Privacy Policy

1. Information we collect

Registration: business name, address, business type, optional GSTIN, owner name, email and mobile number, and the selected plan.

Payment: Razorpay order and payment identifiers, amount, status and method type; the payment evidence you upload (a screenshot or PDF), the transaction ID and the UTR number. We do not receive card numbers, UPI PINs or bank credentials.

Accounts and security: user names, emails, roles, language, profile photos users choose to upload, sign-in times, and IP address and browser information.

Demo requests: the details entered in the contact form, and whether you opted in to product updates.

2. Customer business data

Customers record their own buyers, leads, property, deal, staff and other information in the service. The Customer decides what to record and is the data fiduciary for it; we process it only on the Customer's behalf to provide the service. The Customer is responsible for having a lawful basis and any consent needed for that data.

3. How we use information

To register and verify businesses, process payments and issue invoices, create, operate and secure workspaces, send service emails (for example activation, password reset, payment, renewal and support messages), provide support, prevent fraud and misuse, and meet legal and tax obligations. Product update emails are sent only if you opt in, and you can opt out at any time.

4. Where data is kept

Data is stored with a reputable cloud hosting provider on servers located in Singapore. Each Customer's business data is kept in its own separate database that cannot be reached from another Customer's workspace. Registration, billing, account and audit information needed to run the service is kept separately.

5. Who can see it

Our operations staff who handle registrations see registration, payment and account status only; they cannot open Customer business data such as buyers, staff, projects or deals.

The Super Admin of H&G NextGen Private Limited can view and export a Customer's workspace data and manage its account, only to run, support and secure the service, resolve billing or account problems, or meet legal obligations. Every view, download and change is recorded in an audit log that cannot be edited or deleted.

6. Service providers

We share only the information needed with providers that help us run the service: Razorpay for payments, and our email delivery, photo storage and cloud hosting providers. They process data only to provide their services to us.

We do not sell personal data. We disclose information to authorities only when required by law.

7. Security

Passwords are stored in a form that cannot be turned back into the password. Activation and reset links work once and expire. The keys that open each workspace are stored encrypted. Sensitive actions are recorded in audit logs that cannot be edited or deleted.

No system is perfectly secure, and we cannot guarantee absolute security. We will notify affected Customers and authorities of personal data breaches as required by law.

8. How long we keep data

Workspace business data: kept while the subscription is active and for 30 days after it ends without renewal, then permanently deleted. Renewing within those 30 days restores it.

Registration, payment, payment evidence and invoice records: 8 years, as required for tax and company records.

Audit logs: 3 years. Support conversations: 3 years after closing.

Backups, where taken, are kept for up to 30 days and then overwritten. Deleted data cannot be recovered after these periods.

9. Your rights

Under the Digital Personal Data Protection Act, 2023 and other applicable law, you may ask to access, correct or erase your personal data, withdraw consent for optional processing such as marketing emails, and nominate another person to exercise these rights. Write to us from your registered email. We may keep data we must keep by law.

Staff of a Customer should first contact that Customer, which controls its workspace data.

10. Cookies

We use only the cookies needed to sign you in, keep you signed in securely, and remember your language and theme. We do not use advertising cookies.

11. Changes

We may update this policy. The current version and its date are always shown on this website.

12. Grievance Officer

Grievance Officer, H&G NextGen Private Limited, 5-17, Krishnagiri Colony, Anjimedu, Yerpedu, Chittoor, Andhra Pradesh 517619, India. Email: [email protected], subject "Grievance". We acknowledge within 48 hours and resolve within 30 days.