Privacy Policy

Firm account data: firm name, contact person, work email, phone number and verification status.

Mandate data: service type, industry, purpose of valuation, entity type, an approximate turnover or deal-size band, a written case summary, requested deadline, and the status trail of the engagement.

Settlement data: quoted fee, invoice records, deposit and balance confirmation flags, and payment references entered by our coordinators.

Technical data: authentication records and basic security logs needed to operate the platform.

CADIAL does not collect, request or store end-client documents. There is no document upload for firms anywhere in the product — this is enforced in the interface, not merely by policy.

Do not include client names, PANs, GSTINs, identity documents, bank statements or raw financial statements in a case summary. If such material is submitted anyway, the submitting firm remains solely responsible for it, and CADIAL may delete it without notice.

The only file stored on the platform is the final signed report uploaded by CADIAL, held in a private bucket and released to the requesting firm only after the balance is settled.

To verify firm eligibility, coordinate engagements with independent professionals, issue and track invoices, deliver reports, maintain an audit trail of status changes, and comply with legal obligations.

We do not sell, rent or share your data for advertising, and we do not use your mandate data to train third-party models.

Information visible to you on CADIAL — including case briefs, pricing and the identity of any professional or firm introduced through the platform — is confidential and must not be disclosed or used to contract outside the platform.

The non-circumvention undertaking in our Terms & Conditions applies to every user and survives account closure. Bypassing the platform to deal directly with anyone introduced through it is a breach carrying liquidated damages.

A firm sees only its own mandates, status trail, invoices and reports. Firms never see other firms' data, CADIAL's internal notes, or CADIAL's underlying professional cost.

CADIAL coordinators see all mandates in order to run the engagement. Independent professionals receive only the anonymised case brief needed to perform the work, off-platform.

Access is enforced at the database layer with row-level security, not merely in the interface.

We use Supabase for authentication, database and encrypted file storage, and standard cloud hosting for the application. These providers process data on our instructions only.

Mandate, invoice and status records are retained for as long as your account is active and thereafter for the period required for tax, audit and limitation purposes. Delivered reports remain available in your history while your account is active. You may request deletion of your account data subject to those retention obligations.

You may request access to, correction of, or deletion of your firm's account data, and may withdraw from the network at any time. Write to hello@cadial.in and we will respond within a reasonable period.

We use encrypted transport, private storage buckets, role-scoped access and audited status trails. No system is absolutely secure, and to the maximum extent permitted by law CADIAL accepts no liability for loss arising from unauthorised access not caused by its wilful misconduct.

We may update this policy; material changes are notified through the platform. Continued use constitutes acceptance.