1. Information we collect

• Account information — name, email address, mobile number, business name, address, GSTIN/PAN and password (stored only as a one-way hash).
• Business data you enter — customers, products, invoices, expenses, staff, attendance and similar records that you create while using the service. This data belongs to you.
• Payment information — subscription payments are processed by our payment gateway partner (UPI payment gateway). We receive only a transaction reference, amount, status and the last few digits/mode of payment. We never store your full card number, CVV or UPI PIN.
• Technical information — IP address, browser/device type, login timestamps and pages visited, collected through server logs and cookies for security and analytics.
• Communications — messages you send us via the contact form, support tickets or email.

2. How we use your information

• To create and manage your account and deliver the subscribed services.
• To process payments, issue invoices/receipts and send renewal reminders.
• To send one-time passwords (OTP), password-reset links, transactional emails/SMS/WhatsApp messages and important service notices.
• To provide customer support and respond to your requests.
• To detect, prevent and investigate fraud, abuse and security incidents.
• To improve our product, and — only with your consent — to send product updates and offers. You can opt out at any time.

3. Legal basis and consent

By registering for an account or using our website, you consent to the collection and use of information as described in this policy in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and the Digital Personal Data Protection Act, 2023 of India.

4. Sharing of information

We do not sell or rent your personal data. We share information only with:

• Payment gateways (UPI payment gateway) to process your subscription payments, subject to their own privacy policies.
• Service providers such as hosting, email (SMTP), SMS and WhatsApp messaging providers, strictly to operate the service.
• Legal authorities when required by law, court order or to protect our rights, users or the public.
• Your own team — users you invite to your business account can see business data according to the role you assign them.

5. Cookies

We use a strictly necessary session cookie to keep you logged in and protect against cross-site request forgery, and a local-storage preference for your light/dark theme. We do not use third-party advertising cookies. You may disable cookies in your browser, but the application will not function without the session cookie.

6. Data storage and security

Your data is stored on secured servers located in India. We use HTTPS encryption in transit, hashed passwords, role-based access control, strict tenant isolation (each business's data is logically separated) and audit logs. While we follow industry-standard practices, no method of transmission or storage is 100% secure and we cannot guarantee absolute security.

7. Data retention

We retain your account and business data for as long as your account is active. After cancellation or expiry, data is retained for up to 90 days to allow reactivation and export, after which it may be permanently deleted. Payment and tax records are retained as required by Indian law (typically 8 years).

8. Your rights

• Access, correct or update your information from the Profile and Settings pages at any time.
• Export your business data (invoices, customers, products, reports) from the application.
• Request deletion of your account and data by emailing us from your registered email address. We will process verified requests within 30 days, subject to legal retention obligations.
• Withdraw consent for marketing communications via the unsubscribe link or by contacting us.

9. Children

Our service is intended for businesses and users aged 18 and above. We do not knowingly collect data from children.

10. Third-party links

Our website may contain links to external sites (e.g. payment gateway pages). We are not responsible for the privacy practices or content of those sites.

11. Changes to this policy

We may update this Privacy Policy from time to time. The revised version will be posted on this page with an updated “Last updated” date. Continued use of the service after changes constitutes acceptance.

12. Grievance Officer

In accordance with the Information Technology Act, 2000 and rules made thereunder, the contact details of the Grievance Officer are: PAN MITRA, Email: panmitra121@gmail.com. Grievances are acknowledged within 48 hours and resolved within 30 days.

Contact us

For any questions about this policy, please contact:

PAN MITRA
Address: Ramteerth Nagar, Belaagvi
Email: panmitra121@gmail.com
Phone: +91 9632456111
Website: https://crm.mitrait.in
Contact form: https://crm.mitrait.in/contact