Privacy & Information Protection Policy

This Privacy Policy explains how [Full legal entity name] (“Munsheeji”, “we”, “us” or “our”) collects, uses, stores, shares and protects personal information when you visit our website, create an account, communicate with us or use our Services. It should be read with the Terms of Use and any service-specific privacy notice.

This draft must be adapted to actual product operations and applicable Indian law before publication. The published policy should identify the responsible legal entity and provide working privacy and grievance contact details.

Identity and contact information: name, business email, phone number, designation and organisation details.

Account information: login identifier, role, preferences, authentication and security logs.

Company and compliance information: company identifiers, statutory details, tax/compliance records, due dates, filing status and supporting documents submitted by users.

Financial and transaction information: plan, invoice, payment status and billing details. Payment card data should be handled by the relevant payment provider where applicable.

Technical and usage information: IP address, browser/device information, logs, diagnostic data, pages viewed and interactions, subject to actual configuration and applicable consent requirements.

Support and communication information: enquiries, feedback, complaint details and correspondence.

Information from third parties: information supplied by an organisation administrator, authorised representative, professional partner or integrated service, where permitted.

Create and administer accounts and provide requested Services.

Organise compliance workflows, reminders, task status, dashboards, reports and document handling.

Process subscriptions, payments, invoices and customer support.

Maintain platform security, troubleshoot issues, prevent fraud and investigate misuse.

Improve product performance and user experience using lawful, appropriately controlled methods.

Meet legal, regulatory, accounting, contractual and dispute-resolution obligations.

Send service notices and, where permitted, marketing communications with applicable consent or opt-out options.

We will process personal information on a lawful basis applicable to the circumstances, such as providing a requested service, complying with legal obligations, pursuing legitimate operational purposes where permitted, or obtaining consent where required. Where consent is relied upon, it may be withdrawn through the stated method, subject to legal and contractual limits.

If you upload or provide information about directors, employees, customers, clients or other individuals, you must have the authority and lawful basis to do so and provide any notices or obtain any consent required by law. Please submit only information reasonably necessary for the intended service.

We may share information, as necessary and subject to appropriate safeguards, with:

Employees and authorised personnel who need access to perform their roles.

Hosting, cloud, cybersecurity, analytics, communication, customer-support and payment service providers.

Professional advisers or service partners involved in a service requested by the customer, where applicable.

Government, regulatory, law-enforcement or judicial authorities where required or legally permitted.

Corporate transaction parties in connection with a merger, restructuring or transfer, subject to appropriate confidentiality and legal safeguards.

Other parties with the user's direction, authorisation or consent, where applicable.

The website may use essential cookies and similar technologies for session management, security and core functionality. If analytics, preference or marketing technologies are enabled, their purpose and consent controls should be described in the website cookie banner and settings. Users may also manage cookies through browser settings, although disabling essential cookies may affect functionality.

Information may be processed by Munsheeji and its service providers in the locations required to operate the Services. Before publication, Munsheeji must confirm actual hosting locations, vendor access and any international transfers, and apply the safeguards and restrictions required by applicable law.

We retain personal information for no longer than reasonably necessary for the purposes described in this Policy, subject to contracts, legal retention obligations, security needs, dispute resolution and backup cycles. The company should maintain a retention schedule by data category. Subject to applicable law and contractual terms, users may request deletion or account closure through [privacy email/support channel]. Some information may need to be retained where legally required.

We use reasonable technical and organisational measures appropriate to the information and risks involved. Controls may include access restrictions, authentication, monitoring, backups and vendor safeguards, to the extent implemented. No method of transmission or storage can be guaranteed completely secure. Please report suspected unauthorised access or disclosure to [security email].

We will assess suspected security incidents and take appropriate containment, investigation, remediation and notification steps as required by applicable law. Notifications will be made to affected individuals or authorities where required.

Subject to applicable law, you may have rights to request access to, correction or erasure of personal information, withdraw consent where processing is based on consent, raise a grievance or nominate another person where legally applicable. Requests may be submitted to [privacy email / Grievance Officer]. We may need to verify identity and may retain information where law permits or requires.

We may send service messages relating to account activity, compliance workflow, payments, security or policy updates. Marketing communications will be sent only as permitted by applicable law. You may opt out of marketing messages using the available unsubscribe method, but essential service and legal notices may still be sent.

The Services are intended for business and professional use and are not directed to children unless a specific service expressly states otherwise. We do not knowingly seek to collect children's personal information without an appropriate legal basis and required authorisation.

Our website may link to third-party websites or integrate with external services. Their privacy practices are governed by their own notices. Review those notices before providing information directly to third parties.

We may update this Policy to reflect changes in law, Services or operations. The current version and effective date will be published on the website. Where required, we will provide notice or obtain renewed consent.

Privacy contact: [Name / Role], [Full legal entity name], [Registered office address], Email: [privacy email].

Grievance contact / officer, where applicable: [Name], [Designation], [Postal address], Email: [grievance email]. Insert the specific details and response process required under applicable law before publication.