Last updated 24 October 2026
Privacy policy
The short version: this website collects almost nothing. It sets no cookies, runs no analytics and loads nothing from anyone else. What follows is the long version.
1. Who we are
Folio is made by nineight, a sole proprietorship of Jeevan Kumar BK, Bengaluru, Karnataka, India (“nineight”, “we”). For this website we are the Data Fiduciary under the Digital Personal Data Protection Act, 2023 (“the Act”) and the Digital Personal Data Protection Rules, 2025 (“the Rules”).
Questions about this policy, requests about your data and complaints go to business@nineight.ai. Until we appoint a Grievance Officer, our founders handle each one personally. We have not been notified as a Significant Data Fiduciary, so we have not appointed a Data Protection Officer.
2. This website, not Folio itself
This policy covers this website only. Folio, the product, runs on a computer inside each firm that uses it. The records a firm keeps in Folio stay on that firm's machine and are governed by that firm's own arrangements with its clients, and by the agreement between the firm and us.
3. The personal data we handle
| What | How we get it | Why | Basis | Kept for |
|---|
| Server logs: IP address, date and time, the page requested, browser type | Recorded by our web host when your browser asks for the page | To deliver the website, keep it secure and investigate misuse | Legitimate use under section 7(a) of the Act: your browser sends these details to get the page | Up to one year, for security, as Rule 6 of the Rules provides |
| Your privacy choice: the notice version, the time, your language and your choice for each purpose | Saved in your own browser when you choose | To remember your choice so we do not ask on every visit, and as your record of it | Necessary to honour your choice | 12 months, then you are asked again. It never leaves your browser |
| What you type in “Try it” | Typed by you into the page | To show you a sample draft, written by the page itself | Not collected by us: it is processed only in your browser | Not kept, unless you switch on “Remember my brief” |
| Your brief, if you choose to keep it | Saved in your own browser, only if you allow it | So what you typed in “Try it” is still there next time | Your consent (section 6 of the Act) | Until you clear it, withdraw consent or clear this site's data. It never leaves your browser |
| What you write to us: your email address, your name if you give it, and your message | You send it by email, including through “Knock” | To reply and arrange what you asked for, such as a demo | Legitimate use under section 7(a) of the Act: you gave it voluntarily for that purpose | As long as we need it to deal with what you wrote about. Then we erase it, unless a law requires us to keep it |
We do not use cookies, analytics, advertising, tracking pixels, social media plugins or embedded content from other services. We do not buy, sell or rent personal data, and we do not use it to profile you.
4. Consent, and withdrawing it
On this website we ask for consent only to remember your brief. It stays off until you switch it on. You can withdraw consent at any time, as easily as you gave it, from “Privacy settings” at the foot of the page (section 6(4)). The page deletes the saved brief at once. Withdrawing does not affect anything done before you withdrew.
5. Who we share it with
Only the service providers who process it for us under a contract, as Data Processors under section 8(2): our web hosting provider and our email provider. We may also disclose personal data where the law requires it.
6. Transfers outside India
Our service providers may store data on servers outside India. Any such transfer follows section 16 of the Act and any restriction the Central Government notifies.
7. How long we keep it
As set out in the table. Once a purpose is served and no law requires us to keep the data, we erase it (section 8(7)).
8. Your rights
- Access (section 11): a summary of the personal data we hold about you, what we do with it, and who we have shared it with.
- Correction and erasure (section 12): to have your personal data corrected, completed, updated or erased.
- Grievance redressal (section 13): to have a complaint about how we handle your data answered.
- Nomination (section 14): to name someone to exercise these rights for you if you die or become unable to.
- Withdrawing consent (section 6(4)): at any time, as set out above.
9. How to exercise them
Write to business@nineight.ai, saying which right you want to exercise. Until a Grievance Officer is appointed, our founders handle your request personally. We may ask for information that confirms it is you. We respond within 90 days, as Rule 14 of the Rules requires, and sooner where we can.
10. Complaints to the Data Protection Board
If we do not resolve your grievance, you can complain to the Data Protection Board of India. The Act asks you to use our grievance process first (section 13(3)).
11. Your duties
Section 15 of the Act asks you, when you exercise these rights, to follow the law; not to impersonate anyone; not to hide material information when giving personal data for a document, identifier or proof of identity or address issued by the State; not to file a false or frivolous grievance or complaint; and to give only verifiably authentic information when asking for correction or erasure.
12. Children
This website is for chartered accountancy firms. We do not knowingly process the personal data of anyone under 18. If we ever need to, we will first obtain verifiable consent from a parent or lawful guardian, as section 9 of the Act and Rule 10 of the Rules require. If you think a child has written to us, tell us and we will erase it.
13. Security and breaches
We protect the personal data we hold with reasonable security safeguards, as section 8(5) of the Act and Rule 6 of the Rules require. If a personal data breach affects you, we will tell you and the Data Protection Board, as section 8(6) and Rule 7 require, and report it to CERT-In as its directions require.
14. Changes
If we change this policy, we update the date at the top. If a change affects how we use data we already hold, or adds anything that needs your consent, we will ask you again before it takes effect.
Last updated 24 October 2026
Cookie policy
This website sets no cookies. It keeps one small record in your browser after you make a choice, and a second only if you ask it to.
What cookies and similar storage are
Cookies are small files a website asks your browser to keep and send back on later visits. Browsers have similar ways of keeping information, such as local storage. The same rule applies to all of them: anything that is not strictly necessary needs your consent first.
What this website uses
| Name | Kind | Purpose | Duration | Necessary or optional |
|---|
folio.consent | Local storage | Remembers your privacy choice: the notice version, the time, your language and your choice for each purpose | 12 months, then you are asked again. Replaced if the notice changes | Necessary |
folio.brief | Local storage | Keeps what you typed in “Try it” so it is there next time | Until you clear it or withdraw consent, which deletes it at once | Optional, off until you allow it |
Other services
None. The page carries its own fonts and code and makes no requests to other services, so no one else receives anything from your visit. Our web hosting provider receives the server log details described in the Privacy policy, because it delivers the page.
Changing your choice
Use “Privacy settings” at the foot of the page. A change takes effect immediately. You can also clear this site's data in your browser's settings; you will be asked again on your next visit.