Thrilochana Technologies ("Thrilochana," "we," "us," or "our") operates the Thrilochana invoice management platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
When you create an account, we collect:
When you use the Service, you provide or we extract:
If you connect your QuickBooks Online account, we access:
Payment processing is handled entirely by a PCI DSS Level 1 certified payment provider. We do not store, process, or have access to your full credit card numbers, CVV codes, or banking details. We receive only a transaction reference and subscription status from our payment processor.
We use your information for the following purposes:
| Purpose | Legal Basis |
|---|---|
| Provide and maintain the Service | Contract performance |
| Extract data from uploaded invoices using AI | Contract performance |
| Synchronize data with QuickBooks | Your consent (OAuth authorization) |
| Send automated emails to vendors on your behalf | Your instruction |
| Process subscription payments | Contract performance |
| Respond to your support requests | Contract performance |
| Improve AI extraction accuracy using aggregated, anonymized data | Legitimate interest |
| Detect and prevent fraud or security incidents | Legitimate interest |
| Comply with legal obligations | Legal requirement |
We use industry-leading AI services to process your invoices and extract structured data. Your data sent to these providers is processed according to their commercial API terms and is not used to train their general AI models. We have Data Processing Agreements with each provider.
We do not sell, rent, or trade your personal information. We share data only with the following categories of service providers necessary to operate the Service:
| Category | Purpose | Data Shared |
|---|---|---|
| Cloud Infrastructure | Hosting, storage, compute | All Service data (encrypted) |
| AI Processing | Invoice extraction, chatbot | Invoice content, chat queries |
| Payment Processing | Subscription billing | Billing information |
| Accounting Integration | QuickBooks sync (if connected) | Invoice and vendor data |
We may also disclose information if required by law, court order, or governmental regulation, or to protect the rights, property, or safety of Thrilochana Technologies, our users, or the public.
We implement commercially reasonable security measures including:
No method of electronic storage or transmission is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee its absolute security.
If you are a California resident, you have the right to:
Residents of Virginia, Colorado, Connecticut, Texas, and other states with comprehensive privacy laws have similar rights including access, correction, deletion, and data portability. We honor all applicable state privacy rights.
To exercise any privacy right, contact us at privacy@thrilochana.com. We will respond within 45 days (or as required by applicable law). We may request verification of your identity before processing your request.
We do not sell or share your personal information as defined under the CCPA/CPRA or any other state privacy law.
The Service is designed for business use and is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will promptly delete that information.
We may send you service-related emails (account confirmation, subscription notices, security alerts). If you use the automated vendor email feature, emails are sent on your behalf and you are responsible for their content and frequency. You can opt out of marketing emails at any time by clicking the unsubscribe link or contacting us.
The Service is hosted in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States. By using the Service, you consent to this transfer.
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. For material changes, we will also send an email notification to the address associated with your account. Your continued use of the Service after such modifications constitutes your acceptance of the updated Privacy Policy.
In the event of a data breach affecting your personal information, we will notify you and applicable regulatory authorities as required by applicable state and federal laws, typically within 60 days of discovery or as soon as reasonably practicable.
If you have questions about this Privacy Policy or our data practices, contact us at: