Privacy Policy

1. Who is responsible

The data fiduciary (the one who decides how your data is used) is Profila. Contact: support@profila.in.

2. What we collect and why

When you sign up and use your account

• Name, email, mobile number and password — to create your account, sign you in, confirm your number by SMS and contact you about your account. The password is stored only in scrambled (hashed) form.
• Company profile — company name, address, GSTIN, logo and terms, printed on your quotations.
• Your work — quotes, revisions, clients, rates, drawings and settings you save, so the software can keep and show them to you.
• Usage records — counts of quotes and calculations, used for the trial limits and to keep the service fair and running well.

To prevent misuse of the free trial and for security

• IP address and browser type of your signed-in sessions, and the IP address (internet connection) used for a sign-up or SMS code. We allow one free trial per mobile number and per internet connection, and limit repeated SMS requests.
• A record that a mobile number or connection has already had a free trial. This is kept even if the account is closed, only to stop repeat trials.

When you pay

• Payment records — plan, amount, dates, the payment and order reference numbers, and the name, email, phone, company and address on your invoice.
• Card, UPI and bank details are never seen or stored by us. They are entered on and processed by our payment partner, Cashfree Payments, which is PCI-DSS compliant and regulated by the Reserve Bank of India.

Your clients’ details

The client names, phone numbers and addresses you put in your quotes are your business data. For them you are the data fiduciary and we process them only on your behalf, to run the service for you. Please make sure you may share them with us.

3. Legal basis and consent

We process your personal data with your consent, which you give when you create an account and accept this policy, and for the legitimate uses the law allows: giving you the service you asked for, meeting legal duties such as keeping tax and accounting records, and preventing fraud. We collect only what is needed for these purposes and do not use your data for anything else.

We do not sell your data, rent it, or use it for advertising.

4. Who we share it with

We use a few trusted service providers to run Profila. They receive only what they need and must protect it:

• Cashfree Payments (India) — takes and processes payments.
• MSG91 (India) — sends the SMS code that confirms your mobile number.
• Resend (United States) — sends account emails such as password resets and invoices.
• Vercel — hosts the website; our servers run in its Singapore region.
• Neon — the database where your account and work are stored, in Singapore.

This means your data is stored and processed outside India, in Singapore (and, for emails, the United States). The law allows this, and we will follow any restriction the Government of India notifies. We may also share data when the law requires it, for example with a court or government authority, or to protect our users or the service from fraud.

5. Cookies and browser storage

We use only the cookies needed to keep you signed in (a secure session cookie). The app also saves small preferences, such as the display theme, in your browser. We do not use analytics, advertising or tracking cookies, and no third-party trackers run on the site. Turning off cookies will stop you from signing in.

6. How long we keep it

• Your account and work are kept while your account is open, including after a plan ends, so you can come back to them.
• When you ask us to delete your account, we delete your account and work within 30 days, except what the law requires us to keep.
• Invoices and payment records are kept for at least 8 years, as Indian tax and accounting law requires.
• The record that a mobile number or internet connection has had a free trial is kept to prevent repeat trials.
• Security records such as session details and SMS requests are kept only for as long as needed for security.
• Backups held by our providers are removed on their normal schedule.

7. Your rights

Under the Digital Personal Data Protection Act, 2023 you can:

• Access — ask for a summary of the personal data we hold about you and how we use it.
• Correct and update — change your details in your account, or ask us to.
• Erase — ask us to delete your personal data, subject to the records we must keep by law.
• Withdraw consent — at any time. This does not affect what was done before, and since we need your data to run your account, it means closing the account.
• Nominate — name another person to exercise these rights for you in case of death or incapacity.
• Complain — to our Grievance Officer (below), and then, if you are not satisfied, to the Data Protection Board of India.

To use any of these rights, email support@profila.in from your account’s email address. We may ask you to confirm who you are.

8. Security

We protect your data with reasonable security practices: all traffic uses encryption (HTTPS), passwords are hashed, each account can reach only its own data, access to the systems is limited and protected, and our hosting and database providers keep data encrypted at rest. No system is perfectly secure; if a breach affects your personal data, we will tell you and the authorities as the law requires.

9. Children

Profila is a business tool for adults. It is not meant for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us data, write to us and we will delete it.

10. Changes to this policy

We may update this policy. The date at the top shows the latest version. For a significant change we will tell signed-up users by email or in the app.

11. Grievance Officer

For any question, request or complaint about your personal data, contact our Grievance Officer:

See also our Terms of Use.