1. Information we collect
a) Account information. When you sign up or request a trial, we collect your firm name, your name, mobile number, city and email address (if provided).
b) Firm Data. Information you and your staff enter while using ArchiFlow: staff profiles and attendance records, kaam (work) assignments and statuses, site details, site-visit notes and photos, drawings and files, client and project details, and accounting entries (cash/bank transactions, receipts, invoices).
c) Usage and device information. Log data such as pages used, actions taken, approximate device and browser type, and timestamps — used to operate, secure and improve the Service.
d) Payment information. Payments are processed by Razorpay. We receive payment confirmations, amounts, invoice details and transaction references. We do not receive or store your full card numbers, UPI PINs or bank credentials — those are handled entirely by Razorpay under its own privacy policy.
e) Communications. When you contact support, we keep the correspondence so we can help you and improve our service.
2. How we use your information
- To provide, maintain and support ArchiFlow for your office.
- To create and manage your trial and subscription, process payments and send GST invoices.
- To send service messages: trial setup, OTPs, kaam and attendance alerts on WhatsApp/SMS/email where you have enabled them.
- To respond to your support requests.
- To improve the Service, including aggregated, anonymised analytics (never sold, never used for advertising).
- To comply with legal obligations and enforce our Terms.
We process your information on the basis of your consent (given at signup), performance of our contract with you (providing the subscription you pay for), and our legitimate interest in running a secure service.
3. How we share your information
We do not sell your personal information or your Firm Data. We share limited information only with:
- Infrastructure providers — ArchiFlow runs on Google Cloud infrastructure (Google LLC), which stores and processes data on our behalf under Google's data-processing terms.
- Payment processor — Razorpay Software Private Limited, to process subscription payments.
- Messaging providers — WhatsApp/Meta and SMS/email providers, only to deliver the alerts and OTPs you request.
- Legal and safety — where required by law, court order, or to protect our rights and users' safety.
All such providers are bound to use the data only for the service they provide to us.
4. Data security
- Data is transmitted over encrypted (HTTPS/TLS) connections and stored on secure cloud infrastructure with restricted access.
- Each office's data is isolated: staff of one office cannot see another office's data.
- Access to production systems is limited to authorised personnel under confidentiality obligations.
- No system is perfectly secure; in the unlikely event of a data breach affecting you, we will notify you as required by law.
5. Data retention
- Your Firm Data is kept for as long as your account is active.
- After cancellation or termination, we retain your data for 90 days so you can export it, then delete it.
- Billing records (invoices, transaction references) are retained as required by tax law, after which they are deleted or anonymised.
6. Your rights
Under India's Digital Personal Data Protection Act, 2023, and as a matter of our practice, you may:
- Access a copy of the personal information we hold about you.
- Ask us to correct inaccurate information.
- Ask us to delete your personal information (subject to legal retention duties, e.g. tax records).
- Withdraw consent for optional communications at any time.
- Export your Firm Data from within the app at any time.
To exercise any of these rights, write to contact@archiflow.in. We will respond within a reasonable time and no later than as required by law.
7. Cookies and similar technologies
Our website uses only essential, functional cookies/local storage (for example, to remember that you dismissed a notice, and for security). We do not use advertising or cross-site tracking cookies. The ArchiFlow app uses login session tokens necessary for the service to function.
8. Children's privacy
ArchiFlow is a business tool and is not directed at children under 18. We do not knowingly collect children's personal information.
9. International transfers
Your data is primarily processed in India. Some infrastructure and support tooling may process data outside India; where that happens, we rely on the provider's contractual safeguards and applicable law.
10. Changes to this policy
We may update this policy from time to time. Material changes will be notified by email or in-app at least 15 days before they take effect. The "Last updated" date above always shows the current version.
11. Grievance contact
For any privacy question, request or complaint, contact our Grievance Officer at contact@archiflow.in. We aim to acknowledge within 2 working days and resolve within 30 days, in line with applicable law.