Privacy Policy

1. Information We Collect

• Account data: name, email, phone, organisation, role.
• Billing data: billing address, GSTIN (if applicable), payment metadata. Card and bank credentials are handled by Stripe and Razorpay and are not stored on our servers.
• Usage data: log files, IP address, device and browser information, pages viewed, feature usage.
• Customer content: data you upload to our SaaS products (e.g. students, inventory, invoices).
• Communications: messages you send to support, sales or in product chat.

2. How We Use Information

• Provide, operate, secure and improve the Services.
• Process payments, send invoices, prevent fraud.
• Provide customer support and respond to enquiries.
• Send service notices, security alerts and, with consent, marketing.
• Comply with legal obligations and enforce our Terms.

3. Legal Basis

We process personal data on the basis of contract performance, legitimate interests (such as securing and improving the Services), consent (for marketing where required) and legal obligation.

4. Payment Processing

Payments are processed by PCI-DSS compliant third-party processors, including Stripe and Razorpay. When you pay, the processor receives the data necessary to complete the transaction (such as card details and billing information) under its own privacy policy. We receive only a transaction reference, status and limited metadata.

5. Sharing of Information

• Service sub-processors: cloud hosting, email, analytics, customer support and payment processors, bound by confidentiality and data-protection commitments.
• Legal and safety: when required by law, regulation, legal process or to protect rights, property and safety.
• Business transfers: in connection with a merger, acquisition or asset sale, subject to confidentiality.

6. Data Retention

We retain personal and customer data for as long as your account is active and as needed to provide the Services, comply with legal obligations, resolve disputes and enforce agreements. You may request deletion subject to legal retention requirements.

7. Security

We use industry-standard technical and organisational measures including encryption in transit, access controls, audit logs and regular backups. No method of transmission or storage is fully secure; we cannot guarantee absolute security.

8. Your Rights

Subject to applicable law (including India's DPDP Act and, where relevant, GDPR), you may request access, correction, deletion, restriction or portability of your personal data, or withdraw consent. To exercise rights, contact support@purposix.com.

9. Cookies

We use essential cookies for authentication and security, and optional analytics cookies to understand usage. You can control cookies through your browser settings.

10. Children

Our Services are not directed to children under 18. We do not knowingly collect personal data from children.

11. International Transfers

Your data may be processed in countries other than your own where our sub-processors operate. Where required, appropriate safeguards are in place.

12. Changes to this Policy

We may update this Policy from time to time. Material changes will be notified via email or in-product notice.

13. Contact

Grievance / Data Protection Officer: Purposix, India. Email: support@purposix.com.