Last updated: July 2026
Privacy Policy
Gross & Net is a business management platform for event professionals, combining CRM and double-entry accounting in one workspace. This policy explains what we collect, why we collect it, and the choices you have. It applies to grossandnet.com and the services delivered through it.
Who we are
Platestory Innovations LLP operates Gross & Net, a multi-tenant software service. Each customer workspace is a separate tenant, and the business that creates a workspace is the owner and controller of the data inside it. For questions about this policy, contact us at hello@grossandnet.com. Our registered office is Ground Floor, A-95, 3rd Cross St, A Block, Anna Nagar East, Chennai, Tamil Nadu 600030, India. Our GSTIN is 33ABEFP2798P1ZI. Grievance officer: Vamsi Bhogi (hello@grossandnet.com, +91-63791-60367).
Information we collect
We collect only what we need to run the service you signed up for.
- Account information. Your name, work email, password (stored only as a salted hash), and the workspace and role you belong to.
- Workspace and business records. The data you enter to run your business: events, pipeline deals, quotes, invoices, vendor bills, payments, and the journal entries and financial records generated from them.
- Client and vendor contacts. Contact details you store about your own clients and suppliers, such as names, phone numbers, email and billing addresses, and event details. You are responsible for having a lawful basis to hold this information.
- Payment and billing data. Your subscription tier and billing status. Card and payment-instrument details are handled directly by our payment processor and are never stored on our servers.
- Usage and technical data. Log data such as IP address, browser type, timestamps, and the actions taken in the app, used to keep the service secure and reliable.
How we use your information
- To provide, maintain, and improve the CRM and accounting features you use.
- To authenticate you, enforce workspace permissions, and keep tenants isolated.
- To process your subscription and send service and billing notifications.
- To provide support when you contact us.
- To detect, prevent, and investigate fraud, abuse, and security incidents.
- To comply with legal, tax, and accounting obligations.
We do not use the business or client data inside your workspace for advertising, and we do not build cross-customer profiles from it.
We do not sell your data
We never sell your data or your clients' data, and we never rent or trade it. We share information only with the subprocessors listed below, only to the extent needed to run the service, and only under contracts that require them to protect it.
Storage, security, and tenant isolation
- Encryption. Data is encrypted in transit (TLS) and at rest.
- Tenant isolation. Every record is scoped to a single workspace, and access is enforced on the server for every request, so one customer can never read another customer's data.
- Access control. Roles and permissions are checked server-side on every action, including for any API or connected tooling.
- Least privilege. Internal access to production data is limited to what is needed to operate and support the service, and is logged.
No system can be guaranteed perfectly secure, but we work to protect your data using industry-standard safeguards and to notify affected customers without undue delay if a breach occurs.
Subprocessors
We rely on a small set of trusted providers to deliver the service. Each processes data only on our instructions.
- Railway. Application hosting and database infrastructure.
- Resend. Transactional and notification email delivery.
- Cashfree. Subscription and payment processing.
Data retention
We keep your workspace data for as long as your account is active. When you delete records, they are removed from the live service. When you close a workspace, we delete or anonymize its data within a reasonable period after the account ends, except where we must retain certain records to meet legal, tax, or accounting requirements.
Your rights and choices
Because you own the data in your workspace, you can access, correct, export, and delete it directly from within the app at any time.
- Access and review the records in your workspace.
- Correct or update information you have entered.
- Export your business and financial data.
- Delete records, or request deletion of your workspace.
To exercise a right that is not self-service, or to ask a question about your data, email hello@grossandnet.com.
Changes to this policy
We may update this policy as the service evolves. When we make material changes, we will update the date above and, where appropriate, notify you in the app or by email. Continued use of Gross & Net after an update means you accept the revised policy.
Contact us
Questions about privacy or your data can be sent to hello@grossandnet.com.