Privacy Policy

Last updated: 9 October 2026

Draft for legal review. This text is a starting point written to match how the product works. Have it reviewed by a qualified lawyer before relying on it.

This policy explains how Cleartex Technologies ("we", "us") handles personal data in Cleartex, in line with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the rules made under it.

1. Two different roles

  • Your account data — the names, emails and mobile numbers of the people who sign up and use Cleartex for a business, and how they use the service. For this data we are the Data Fiduciary.
  • Your business data — the customers, vendors, employees, invoices and other records a business keeps in Cleartex. For this data the business is the Data Fiduciary and we are its Data Processor: we process it only to provide the service, on the business's instructions, and never for our own purposes.

2. What we collect and why

  • Account details (name, email, mobile, company name, GSTIN, address) — to create and run your account and to bill you.
  • Sign-in and security data (sign-in times, IP address, device/browser, audit log entries) — to keep accounts secure and to show you who did what.
  • Payment details for our subscriptions are handled by our payment provider (Razorpay); we receive the payment status, not your card or bank credentials.
  • Location and photos, only where a business uses attendance or field tracking, and only with the employee's consent on the device.
  • Support conversations, to help you.

We do not sell personal data, and we do not use your business data for advertising or to train models.

3. Consent and legitimate uses

We process account data on the basis of your consent given at sign-up and for the legitimate uses the DPDP Act allows, such as meeting legal obligations (for example, keeping tax records). You can withdraw consent at any time by closing your account; withdrawal doesn't affect processing already done.

4. Your rights

Under the DPDP Act you may:

  • ask for a summary of the personal data we hold about you and how it is processed;
  • ask us to correct, complete or update it;
  • ask us to erase it, subject to what the law requires us to keep;
  • nominate another person to exercise these rights if you die or become unable to;
  • have a grievance addressed by us, and then by the Data Protection Board of India.

Owners can also export all of their business's data at any time from Settings → Data & Account. If you are a customer or employee of a business that uses Cleartex, please contact that business first; we will help them respond.

5. Keeping data safe

  • Each business's data is kept separate from every other's, enforced in our database layer and tested on every release.
  • Connected-service credentials are encrypted; passwords are stored only as salted hashes.
  • Two-step sign-in, account lockout, an audit log, and encrypted off-site backups.
  • Our staff cannot see a business's data unless its owner grants time-limited, read-only support access, which is logged.

If a personal data breach occurs, we will inform the Data Protection Board and the affected users as the DPDP Act requires, and tell affected businesses without undue delay.

6. How long we keep data

We keep account and business data while the account is active. When a business closes its account, we delete its data after a 30-day grace period, except our own tax invoices to that business, which tax law requires us to keep. Businesses must keep their own GST records for 72 months and should export them before closing. Backups are overwritten within 30 days.

7. Where data is stored and who helps us

Data is stored on servers in India where possible. We use a small number of service providers — hosting, backup storage, email delivery and payments — bound by contract to protect it. Any transfer outside India follows the DPDP Act and any restrictions the Government notifies.

8. Children

Cleartex is for businesses and is not meant for anyone under 18. We do not knowingly process children's personal data.

9. Grievance Officer

[Grievance Officer name], Cleartex Technologies, [Registered office address]. Email: grievance@cleartex.example. We aim to respond within the period prescribed under the DPDP rules. General questions: phapalevaishnavi725@gmail.com.

10. Changes

We will post updates here and tell account owners by email before material changes take effect.