The architecture, in one picture
Roy has exactly three parts, and only one of them ever touches your books:
| Part | Where it runs | What it does |
|---|---|---|
| Optriq Connector | Your Windows PC — the same machine that runs Tally | Reads from and writes to Tally Prime locally, using Tally’s own built-in HTTP-XML interface. The only component that can see your ledger. |
| Optriq Cloud | AWS Mumbai (ap-south-1) | Receives your chat message, works out what you’re asking, and sends the Connector a narrow, scoped request — “today’s sales total”, never “send the books”. |
| The chat | WhatsApp / Telegram on your phone | Where you talk to Roy and where you approve or reject every write. |
The Connector dials out: it opens a single outbound, TLS-encrypted connection to Optriq’s cloud. There are no inbound ports to open, no port forwarding, no static IP, no VPN, and no remote-desktop access of any kind. If you switch the Connector off, nothing can reach your Tally.
What stays on your PC — always
Your ledger lives on your PC and, by default, is stored nowhere else. Vouchers, party masters, balances, stock, GST data — all of it is read from Tally on your machine, by software on your machine. We do not cache it, mirror it, sync it, or back it up to our cloud. This is not a policy we follow; it is how the product is built — the one exception is Cloud Copy, an optional feature that is off for everyone until the owner switches it on from the Connector app itself, and whose copy is deleted the instant it is switched off. When you ask Roy a question, only the specific figures that answer it transit — the next section spells out exactly what that means.
Alongside Tally’s own data, the Connector keeps a small local database (SQLite, in %AppData%\Optriq\) on your PC:
- Activity log — a record of everything Roy did: who asked what, what was posted, what was approved and when
- Settings — your preferences and approval rules
- License key — your subscription identifier
That database is yours too. It never leaves your computer.
What passes through our cloud, and why
Roy could not answer you if nothing ever left your PC — the answer itself has to reach your phone. Here is exactly what transits, and what happens to it:
| What | Why it transits | What happens after |
|---|---|---|
| Your chat messages | To understand what you’re asking for | Processed in memory, not stored |
| Voice notes | Transcribed to text | Audio discarded after transcription |
| Bill photos and PDFs you forward | Read into a draft voucher for your approval | Discarded after extraction |
| The specific figures a request needs (e.g. today’s sales total, one party’s outstanding) | To reason about your question and render the reply that reaches your phone | Held in memory for that conversation turn only, then gone — never written to a database, never stored |
What our cloud stores is deliberately boring: your license and pairing details, feature settings, and anonymised error logs. The full inventory, with retention periods, is in our Privacy Policy.
Trace one question end-to-end. You type “Mehta ji ka outstanding kitna hai?” The cloud works out this is an outstanding-balance query and asks your Connector for one party’s balance. The Connector queries Tally locally and returns that figure. The cloud composes the reply and sends it to your chat. Nothing from that exchange is persisted on our servers. Your ledger was never requested, never sent, never seen.
Cloud Copy — optional, off by default
Some owners want Roy to answer even when the Tally PC is switched off — “Sharma ji ka statement bhejo” from the shop floor at 9 pm, PC off since evening. Cloud Copy is that convenience, and it is the one deliberate, owner-controlled exception to the rule above. It is off by default for every customer, and the only way to switch it on is the consent screen inside the Connector app on your PC — there is no chat command for it, and nothing we can flip from our side.
When Cloud Copy is ON:
- What syncs: the reports Roy answers from — party statements and balances, outstanding and ageing, daybook and registers, stock, GST summaries. The Connector pushes a fresh copy roughly every 20 minutes while Tally is running, and once more when it shuts down. It is reads only — no voucher can ever be posted from the copy; entries still require your PC on and your tap.
- Where it lives: an isolated store on Optriq’s servers in AWS Mumbai (ap-south-1) — separate from the chat and routing systems, which cannot read it.
- Encrypted per license: every copy is encrypted (AES-256-GCM) with a data key unique to that license, managed through AWS KMS. One customer’s key cannot open another customer’s copy.
- Latest copy only: each sync atomically replaces the previous one. No history, no versions, no backup chain — exactly one snapshot exists at any moment.
- Honestly stamped: every answer served from the copy says so, with the sync time — “📴 PC band hai — yeh 27 Jul, 6:05 pm tak ka data hai (last sync).” — and PDFs carry an “As of … (Cloud Copy)” header. Roy never passes off a stale figure as live.
Deleting it is instant — not “within 7 working days”. Switch Cloud Copy off, unpair, or uninstall the Connector, and the copy is deleted from the store immediately — the Connector shows “deleted” only after the server confirms the store is actually empty. This is faster than the general deletion promise in our Privacy Policy because it is enforced by code, not by a support process.
And if you never switch it on? Then this section simply does not apply to you, and everything above stands word for word: your ledger stays on your PC, and nothing is stored in our cloud.
Every write needs your tap — cryptographically
Roy never posts anything on his own. Every voucher — sales, purchase, payment, receipt — is presented to you first as a draft card with the full breakdown: party, items, GST, total. You tap Approve, or you tap Reject.
The approval is not a soft convention — it is enforced by the software on your machine:
- When you tap Approve, our cloud issues a signed approval token (HMAC-SHA256) that is bound to the exact contents of that draft — the token embeds a SHA-256 fingerprint of the draft, down to the paisa.
- Your Connector independently verifies the signature and that the voucher it is about to post matches the fingerprint. If either check fails, nothing is posted.
- The check is fail-closed: a Connector that cannot verify an approval refuses all writes. There is no bypass, no “dev mode”, no fallback.
What you approve is what gets posted — and our record since launch stands: zero unapproved writes, ever. Every entry in every customer’s books came from a draft its owner tapped.
Reads are scoped the same way: the cloud can only ask the Connector the specific, narrow questions the product defines — it cannot ask for arbitrary data.
Your data trains nothing
We do not use your business data to train AI models — not ours, not anyone else’s. The AI providers we use process only what a specific request needs (your message, a voice note, a bill image, the figures needed to answer), under contracts and policies listed in our Privacy Policy. We do not sell your data, profile your business for advertising, or share your Tally data with third parties.
The software on your PC
- Two editions, one core. The flagship Connector runs on Windows 10 and newer; a Legacy edition covers Windows 7/8 machines still common on factory floors. Both are built from the same core code — a fix lands once and both editions get it.
- Signed updates. Every installer and every update is cryptographically signed. The Connector verifies the signature before applying an update — an unsigned or tampered build will not install.
- Outbound only. The Connector never listens for connections from the internet. It makes one outbound TLS connection to Optriq’s cloud, and it talks to Tally only on your machine.
Leaving is clean
If you stop using Roy, there is nothing to migrate and nothing held hostage — your books were in your Tally the whole time.
- Uninstall the Optriq Connector (Settings → Apps → Uninstall)
- Delete the
%AppData%\Optriq\folder if you want the local activity log gone too - If Cloud Copy was on, it does not wait for step 4: switching it off, unpairing, or uninstalling deletes your copy from our store instantly
- Email support@optriqai.com — we delete your remaining cloud data (license, pairing) within 7 working days and confirm by email
Your Tally, your data, and your books are exactly as they were. Roy only ever added the entries you approved.
Orionwave Private Limited • Your Tally data never leaves your computer — unless you choose.