Privacy Policy

1. Introduction

Sahasra Synergy Innovations Private Limited ("Company") is committed to protecting your personal data in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable Indian data protection laws. This Privacy Policy explains how we collect, use, store, and protect your personal information.

2. Personal Data We Collect

During your subscription and payment process, we collect:

• Identity Data: Name, email address, phone number
• Business Data: Business name, profile slug, business address, city, state, PIN code
• Tax Data: GSTIN (if registered under GST), PAN (if provided)
• Payment Data: Razorpay Order ID, Payment ID, transaction amount (NOT full card details — Razorpay handles that)
• Invoice Data: All data shown on your invoice is stored for GST compliance and auditing

3. Purpose of Data Collection

We collect and process your personal data for:

• Service Delivery: Activating and maintaining your business profile
• Payment Processing: Collecting subscription fees securely via Razorpay
• Tax Compliance: Generating GST-compliant invoices as required under Indian tax law
• Communication: Sending invoices, payment confirmations, and service updates
• Grievance Redressal: Responding to your inquiries and complaints
• Legal Compliance: Fulfilling obligations under Income Tax Act, GST Act, and Companies Act

4. Data Sharing with Third Parties

Your personal data may be shared with:

• Razorpay Payments India Pvt Ltd: Payment processor. Your payment data is encrypted and handled per PCI-DSS standards.
• Hostinger / Nodemailer: Email service provider for sending invoices and notifications
• Government Agencies: If required by law (GST authorities, Income Tax Department, etc.)
• Professional Advisors: Chartered Accountants or legal advisors for compliance purposes (under NDA)

We do NOT sell or commercially trade your personal data to any marketing companies or data brokers.

5. Data Retention

We retain your personal data for:

• Invoice & Tax Data: Minimum 6 years (as per GST rules and Income Tax Act)
• Payment Records: As long as required by RBI and banking regulations
• Active Account Data: For the duration of your subscription plus 1 year after cancellation
• After Deletion Request: Deleted within 30 days, except where legally required to retain

6. Your Rights Under DPDP Act

You have the right to:

• Right to Access: Request a copy of your personal data we hold
• Right to Correction: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data (subject to legal retention requirements)
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Withdraw Consent: Stop data processing (may affect service delivery)
• Right to Grievance Redressal: Lodge complaints about data handling

7. Data Security

We implement industry-standard security measures:

• Encrypted data transmission (HTTPS/TLS)
• Secure database storage with access controls
• Regular security audits and vulnerability assessments
• Payment data handled by PCI-DSS compliant processor (Razorpay)
• Employee confidentiality agreements and data protection training

However, no transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Cookies & Tracking

Our website uses:

• Essential Cookies: For session management and security (required for functionality)
• Analytics (if used): To understand site usage patterns (anonymized, non-identifying)
• Razorpay Tracking: For payment processing and fraud prevention

9. Grievance Redressal Mechanism

If you have concerns about your personal data or believe your privacy rights have been violated:

If your grievance is not resolved satisfactorily, you may file a complaint with the Data Protection Authority (as established under DPDP Act).

10. Children's Data

Our service is intended for users aged 18+. We do not knowingly collect personal data from children under 18. If we discover such data, we will delete it immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or prominent notice on our website. Your continued use of the service constitutes acceptance of the updated policy.

12. Contact Us