not claim any certification.
If a personal-data breach affects you, we will inform you and the authorities as the applicable law requires. Security concerns about AI Zeny can be sent to support@aizeny.com; there is no bug-bounty or disclosure programme.
13. Your rights and how to contact us
You can review the personal data you gave us and ask us to correct it, and withdraw consent where we rely on consent, under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. As the Digital Personal Data Protection Act, 2023 comes into force (its rights provisions take effect in May 2027, eighteen months after the commencement notification published in November 2025), you will also be able to ask for a summary of your personal data, how it is processed and who it has been shared with; ask us to correct, complete, update or erase it; nominate another person to exercise your rights if you die or become unable to; and, after using our grievance process, complain to the Data Protection Board of India. Your data rights explains how to make a request.
Our Grievance Officer is Devendar Singh. Questions and grievances about personal data: support@aizeny.com. You can also write to Devendar Singh at our registered office: H-117, Hatkeshwar Vihar, Ujjain, Madhya Pradesh 456006, India. We resolve grievances within one month of receiving them. This is the company’s mailbox; it is not a data protection officer. For requests about personal data inside your organization’s accounting records, contact that organization first; we will help it respond.
AI Zeny is intended for organizations and their authorized adults and is not directed at children.
14. Changes to this notice
We will update this notice when our processing changes and show the date of the latest revision at the top. If a change materially affects how we use your personal data, we will tell account administrators before it applies.