Legal

Privacy Policy

Effective July 23, 2026

1. Who we are

Templiyo is a product of Rootrender Technologies LLP, a limited liability partnership registered in India (“Templiyo”, “we”, “us”). Templiyo lets you customize and print document templates for Zoho Books from inside Zoho. This policy explains what information we collect, how we use it, and the choices you have.

2. Scope

This policy applies to templiyo.com, the Templiyo web application, the Templiyo browser extension, and any associated print or share flows that Templiyo provides. It does not apply to Zoho Books itself or to other third-party services you choose to use.

3. Information we collect

We collect the minimum information needed to run the product reliably and securely:

  • Account information: your name, email address, company or organization name, a password stored as a one-way hash, and basic attribution details such as referrer and UTM parameters if present at signup.
  • Authentication and security records: sign-in history including IP address and browser user-agent, short-lived one-time codes (stored as hashes) used for email verification and password reset, and refresh session metadata used to keep you signed in safely.
  • Zoho connection data: the OAuth access and refresh tokens issued by Zoho for your account, the Zoho region and organization identifier, and the basic profile your Zoho organization exposes (such as the organization logo). Tokens are stored encrypted at rest. We never see or store your Zoho password.
  • Template configuration: the templates, layouts, fields, columns, fonts, colors, and other branding choices you create and save. Stored so your work persists across sessions.
  • Uploaded media: logos, signatures, and brand assets you choose to upload for use in your templates.
  • Billing information: subscription metadata such as plan, billing interval, status, and the customer identifier issued by our payment provider. Card numbers and similar payment instrument details are handled directly by the payment provider; we do not store them.
  • Product analytics: events about how you use Templiyo (for example, which features you open and which actions you take), tied to your account so we can understand usage patterns and improve the product.
  • Diagnostic and error data: technical information captured when something goes wrong, so we can fix it.
  • Support communications: the contents of messages you send to us.

4. What we do not store

We do not copy your Zoho Books documents, customers, line items, contacts, or other records into our database. When you click Print, we fetch the document from Zoho on demand, render the PDF, and discard the data. A short-lived in-memory cache may briefly hold the response so that quick successive prints are fast; this cache is cleared automatically. We do not sell your data, and we do not use Zoho data for advertising.

5. How we use your information

  • To render your customized document PDFs on request.
  • To operate, maintain, secure, and improve the Service.
  • To process subscriptions, invoicing, and renewal billing.
  • To send transactional messages (verification codes, receipts, security alerts) and, where required by law with your consent, occasional product updates.
  • To provide customer support when you contact us.
  • To detect, prevent, and investigate abuse, fraud, and violations of our Terms.
  • To comply with applicable legal and regulatory obligations.

6. Legal bases for processing

Where applicable law requires a legal basis for processing (for example, under the GDPR or the Digital Personal Data Protection Act, 2023), we rely on one or more of the following: performance of our contract with you, our legitimate interests in operating and improving the Service, your consent (which you may withdraw at any time), and compliance with legal obligations.

7. Zoho OAuth

Templiyo connects to Zoho Books through Zoho’s official OAuth flow. We never see your Zoho password. The access scopes we request are limited to what the product needs to read and render your documents. You can disconnect Templiyo from your Zoho account at any time, which immediately revokes our access.

8. Service providers we work with

We share data with a small set of trusted service providers that help us run Templiyo. They are bound by their own data protection commitments and only process information on our instructions. The categories of provider we use are:

  • Cloud hosting and managed database infrastructure.
  • Object storage and content delivery for uploaded media.
  • Payment processing for subscriptions.
  • Transactional email delivery.
  • Product analytics.
  • Error monitoring and performance diagnostics.
  • PDF rendering services used to generate your documents.

We do not sell your data and we do not share it with third-party advertisers. If we change service providers in a way that materially affects how your data is processed, we will update this policy.

9. Cookies and similar technologies

Templiyo uses a small number of cookies and similar browser-storage technologies:

  • Essential: needed to sign you in, keep your session secure, and remember your active organization. The product will not work without these.
  • Preferences: remember in-product choices such as the editor state for templates you are working on.
  • Analytics: help us understand how features are used so we can improve them.

We do not use advertising cookies and we do not allow third parties to track you across unrelated sites through Templiyo. You can clear browser storage from your browser settings at any time; clearing essential storage will sign you out.

10. Shared print links

Templiyo lets you generate a no-login link to view or print a rendered document. Anyone with that link can open the document without signing in, so treat the link as confidential and share it only with people who should see the document. You can revoke or rotate the link at any time from your Templiyo account.

11. Browser extension

The Templiyo browser extension adds a print button inside supported accounting applications (currently Zoho Books) so you can print documents with your Templiyo templates without leaving the page. The extension:

  • Runs only on the Zoho Books document pages listed in its permissions, and reads only the document type, document identifier, and organization identifier from the page address in order to know which document you are viewing. It does not read, collect, or modify any other page content, and it does not collect your browsing history.
  • Uses your existing Templiyo sign-in session to authenticate with our servers, and keeps a short-lived session token in the browser’s extension storage. If you are signed out of Templiyo, the extension cannot access anything.
  • Sends those document identifiers to our servers, which fetch the document from Zoho and render the PDF exactly like the print flow described in sections 3 and 4 above. The rendered PDF is shown in an overlay on the page and may be briefly held in the extension’s memory so quick successive prints are fast.
  • Contains no analytics or tracking of its own, and sends data only to our servers for the functionality described here.

You can remove the extension at any time from your browser’s extension settings.

12. Internal access by our team

Authorized members of our team may access your account where strictly necessary to provide support, investigate suspected abuse, or comply with legal process. Such access is logged internally, and where it occurs while you are signed in, Templiyo displays an on-screen indicator so you can see when this is in effect.

13. Data retention

We keep your account information, template configurations, and uploaded media for as long as your account is active. If you ask us to delete your account, we delete or anonymize your data within a reasonable period, except where we are required to retain certain records for legal, tax, accounting, fraud-prevention, or dispute-resolution purposes. Security and operational logs are retained for a limited period and then deleted on a rolling basis.

14. International data transfers

Templiyo is operated globally. Our application servers and managed database are primarily located in Singapore, and our object storage and content delivery may be located in the United States or other regions. By using the Service, you understand that your information may be processed in countries other than your own, with appropriate safeguards in place under applicable data protection laws.

15. Your rights and choices

Subject to applicable law, you may have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete personal data.
  • Delete your personal data.
  • Export a portable copy of personal data you provided to us.
  • Withdraw any consent you previously gave.
  • Object to, or restrict, certain types of processing.
  • Lodge a complaint with your local data protection authority.

To exercise any of these rights, or to raise a grievance under the Digital Personal Data Protection Act, 2023, email [email protected]. We will respond within the time required by law.

16. Security

We protect your information using encryption in transit (HTTPS), encryption at rest where supported by our infrastructure, one-way password hashing, authenticated encryption for sensitive third-party credentials such as Zoho OAuth tokens, least-privilege access controls, rate limiting, and regular reviews of our security practices. No online service can be made 100 percent secure, but we treat your data with the same care we would expect for our own.

17. Children

Templiyo is a business tool and is not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided personal data to Templiyo, please contact us and we will take appropriate steps to remove it.

18. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or in-app at least 14 days before the changes take effect, where reasonably feasible. The “Effective” date at the top of this page tells you when the current version was published.

19. Contact us

For any questions about this Privacy Policy, your data, or how Templiyo handles it, email [email protected]. Templiyo is operated by Rootrender Technologies LLP, India.