Founders EyeDraft to complete before launch: replace every part in [square brackets] and have it reviewed by a lawyer or your CA.
Privacy policy
Last updated: [date of launch]
Founders Eye is run by [legal name of your business], [registered address] ("we"). This policy explains what we collect when you use Founders Eye, why, and the choices you have. It is written to meet India's Digital Personal Data Protection Act, 2023.
What we collect
- Account details: the owner's name, email and password (stored only as a one-way hash), the business name, city and business code.
- Team members: the name, job title, login and password hash of each person an owner adds, and the access the owner gives them.
- Business records you enter or import: warehouses, items, stock, customers, orders, dispatches, transporters, invoices, bills, bank balances you type in, GST due dates, sales leads and targets, and an activity log of who changed what.
- Technical data: sign-in times, IP address and browser details kept in our providers' logs for security.
We do not connect to your bank or to Tally or Busy. Files you upload are read in your browser; only the entries you choose to save are sent to us.
Why we use it
- To run the service: sign you in, show each person the departments they are allowed to see, and keep your records.
- To keep it secure and fix problems.
- To email the owner about their account, such as confirming an email address or resetting a password.
We do not sell your data or use your business records for advertising.
Who processes it
- Supabase stores the database and handles sign-in. Your data is stored in its Mumbai (India) region.
- [Vercel or Netlify] serves the website pages.
- [Email provider, if you set one up] sends account emails.
Who can see your business records
Only people in your business, and only the departments the owner opens for them. The owner sees everything. Our staff access records only to provide support you ask for or where the law requires it.
How long we keep it
As long as your account is open. When an owner asks us to close the account, we delete the business and its records within [30] days, except what the law requires us to keep. Backups roll off within [7] days after that.
Your rights
You can ask to see, correct or delete your personal data, or withdraw consent, by writing to [contact email]. A team member's data is controlled by their business owner, so we may pass such requests to the owner. If you are not satisfied with our answer you can complain to the Data Protection Board of India.
Grievance officer
[Name], [contact email], [phone]. We reply within [7] days.
Changes
If we change this policy we will update the date above and tell owners by email when the change matters.