Trust

Security

Effective Date: July 2026

Your books are your business. Monsoon handles invoices, payments, and financial questions for small businesses, so security is not a feature, it is the baseline.

1. Encryption

In transit: all traffic between your device, WhatsApp, and our servers uses TLS.
At rest: your business records are stored encrypted on our database infrastructure.

2. Access Control

Your data is yours: each account's records are scoped to that account. No cross-tenant access.
Sessions: dashboard logins use short-lived, hashed session tokens. You can terminate other active sessions from Settings at any time.

3. DPDP Act Alignment

We handle personal data in line with India's Digital Personal Data Protection Act, 2023: we collect only what is needed to run your invoicing and accounting, we do not sell or lease it, and you can request export or deletion of your data at any time.

4. Reporting a Vulnerability

Found a security issue? Write to connect@heymonsoon.com and we will respond promptly. Please do not test against accounts you do not own.