Privacy Policy

1. Who we are (data fiduciary)

Profitru is the data fiduciary for personal data we collect to operate accounts, billing, security, support, and our websites. For Customer Data that you store about your own staff, customers, or suppliers inside the workspace, you are typically the data fiduciary and Profitru acts as a data processor / service provider on your instructions.

Contact the Grievance Officer at privacy@profitru.com. General help: support@profitru.com.

Document version 2026-09-12.

2. Whose data we process

We process data about Tenant owners and invited users, people who contact us or book a demo, and (on your instructions) individuals whose details appear in Customer Data you upload or sync (for example customer names on invoices or marketplace orders).

3. What we collect

Account and verification: name, business name, email, phone, password hashes, OTP verification records, and terms-acceptance timestamp and version.

Billing: plan, GST details you enter, payment references from Razorpay (we do not store full card numbers).

Usage and security: login times, IP address, device/browser data, audit logs, and error diagnostics.

Customer Data you choose to put in the Service: catalogue, inventory, orders, returns, invoices, warehouse and procurement records, marketplace mappings, and files you upload.

Marketing site: contact-form and waitlist submissions, and analytics if enabled (see Cookie Policy).

We do not require special-category personal data. Please do not upload unnecessary sensitive data (for example health records or children’s data).

4. Why we use data (purposes)

We use personal data to:

• Create and authenticate your account (including email and SMS OTP)
• Provide the workspace features you enable, including marketplace sync you connect
• Bill subscriptions, send invoices, and collect GST where applicable
• Secure the Service, prevent fraud and abuse, and debug incidents
• Send service messages (security, billing, downtime, product notices)
• Respond to support and legal requests
• Improve the product using aggregated or de-identified usage patterns
• Comply with Indian law and enforce our Terms

5. Legal basis and consent

For account creation we rely on your informed consent (the signup checkbox) and on performance of the contract. You may withdraw consent for optional processing by emailing privacy@profitru.com. Withdrawal does not affect processing already completed. If you withdraw consent required to run the account, we may have to close the workspace.

We also process data where required by law (for example tax records) or for legitimate security of the Service.

6. Sharing and subprocessors

We do not sell personal data. We share it with:

• Infrastructure hosting for the application and backups
• Razorpay (or successor payment processors) for checkout and recurring billing
• MSG91 (or successor SMS providers) for OTP and transactional SMS
• Email delivery providers for OTP, welcome, and service mail
• Marketplace APIs you connect (Amazon, Flipkart, Shopify, eBay, and others you enable), limited to what the connector needs
• Professional advisers and authorities when legally required

Providers are required to use data only on our instructions except where they act as independent fiduciaries (for example a marketplace under its own terms).

7. Cookies and similar technologies

We use cookies and local storage as described in the Cookie Policy. Strictly necessary cookies keep you signed in. Preference storage remembers theme. Optional analytics may run on the marketing site.

8. Retention

Account data is kept while the Tenant is active and for a reasonable period after closure for security, billing disputes, and legal retention (including tax). OTP records expire quickly. Backups rotate on a schedule. You can request deletion of personal data subject to legal holds.

9. Security

We use access controls, encrypted transport (HTTPS), hashed passwords, tenant isolation in the application, and operational monitoring. No method of transmission or storage is 100% secure. You must also protect your logins and devices.

10. Your rights under the DPDP Act

Subject to the Act and its rules, you may request:

• A summary of personal data we hold about you and the processing activities
• Correction and completion of inaccurate data
• Erasure of personal data that is no longer needed for the stated purpose, subject to legal retention
• Grievance redressal
• Nomination of another person to exercise rights in case of death or incapacity, when the rules so provide

Send requests to privacy@profitru.com from your registered email. We may need to verify identity. We will respond within the timelines required by law. You may also complain to the Data Protection Board of India after exhausting our grievance process.

11. Children

The Service is for businesses and adults. We do not knowingly create Tenant accounts for persons under 18. If you believe we have collected such data, contact privacy@profitru.com.

12. International processing

We primarily operate the Service for Indian businesses. Some subprocessors may process data in other countries. We take steps appropriate under applicable law when transferring personal data outside India.

13. Changes

We may update this Policy. The date and version above will change. Material changes will be notified where practical. New signups must accept the current pack by checkbox.