Privacy Policy

Scope

This Privacy Policy explains how Involex handles information from the public website and from a hosted company workspace. It should be read with the Terms of use.

Language

This Privacy Policy is issued in English. Pages in other languages are loose translations for convenience only and are not legal text. If a translation differs, the English Privacy Policy is the only legally binding version.

Website enquiries

When you send the enquiry form, we typically keep:

• Your name and business name
• Phone number and email
• City, selected plan, and any message you include

We use this to respond to your request, discuss set-up, and related billing for a workspace. We do not sell enquiry lists. Limited technical checks (such as hidden fields and rate limits) help reduce automated abuse.

Workspace information

After a workspace is created, business records you enter — such as invoices, parties, catalogue, payments, and reports — are stored in that company’s tenant. Staff accounts and optional security settings belong to that workspace.

People who operate the platform may access a workspace as needed to provision it, provide support, or administer the licence. A chartered accountant sees reporting only after you invite them and approve access.

Cookies & Device Storage

We use strictly necessary session cookies for authentication, theme tokens, and cryptographic security. For full details on our storage inventory or to customize your cookie consent, visit our Cookie Policy.

Subprocessors & Third-Party Sharing

We do not sell, rent, or trade your personal or business data. We use limited, trusted third-party providers strictly to operate the platform:

• Cloud Hosting & VPS: Secure servers located in compliant datacenters.
• HTML-to-PDF Engine: 100% server-side WeasyPrint processing for local GST invoice generation without external data leakage.
• Communication Channels: WhatsApp Business API and transactional email gateways to transmit receipts, license keys, and OTPs.

Data Retention Schedule

We enforce strict data retention schedules in accordance with operational necessity and statutory Indian regulations:

• Active Tenant Workspaces: Retained throughout your subscription and for a 60-day post-expiry grace period.
• Statutory GST Records: Retained for the statutory duration mandated under Section 36 of the Indian CGST Act (up to 72 months) unless explicitly archived.
• Inbound Enquiries: Retained for up to 180 days for sales correspondence, then securely purged.
• Security & Audit Logs: Maintained for 365 days to investigate unauthorized access or security incidents.

Your Rights: Data Access, Correction & Deletion (DPDP Act 2023)

Under the Digital Personal Data Protection Act, 2023 and international privacy frameworks, you have the right to request access to the personal data we maintain about you, rectify incorrect records, withdraw marketing consent, or demand permanent erasure of your account.

To exercise these rights, submit an official request via our Data Subject Rights & Deletion Portal.

Grievance Redressal & Compliance Officer

In compliance with the Information Technology Act, 2000 and the DPDP Act, 2023, Involex has appointed a dedicated Grievance Officer:

Grievance Officer: Grievance Redressal Officer · Email: [email protected] · Telephone: +91 84850 84920 · Address: Pune, Maharashtra, India.

Review the full statutory escalation procedure on our Grievance Redressal page.

Contact

General privacy questions can be sent through our contact page or by emailing [email protected]. Please do not send passwords or OTP codes by form.