Privacy Policy

1. Who We Are

MaithilTech Pvt Ltd is a company registered in Maharashtra, India (CIN: U72900MH2024PTC000000). We operate MaithilOps, a Cloud ERP and Sales Operations platform for Indian manufacturing SMEs, accessible at app.maithilops.com.

Data Fiduciary: MaithilTech Pvt Ltd
Registered Address: [Registered Address], Maharashtra, India
Email: privacy@maithilops.com
Grievance Officer: [Name], reachable at grievance@maithilops.com

2. Data We Collect

2.1 Account & Identity Data

• Full name, email address, and mobile number of account holders and users
• Company name, GSTIN, CIN, PAN, and MSME number (for GST compliance features)
• Designation and role within your organisation
• Profile photograph (optional)

2.2 Business Operations Data

When you use MaithilOps for your business, we store data you enter on behalf of your organisation, including:

• Lead and customer records (names, phone numbers, addresses, GST details)
• Quotations, sales orders, invoices, and payment records
• Inventory, purchase orders, and production data
• Employee/operator names and work assignments

2.3 Usage & Technical Data

• IP address, browser type, device information, and operating system
• Pages visited, features used, timestamps, and session duration
• Error logs and crash reports to improve stability

2.4 Communication Data

• Emails and messages sent to our support team
• Demo request form submissions (name, phone, company, state)
• Feedback, survey responses, and testimonials (only with your consent)

3. How We Use Your Data

• Provide the service: To operate your MaithilOps account, process transactions, and deliver features you use
• GST compliance: To generate accurate CGST/SGST/IGST calculations and invoices that meet Indian tax requirements
• Customer support: To respond to your queries, troubleshoot issues, and provide onboarding assistance
• Product improvement: To understand how features are used and improve the platform
• Security: To detect fraud, abuse, or unauthorised access to accounts
• Communication: To send transactional emails (invoices, alerts, password resets) and, with your consent, product updates and announcements
• Legal obligations: To comply with applicable Indian laws, tax authorities, and regulatory requirements

We do not sell your personal data to third parties. We do not use your business data for advertising profiling.

4. Data Storage & Residency

We use reputable India-based cloud infrastructure providers with SOC 2 Type II certifications. Your data is encrypted at rest (AES-256) and in transit (TLS 1.2+).

Retention: We retain your data for as long as your account is active, plus a period of 7 years thereafter for legal and tax compliance purposes. You may request deletion subject to regulatory retention obligations.

5. Sharing Your Data

We share your data only in the following circumstances:

• Service providers: Trusted vendors who assist in delivering MaithilOps (e.g. cloud hosting, email delivery, SMS gateway) — bound by confidentiality agreements
• Integrations you authorise: When you connect IndiaMART, TradeIndia, WhatsApp Business, or other platforms, data flows according to that integration's scope
• Legal requirements: When required by Indian courts, government authorities, or law enforcement under applicable law
• Business transfers: In the event of a merger, acquisition, or asset sale — you will be notified in advance

We do not share your data with advertisers, data brokers, or marketing platforms.

6. Your Rights Under DPDP Act 2023

As a Data Principal under India's DPDP Act 2023, you have the following rights:

• Right to access: Request a summary of personal data we hold about you
• Right to correction: Request correction of inaccurate or incomplete personal data
• Right to erasure: Request deletion of your personal data, subject to legal retention requirements
• Right to grievance redressal: Lodge a complaint with our Grievance Officer within 48 business hours of response
• Right to nominate: Nominate a person to exercise rights on your behalf in case of incapacity

To exercise any right, email privacy@maithilops.com with your account email and the specific request. We will respond within 30 days.

7. Cookies & Tracking

We use essential cookies to maintain your login session and preferences. We also use limited analytics cookies (first-party) to understand platform usage patterns — no third-party advertising cookies are used.

• Session cookies: Required for authentication — expire when you close the browser
• Preference cookies: Remember your settings (dark mode, language) — expire after 1 year
• Analytics cookies: Aggregate, anonymised usage data — expire after 90 days

You can disable non-essential cookies from your browser settings at any time.

8. Security

We implement industry-standard technical and organisational security measures:

• AES-256 encryption for data at rest; TLS 1.2+ for data in transit
• Role-based access controls — employees access only the data they need
• Regular security audits and penetration testing
• Two-factor authentication (2FA) available for all accounts
• Incident response plan with 72-hour breach notification

Despite these measures, no system is 100% secure. In the event of a data breach affecting your data, we will notify you promptly as required by law.

9. Children's Privacy

MaithilOps is a business software platform intended for adults (18 years and above) operating commercial entities. We do not knowingly collect personal data from children under 18. If you believe a minor has provided data to us, contact privacy@maithilops.com and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Display an in-app notification to all active users at least 15 days before changes take effect
• Send an email notification to account administrators for significant changes

Continued use of MaithilOps after the effective date constitutes acceptance of the revised policy.

11. Contact Us

For any privacy-related queries, requests, or complaints:

• Email: privacy@maithilops.com
• Grievance Officer: grievance@maithilops.com (response within 48 business hours)
• Postal Address: MaithilTech Pvt Ltd, [Address], Maharashtra – 400001

You may also approach the Data Protection Board of India if your grievance is not resolved to your satisfaction.