Last updated 7 October 2026
NCD is a private, invitation-only tool used by a Chartered Accountancy practice to process non-convertible debenture (NCD) interest-payout workbooks. An operator uploads a workbook received from an issuer, the application extracts the payment rows it contains, and it produces a separate workbook for each investor for import into the practice's accounting system. It can also produce a PDF or Excel statement of an investor's scheduled payments for a chosen period.
It is not a consumer product and it is not open for public sign-up. Access is granted by an administrator to specific email addresses, and an account that has not been granted access cannot see any data even after signing in successfully.
Account information from Google Sign-In. When you sign in with Google we receive your name, email address, profile picture URL, and the unique identifier Google assigns to your account. We request only the basic profile and email scopes. We never receive your Google password, and we cannot read your Gmail, Drive, Contacts, Calendar, or any other Google service.
Your email address, if you sign in with an email code. You can sign in with a one-time code sent to your email instead of Google. We send a code only to an address that has been granted access, keep only a keyed hash of it, which works once for five minutes, and keep a record of each code we send and each code checked (the address and the time) for rate limiting, deleted within a day.
Your phone number, if you add one. You can add a mobile number to your account from your profile and then sign in with a one-time code sent to it by SMS. A number can only be added to an account that already has access, never used to create one. Each code works once, for five minutes. We keep a record of each code we send and each code checked (the number and the time) for rate limiting, and delete it within a day.
Passkeys, if you add one. A passkey lets you sign in with your device's fingerprint, face or PIN. We store only the passkey's public key and identifiers; the private key and your biometrics never leave your device.
Data you upload. Issuer workbooks contain financial information about investors — typically names, PAN numbers, ISIN codes, investment amounts, interest and principal figures, tax deductions, and payment dates. This information is about your clients, not about you, and you provide it to us when you upload a file.
Technical records. Our servers record the IP address, browser user-agent, timestamp, and outcome of requests, together with a request identifier used to trace faults. These records exist to keep the service secure and working.
We do not use advertising networks, third-party analytics, session recording, or tracking pixels. There are no advertising cookies on this application.
The information we receive from Google Sign-In is used for one purpose only: to identify you so the application can decide whether your email address has been granted access, and to display your name and picture in the interface so you can confirm which account you are using.
NCD's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we do not transfer, sell, or share this information with third parties; we do not use it for advertising; and we do not use it to train generalised artificial-intelligence or machine-learning models.
No human reads your Google account data except where you have asked us to help with a support issue, where it is necessary for security or to investigate abuse, or where the law requires it.
Uploaded workbook data is used solely to provide the service to the practice that uploaded it: to parse the file, to display the payment rows, and to generate the per-investor workbooks and statements the practice asked for. We do not use it for any other purpose, and we do not use it to train machine-learning models.
Every record is scoped to the company that created it. An operator signed in to one company cannot see another company's uploads, payments, or exports.
We do not sell your information, and we do not share it with third parties for their own purposes.
Data is disclosed only in these circumstances:
The application and its database run on infrastructure controlled by the operator of this service, located in India. Uploaded files are stored on that same infrastructure, not with a third-party file host.
All traffic between your browser and the application is encrypted in transit using HTTPS. Sessions are held in cookies marked HttpOnly and Secure, which means they cannot be read by scripts running in your browser and are never sent over an unencrypted connection.
No system is perfectly secure, and we do not claim otherwise. We do commit to telling affected users without undue delay if we become aware of a breach affecting their data.
Uploaded workbooks and the payment records extracted from them are retained for as long as the practice needs them, because they are that practice's working records. They are deleted when the practice asks us to delete them.
Your account information is retained while your access is active. When an administrator removes your access, your ability to sign in ends immediately.
Technical logs are retained for a short period for diagnostic purposes and then discarded.
You may ask us to show you the personal information we hold about you, to correct it if it is wrong, or to delete it. You may revoke this application's access to your Google account at any time from your Google Account permissions page; doing so prevents future sign-ins.
To make any of these requests, write to jinay@theagi.company. We will respond within 30 days.
Where the information concerns a practice's clients rather than the practice's own staff, the practice is the party responsible for that data and requests should be directed to it. We act on the practice's instructions in respect of that data.
This is a professional accounting tool. It is not directed at anyone under 18, and we do not knowingly collect information from children.
If we change this policy we will update the date at the top of this page. Where a change materially affects how we handle your information, we will tell affected users directly rather than relying on you to re-read this page.
Questions about this policy, or about the data held about you, go to jinay@theagi.company.