MFD Office · Last updated: July 2026
MFD Office is operated by FundsPundit (“we”, “us”), the Data Fiduciary for the personal data processed through this service. For any privacy matter, contact our Grievance Officer, P Sengupta, at legal@mfdoffice.com (FundsPundit, for MFD Office, Chennai).
Account and contact details (firm name, ARN, email); billing details (GSTIN, state, billing address, invoices, payments); your authorised signatory’s name, designation and signature image; and the registrar invoice files (e.g. KFIN, CAMS) you upload for processing.
If you use the tool that tracks what each fund house has paid you, you can upload a bank statement to match those payments. We do not store your bank statement. It is read once, in memory, to suggest matches, and it is gone the moment that page finishes. If the file is password protected, the password is used the same way and is never stored. Only the amounts you confirm yourself are saved.
To provide the service you signed up for: preparing registrar GST invoice packages, assembling your GST return file, matching the payments you receive, issuing your subscription invoices, and supporting your account. Processing is on the basis of your consent and the performance of our contract with you.
Access requires authentication. Signature images are encrypted at rest. Transport is over HTTPS. We keep an audit log of sensitive actions, apply a data-retention window to processing artefacts, and limit who can access account data.
We keep different data for different periods: invoices, payments and GST records for 8 years to meet tax-record law (even after you close your account); the registrar files you upload are deleted as soon as your run finishes; the outputs we generate (your signed invoices and completed sheets) stay in your account for its life so you can download them again, and are deleted with your account data after closure; security and audit logs for 24 months; and other personal data for the life of your account plus up to 90 days after closure, after which it is deleted unless we must keep it for a legal reason.
If a run fails, we may offer you a button to send us the two files that failed, from inside the app or from the free demo. This is always your choice and nothing is sent unless you press it. When you do send them, you consent to this and nothing more: we use those files for the single purpose of finding and fixing the problem you hit; they are stored encrypted and only our support team can open them; every time we open one it is recorded in our audit log; and they are deleted automatically after 7 days. You can ask us to delete them sooner at any time, by replying to our email or writing to legal@mfdoffice.com, and we will delete them and confirm. We do not use them for any other purpose, and we do not share or sell them. If you send them from the demo without an account, we also keep the email address you type, for the same period and the same single purpose: replying to you about this problem.
You can ask us to: see the data we hold about you; correct or complete it; erase it (subject to the legal retention above); and nominate someone to exercise your rights if you are unable to. The quickest way to see your data is Account → export your data in the app; for any request, email our Grievance Officer at legal@mfdoffice.com. We respond within 30 days.
We do not sell your data and do not use it for advertising. We share it only with the processors needed to run the service: cloud hosting (Google Cloud), email delivery, and a payment provider (currently Razorpay; we may use another provider such as Cashfree), each acting on our instructions under contract, and with authorities where legally required.
For any privacy concern, contact our Grievance Officer, P Sengupta, at legal@mfdoffice.com. If you are not satisfied, you may approach the Data Protection Board of India. In the event of a personal-data breach that affects you, we will notify you and the Board as required by law.
See also our Terms of Service.