Privacy Policy

This policy explains what personal data we handle when you use SevaSangam, why, and the choices you have. It is written to align with India's Digital Personal Data Protection Act, 2023 (DPDP Act).

1. Data we collect

• Account data — your name, mobile number, email, password (stored only as a hash), business name, and business details you add such as GSTIN, address, working hours and UPI ID.
• Team data — names, phone numbers and roles of managers/technicians you add to your workspace.
• Business records you store — your customers' names, phone numbers, addresses, and their job, quote, invoice, payment and feedback history. For these records we act on your instructions (see section 4).
• Verification data — one-time passwords sent to your phone and their verification status. GPS coordinates are recorded when a technician checks in to a job.
• Usage and log data — IP address, request logs and device/browser information, kept for security and debugging.

2. How we use it

• To provide the Service: sign-in, invoices, scheduling, messaging, payroll figures and the rest of the product.
• To send OTPs and the notifications you switch on (e.g. "new lead" alerts on WhatsApp or email).
• To bill subscriptions, provide support, keep the Service secure and prevent abuse.
• To comply with law. We do not sell personal data or use it for third-party advertising.

3. Who processes it for us

Provider	Purpose
Amazon Web Services	Hosting, database, file storage (uploads in the Mumbai region; application database in a US region), and email delivery (SES)
MSG91	Sending SMS one-time passwords
Meta (WhatsApp Cloud API)	Delivering WhatsApp messages you send or automate
Razorpay	Subscription billing and payment processing for your SevaSangam plan

Each provider receives only what it needs for its purpose. Data is encrypted in transit (TLS) and at rest. We may disclose data where a law, court or authority validly requires it.

4. Your customers' data

Records about your customers belong to your business — we store and process them on your behalf so the product works. If one of your customers wants their data corrected or deleted, that request is yours to honour; we provide the tools, and will assist where needed. You are responsible for having a lawful basis to store their data and to message them.

5. Retention

• Account and business data: kept while your account is active.
• After account closure: deleted or anonymised within 90 days, except records we must keep longer under law (e.g. billing and tax records).
• Server logs: kept for a short rolling window for security and debugging.

6. Your rights

Under the DPDP Act you can ask us for access to, correction of, or erasure of your personal data, and you can nominate someone to exercise your rights. Write to help@sevasangam.in — we respond within the timelines the law prescribes. If you are unsatisfied with our response, you may escalate to our grievance contact below and thereafter to the Data Protection Board of India.

7. Cookies and local storage

We do not use advertising trackers. The app keeps your session token and profile in your browser's local storage so you stay signed in; logging out clears them.

8. Children

The Service is for business use by adults (18+). We do not knowingly collect children's data.

9. Security

Passwords are hashed, secrets are stored in a managed secrets vault, access is role-based, and traffic is encrypted. No system is perfectly secure — if you find a vulnerability, please report it to help@sevasangam.in and we will act quickly.

10. Grievance contact

Grievance Officer: Apurv Singh, Partwigo Labs — help@sevasangam.in. Please include "Grievance" in the subject line.

11. Changes

If we materially change this policy we will notify you in the app or by email before the change takes effect.