Privacy Policy

1. Information we collect

We collect information you give us directly and information generated as you use the service.

Information you provide

• Account details: your name and email address when you create an account to enable cloud sync.
• Business data: company name, GSTIN, address, and other details you enter into the application for billing and filing purposes.
• Billing records: invoice data, party details, item details, and financial figures you enter. This data belongs to you.
• Support communications: messages you send us by email, phone, or WhatsApp.

Information collected automatically

• Log data: server access logs including IP address, request path, and timestamp. These are retained for security and kept for a limited period.
• Session data: a secure, httpOnly session cookie used only for authentication. No tracking cookies are set.

2. How we use your information

• To provide, operate, and maintain the mnssoftware service.
• To sync your billing and accounting data across devices when cloud sync is enabled.
• To process your subscription payment through Razorpay.
• To respond to your support queries.
• To send transactional messages (e.g., payment confirmation, password reset). We do not send marketing emails without your consent.
• To detect and prevent abuse, fraud, or security incidents.

We do not sell your data. We do not use your financial or business data to train AI models or for advertising.

3. Data storage and security

Account data and synced billing records are stored on servers located in Singapore (closest available region to India). Data in transit is encrypted using TLS. Data at rest is stored in a managed PostgreSQL database.

We use industry-standard practices including access controls, encrypted backups, and audit logging. No security system is perfect, and we cannot guarantee absolute security. If a breach occurs that affects your data, we will notify you as required by applicable law.

4. Sharing of information

We do not sell or rent your personal information to third parties. We share data only in the following circumstances:

• Payment processor: Razorpay receives your payment details to process your subscription. mnssoftware does not store full card numbers. Razorpay's privacy policy applies to data they process.
• Legal requirements: if required by law, court order, or government authority in India, we may disclose information as legally compelled.
• Business transfer: in the event of a merger or acquisition, data may be transferred to the successor entity, who will be bound by this policy.

5. Local (offline) data

mnssoftware is offline-first. When you use the app without an account, or when your device is offline, all data is stored locally on your device using browser storage. We have no access to this data and cannot recover it if lost.

Cloud sync is an optional feature available to paid subscribers. Enabling sync sends a copy of your data to our servers. Disabling sync stops future uploads; previously synced data may be requested for deletion (see Your Rights below).

6. Payment data

Subscription payments are processed by Razorpay, a PCI-DSS compliant payment gateway. We receive confirmation of payment and your subscription status. We do not receive or store your card number, CVV, or bank credentials.

Razorpay may process your payment data subject to their own privacy policy at razorpay.com/privacy.

7. Cookies and sessions

We set one cookie: a secure, httpOnly session cookie used to keep you signed in. It does not track you across other websites and is deleted when your session ends or you sign out.

We do not use analytics cookies, advertising cookies, or third-party tracking scripts on this domain.

8. Your rights

You have the right to:

• Access a copy of your personal data we hold.
• Correct inaccurate data in your account.
• Delete your account and associated synced data. Local data stored only on your device is not held by us and can be deleted by clearing browser storage.
• Export your billing data from within the app.
• Withdraw consent for cloud sync by disabling it in account settings.

To exercise any of these rights, contact us at mnssoftware1@gmail.com. We will respond within 30 days.

9. Data retention

We retain your account and synced data for as long as your account is active. If you delete your account, we will delete or anonymise your data within 30 days, except where we are required to retain records by law (e.g., GST transaction logs for the period prescribed by Indian tax law).

Server access logs are retained for a maximum of 90 days and then deleted automatically.

10. Changes to this policy

We may update this Privacy Policy from time to time. The date at the top of this page shows when it was last revised. If we make material changes, we will notify you by email (if you have an account) or by a notice in the app. Continued use of the service after a change constitutes acceptance of the revised policy.