Last Updated: 15 June 2026

Stepping Stone Consultancy (“Rhom”, “we”, “our”, or “us”) operates the website rhom.in and Rhom products and services, including RhomBooks, RhomTrips, and other services that may be offered under the Rhom brand (collectively, the “Services”).

We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains what information we collect, how we use it, when we may share it, and the choices and rights available to you.

By using our Services, you acknowledge the practices described in this Privacy Policy.

1. Information We Collect

Depending on the Rhom product or feature you use, we may collect the following categories of information.

Account Information

When you create or use an account, we may collect information such as:

• Name
• Email address
• Phone number
• Login and authentication information
• Account identifiers
• Profile and business information

If you sign in using a third-party authentication service such as Google, we may receive information permitted by that service and your account settings.

Business and Financial Information

Our Services allow users to enter and manage information relating to their businesses. This may include:

• Customer and supplier information
• Sales and purchases
• Income and expenses
• Products and inventory
• Invoices and bills
• Payment records
• Outstanding balances
• Business transactions
• Profit and loss information
• Tax-related information
• Trips and transportation records
• Vehicle information
• Driver information
• Employee or team information
• Other business records entered by users

Rhom processes this information to provide the functionality requested by the user.

Files and Uploaded Content

You may upload or create content through our Services, including:

• Invoices
• Receipts
• Photographs
• Documents
• Business records
• Images
• Other files or information

Technical and Usage Information

We may automatically collect information about how you access and use our Services, including:

• Device type
• Operating system
• App or browser information
• Device identifiers
• App usage and interaction data
• Log information
• Crash reports
• Diagnostic information
• Approximate location derived from technical information, where applicable

Subscription and Payment Information

If you purchase a paid subscription or service, payment information may be processed by third-party payment processors.

We may receive information relating to your transaction, such as payment status, subscription plan, transaction identifier and billing information.

We generally do not directly store complete credit or debit card information when payments are processed by third-party payment providers.

2. How We Use Information

We may use information to:

• Create and maintain user accounts
• Provide RhomBooks, RhomTrips and other Rhom Services
• Store and organize business records
• Generate reports, summaries and insights
• Provide AI-powered features
• Process invoices, receipts and other user-provided information
• Synchronize information across devices
• Provide customer support
• Process subscriptions and payments
• Send service-related notifications
• Send reminders requested or enabled by users
• Improve our products and user experience
• Diagnose technical problems
• Detect fraud, abuse and security threats
• Maintain the security and reliability of our Services
• Develop new products and features
• Comply with applicable laws and legal obligations

Where required by applicable law, we rely on an appropriate legal basis for processing personal information, including consent, performance of a contract, compliance with legal obligations and legitimate interests.

3. AI-Powered Features

Certain Rhom products may provide artificial intelligence features.

When you use these features, information you submit—including business information, questions, documents or other content—may be processed by Rhom’s systems and third-party artificial intelligence or infrastructure providers.

AI-generated responses may contain errors, omissions or inaccurate information.

AI-generated information is provided to assist users and should not be treated as professional accounting, financial, tax, legal or other professional advice.

Users should independently verify important information before making business, financial, tax or legal decisions.

4. Third-Party Service Providers

We may use third-party providers to operate and improve our Services, including providers of:

• Cloud hosting and databases
• Authentication
• Artificial intelligence
• Analytics
• Crash reporting
• Notifications
• Payment processing
• Email and communications
• Infrastructure and security

These providers may process information on our behalf as necessary to provide their services.

Providers may include services from companies such as Google/Firebase, Supabase, OpenAI and payment or analytics providers, depending on the Rhom product and features being used.

Their handling of information may also be governed by their respective privacy policies and contractual obligations.

5. Information About Other People

Users may enter information relating to their customers, suppliers, employees, drivers, business partners or other individuals.

When you provide personal information relating to another person, you are responsible for ensuring that you have the necessary rights, permissions, notices or lawful basis to provide and process that information through our Services.

Where Rhom processes such information on behalf of a business user, the business user is responsible for determining the purposes for which the information is collected and used, except where applicable law provides otherwise.

6. Sharing of Information

We do not sell your personal information.

We may share or disclose information:

• With service providers that help operate our Services
• When necessary to provide a feature requested by you
• With members of your organization or team according to permissions you configure
• To process payments
• To comply with applicable law, regulation, court orders or lawful government requests
• To investigate fraud, abuse, security incidents or violations of our agreements
• To protect the rights, property or safety of Rhom, our users or others
• In connection with a merger, acquisition, financing, restructuring, sale of assets or similar corporate transaction

7. Data Storage and International Transfers

Rhom is operated by Stepping Stone Consultancy in Maharashtra, India.

Our infrastructure and service providers may process or store information in India or other countries.

As a result, information may be transferred to and processed in countries different from the country in which you live.

Where required, we take appropriate measures designed to protect personal information transferred internationally in accordance with applicable law.

8. Data Security

We use reasonable administrative, organizational and technical safeguards designed to protect information against unauthorized access, alteration, disclosure, loss or destruction.

However, no internet-based service, database or electronic storage system can be guaranteed to be completely secure.

Users are responsible for maintaining the confidentiality of their account credentials and for promptly informing us of suspected unauthorized access.

9. Data Retention

We retain personal and business information for as long as reasonably necessary to:

• Provide our Services
• Maintain your account
• Fulfil the purposes described in this Privacy Policy
• Meet legal, accounting or regulatory requirements
• Resolve disputes
• Prevent fraud and abuse
• Enforce our agreements

Retention periods may vary depending on the type of information and applicable legal requirements.

When information is no longer required, we may delete or anonymize it, subject to legal, technical and legitimate business requirements.

10. Account and Data Deletion

Users may request deletion of their account and associated personal information by using available account controls or contacting us at info@rhom.in.

We will process valid deletion requests subject to applicable law.

Certain information may be retained where necessary for legal obligations, fraud prevention, dispute resolution, security, backup processes or enforcement of our agreements.

Information contained in backups may remain temporarily until those backups are overwritten or deleted according to our normal retention processes.

11. Communications

We may send communications necessary to operate the Services, including:

• Security alerts
• Account notifications
• Transaction information
• Subscription notices
• Product or service updates
• Reminders requested by users

Where permitted, we may also send promotional communications. Users may opt out of promotional communications using the unsubscribe mechanism provided or by contacting us.

Certain essential service communications cannot be disabled while maintaining an active account.

12. Cookies and Similar Technologies

Our website and Services may use cookies, local storage, SDKs and similar technologies for purposes including:

• Authentication
• Security
• Remembering preferences
• Analytics
• Performance monitoring
• Improving our Services

Where required by applicable law, we will request consent before using non-essential cookies or similar technologies.

13. Children’s Privacy

Our Services are primarily intended for businesses and adults capable of entering into legally binding agreements.

Rhom is not intentionally directed toward children under the minimum age required to independently consent to data processing in their jurisdiction.

If we learn that personal information from a child has been collected in violation of applicable law, we will take appropriate steps to delete or otherwise address that information.

14. Your Privacy Rights

Depending on where you live, applicable privacy laws may provide rights regarding your personal information, including rights to:

• Access personal information
• Correct inaccurate information
• Request deletion
• Withdraw consent where processing is based on consent
• Object to or restrict certain processing
• Request portability of certain information
• Lodge a complaint with an appropriate data protection authority

Some rights may be subject to exceptions provided by applicable law.

To exercise a privacy right, contact us at info@rhom.in.

We may need to verify your identity before processing certain requests.

15. India Privacy Rights

Where applicable, we process personal data in accordance with Indian data protection and privacy requirements, including applicable provisions of the Digital Personal Data Protection Act, 2023 and rules or regulations brought into force under it.

Users may contact us regarding access, correction, erasure, consent or grievances relating to their personal data at info@rhom.in.

16. International Users

Rhom may be available to users outside India.

Where privacy laws applicable to a user provide additional rights or requirements—including laws in the European Economic Area, United Kingdom or other jurisdictions—we will process applicable requests in accordance with those laws to the extent they apply to our Services.

17. Third-Party Links and Integrations

Our Services may contain links to or integrations with third-party websites, applications or services.

We are not responsible for the privacy practices of independent third parties. Users should review the privacy policies of those services before providing information to them.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our Services, technology, legal requirements or business practices.

The updated version will be posted on rhom.in with a revised “Last Updated” date.

Where required by applicable law, we may provide additional notice of material changes.

19. Contact Us

For questions, privacy requests or concerns regarding this Privacy Policy or Rhom’s handling of personal information, contact:

Stepping Stone Consultancy
Maharashtra, India
Email: info@rhom.in
Website: rhom.in