Terms and privacy
Comply is provided by Stradigi (“we”, “us”). This page sets out the terms your firm accepts when it starts using Comply, how we handle personal data, and how we look after your clients’ data on your firm’s behalf.
Last updated 1 November 2026.
Terms of service
These terms are an agreement between us and the firm that creates a workspace in Comply (“your firm”). The person who creates the workspace accepts them on the firm’s behalf, and confirms they may do so. Everyone your firm invites, including clients who use the portal, uses Comply under your firm’s workspace.
Accounts and who can get in
- People sign in with a code sent to their email, a password they set, or both. Keep sign-in details private and tell us at once if you think someone else has used them.
- Owners decide who joins the workspace and what each person can do, and are responsible for what those people do in it.
- Owners can require two-factor sign-in for everyone in the firm. We recommend it.
Free trial
A new workspace starts with a free trial, with every feature on and no card needed. The length of the trial and the number of users it allows are shown when the workspace is created. When the trial ends without a subscription, the workspace follows the steps under If a payment is not made.
Subscription and prices
- Comply is charged per user each month, plus GST. Clients who sign in to the portal are not users and cost nothing.
- Each firm gets an amount of storage included, and can add storage packs. The current prices are on the pricing section and in each workspace under Settings › Plan and billing.
- Users added during a month are charged for the rest of that month on the next payment. Users and packs removed during a month stay paid for until the next renewal.
- If we change our prices, a subscription that already exists moves to the new price from its next renewal. A UPI AutoPay mandate keeps its amount until the firm approves a new one.
- We issue a GST invoice for each payment.
If a payment is not made
When a payment fails or a trial ends unpaid, owners are reminded by email. Fourteen days after the payment was due, the workspace becomes read-only: everyone can still see and export everything, but nothing can be added or changed. Thirty days after it was due, the workspace is suspended: only owners can open it, to pay or to export. Paying at any point opens it fully again at once.
Cancelling and leaving
- Owners can cancel the subscription at any time. Cancelling stops future payments; the workspace stays open until the end of the period already paid for. We do not refund part of a period, except where the law requires it.
- A cancelled workspace is deleted for good 90 days after the cancellation takes effect, unless the firm subscribes again before then.
- Owners can also delete the workspace from Settings › Data. It can be restored for 30 days, and is then deleted for good.
- An owner can export the whole workspace at any time, including while it is read-only or suspended. Please take an export before you leave.
Your firm’s data
Your firm owns the data it puts in Comply. We use it only to provide Comply to your firm, as described in the data processing terms. We do not sell it, use it for advertising, or look at it, except where an owner of your firm approves a support request: that access is read-only, ends on its own, and is recorded in your firm’s audit log.
Due dates are a tool, not advice
Comply works out due dates from a catalogue of returns and filings that we keep current, including government extensions, and reminds people about them. It is a working tool, not legal, tax or professional advice. Your firm remains responsible for checking statutory deadlines and for filing on time. If you spot a due date that looks wrong, tell us at support@stradigi.in.
Fair use
Use Comply lawfully and for your firm’s professional work. Do not try to get into workspaces or data you have not been given, test or break Comply’s security, overload it, copy or resell it, or use it to send messages people have not agreed to receive. Your firm is responsible for having the right to message its clients and to keep their information in Comply.
Availability and changes
- We work to keep Comply available at all times. Planned maintenance is announced at least 48 hours ahead on the service status page.
- We improve Comply all the time and may change or retire features. We tell owners by email at least 30 days before a change that takes away something they rely on, or before these terms change in a way that matters.
Suspension for misuse
We may suspend a workspace or an account that breaks these terms, puts other firms or Comply at risk, or is used unlawfully. Unless the law or the risk stops us, we tell the owners first and give them a chance to put it right.
Liability
To the extent the law allows, our total liability to your firm for anything arising from Comply is limited to the amount your firm paid us in the 12 months before the claim, and we are not liable for indirect losses such as lost profits, penalties or interest charged to your firm or its clients, or loss of goodwill. Nothing in these terms limits liability that the law does not allow to be limited.
Law
These terms are governed by the laws of India.
Privacy notice
This notice explains how we handle personal data under India’s Digital Personal Data Protection Act, 2023. For your own Comply account, we decide how your data is used: we are its Data Fiduciary. For the data your firm keeps about its clients, your firm is the Data Fiduciary and we are its Data Processor; see the data processing terms.
What we keep about you
- Your account: name, email, phone number if you add one, your password (stored only as a one-way hash) and two-factor settings.
- Sign-in records: when you signed in, how, from which IP address and browser, and your active sessions.
- Your firms: the workspaces you belong to and your role in each.
- Billing, for owners: the firm’s billing name, GSTIN and address, and the history of payments. Card and UPI details are handled by Razorpay; we never see or keep them.
- Messages to us: what you write when you ask for help.
Why we use it
- To sign you in, keep your account and your firm secure, and stop abuse.
- To send service emails: sign-in codes, invitations, reminders and notifications you set up, and billing emails.
- To charge subscriptions and issue GST invoices, as tax law requires.
- To answer you when you ask for help, and to keep Comply working well.
We do not sell personal data, use it for advertising, or share it with anyone except the sub-processors listed below and authorities where the law requires it.
Where it is kept
Comply runs on Cloudflare. Databases and files are stored in Cloudflare’s Asia-Pacific region, and requests are served from Cloudflare’s network nearest the person using Comply. Emails are sent through Cloudflare Email Service. Data may be processed outside India, as the Act allows.
How long we keep it
- Your account is kept while you use it. When you delete it from Account settings, your profile and sessions are removed; records your firm needs, such as who did what in its audit log, stay with the firm.
- Payment records and GST invoices are kept for as long as tax law requires.
- Each firm chooses how long its documents are kept, from 6 to 15 years, and everything in a deleted workspace is removed for good as described in the terms above.
Your rights
You can see and correct your details in Account settings, and delete your account there. You may also ask us for a summary of the data we hold about you, to correct or erase it, or to nominate someone to act for you, by writing to support@stradigi.in. If you are a client of a firm that uses Comply, please ask that firm first: it decides how your data is used, and we help it answer you. We reply within 90 days. If you are not satisfied with our answer, you may complain to the Data Protection Board of India.
Children
Comply is for professionals and their clients’ businesses. It is not meant for anyone under 18, and we do not knowingly keep children’s data except where a firm records it as part of its client work.
Security
Every connection to Comply is encrypted. Each firm’s records are kept in a database of its own. Passwords kept in the vault are encrypted and every reveal is recorded. Two-factor sign-in is available to everyone and required for Comply’s own staff. If we become aware of a breach that affects your data, we will tell you and, where the law requires, the Data Protection Board, without undue delay.
Data processing terms
These terms apply to the personal data of your firm’s clients, staff and contacts that your firm keeps in Comply. Your firm is the Data Fiduciary for that data; we process it as your firm’s Data Processor.
- Instructions. We process the data only to provide Comply to your firm and as your firm’s use of Comply directs, and for no purpose of our own.
- Confidentiality. Only the people who run Comply can reach the systems, they are bound to keep data confidential, and none of them can open a workspace without an owner’s approval.
- Security. We protect the data as described under Security above, and keep each firm’s records apart from every other firm’s.
- Sub-processors. We use only the sub-processors listed below, under terms that protect the data at least as well as these. We tell owners by email at least 30 days before adding one.
- Connections your firm chooses. Services your firm connects in Settings, such as its own SMS or WhatsApp provider or its own payment account for client invoices, receive data on your firm’s instruction and are your firm’s choice.
- Requests from people. Comply gives your firm the tools to find, export, correct and delete a person’s data, and we help with anything those tools cannot do.
- Breaches. We tell your firm’s owners without undue delay if we become aware of a breach affecting your firm’s data, with what we know and what we are doing about it.
- When your firm leaves. Owners can export everything at any time. After a workspace is deleted and its restore period ends, we delete its data for good.
- Showing compliance. On a reasonable request, we give your firm the information it needs to show that these terms are being followed.
Sub-processors
These companies process data for us so that Comply can run.
| Company | What it does for Comply | Where |
|---|---|---|
| Cloudflare, Inc. | Runs Comply: hosting, databases, file storage, background jobs, the sign-in security check, email delivery (Cloudflare Email Service) and the website’s visit counts. | Databases and files stored in Cloudflare’s Asia-Pacific region; requests served from its global network. |
| Razorpay Software Private Limited | Takes payments for Comply subscriptions by card and UPI AutoPay, once online payments are switched on. | India |
Contact and grievances
For questions about these terms or your data, to exercise your rights, to raise a grievance, or to report a security issue, write to support@stradigi.in. We acknowledge grievances promptly and resolve them within 90 days.