Privacy Policy

This Privacy Policy describes how Purposix ("we", "us", "our") collects, uses, discloses, and safeguards information in connection with the Total Inventory Pro platform and related services (the "Service").

1. Information We Collect

• Account data — name, email, phone, company, role, password hash.
• Billing data — billing address, GSTIN/VAT number, plan, invoice history. Card or bank-account details are collected and stored by our payment processors, not by us.
• Customer Data — business records you enter into the Service (items, customers, vendors, orders, invoices, stock).
• Usage data — IP, device, browser, log timestamps, and feature usage analytics.
• Cookies — for authentication, preferences, and analytics. You can disable non-essential cookies in your browser.

2. How We Use Information

• To provide, secure, and improve the Service.
• To process payments, issue invoices, and prevent fraud.
• To send service notifications, security alerts, and (with consent) product updates.
• To comply with legal, tax, and accounting obligations.

3. Payment Processors

Payments are processed by trusted PCI-DSS compliant providers. We share only the data necessary to complete a transaction (such as amount, currency, your email, and billing address). Each processor maintains its own privacy policy:

• Stripe — stripe.com/privacy
• Razorpay — razorpay.com/privacy
• Cashfree — cashfree.com/privacy-policy

4. Sharing & Disclosure

We do not sell your personal information. We share data only with: (a) sub-processors who host or operate the Service under written confidentiality terms; (b) payment processors listed above; (c) authorities when required by law; and (d) acquirers in the event of a merger or acquisition (with notice to you).

5. Data Retention

We retain account and Customer Data while your subscription is active and for a reasonable period thereafter for backup, dispute resolution, and legal compliance. You can request deletion at any time (subject to retention required by law, e.g. tax records).

6. Security

We use encryption in transit (TLS), encryption at rest, role-based access control, JWT authentication, regular backups, and audit logging. No system is 100% secure; we will notify affected users of any breach as required by applicable law.

7. Your Rights

Depending on your jurisdiction (GDPR, DPDP Act, CCPA, etc.), you may have rights to access, correct, delete, or port your personal data, and to object to or restrict certain processing. Email support@purposix.com to exercise any of these rights.

8. International Transfers

Your data may be processed in India, the UAE, the EU, or other countries where we or our sub-processors operate. Where required, we use appropriate safeguards such as Standard Contractual Clauses.

9. Children

The Service is not directed to children under 18 and we do not knowingly collect data from them.

10. Changes

We may update this Policy from time to time. The "Last updated" date at the top reflects the most recent revision.

11. Contact

Privacy questions or requests: support@purposix.com.