Privacy Policy

1. Introduction

Techie DMS ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our enterprise document management platform and related services (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Service.

2. Information We Collect

Account Information

When you register, we collect: name, email address, company name, phone number, and password (hashed). For super admin accounts, additional verification data may be collected.

Documents and Content

Files you upload, folder structures, metadata (file names, types, sizes), version history, comments, and sharing configurations. This content belongs to you and your organization.

Usage Data

IP addresses, browser type, device information, pages visited, actions taken (uploads, downloads, shares), timestamps, and session durations.

Payment Information

Payment details are processed by Razorpay and are not stored on our servers. We retain only transaction IDs, amounts, and billing addresses for accounting purposes.

3. How We Use Your Information

• Provide, maintain, and improve the Service
• Process transactions and send billing communications
• Authenticate users and prevent unauthorized access
• Send security alerts and service updates
• Respond to support requests and customer inquiries
• Analyze usage patterns to improve performance and UX
• Comply with legal obligations and enforce our terms
• Detect, prevent, and address technical issues and fraud

4. Data Sharing

We do not sell your personal information. We may share data with:

• Service Providers: MongoDB Atlas (database hosting), AWS S3 (file storage), Razorpay (payment processing), and email service providers — all under strict data processing agreements.
• Legal Requirements: When required by law, subpoena, or government request.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with prior notice.
• With Your Consent: When you explicitly authorize sharing.

5. Data Security

We implement enterprise-grade security measures:

• Encryption: AES-256 at rest, TLS 1.3 in transit
• Database Isolation: Database-per-tenant architecture ensures complete data separation between companies
• Authentication: JWT-based authentication with secure token management
• Access Control: Role-based access control (RBAC) with department-level permissions
• Audit Logging: Immutable audit trails for all data access and modifications
• Compliance: SOC2 Type II compliant infrastructure
• Regular Audits: Quarterly security assessments and penetration testing

6. Cookies and Tracking

We use minimal cookies:

• Essential Cookies: Required for authentication, session management, and security. Cannot be disabled.
• Analytics Cookies: Help us understand how users interact with the Service. Can be disabled in settings.
• We do not use advertising cookies or third-party tracking pixels.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. When you delete your account, we permanently remove all personal data within 30 days, except where retention is required by law. Document content may be retained in backup systems for up to 90 days for disaster recovery purposes.

8. Your Rights

Under applicable data protection laws (including India's DPDP Act 2023 and GDPR where applicable), you have the right to:

• Access your personal data
• Correct inaccurate or incomplete data
• Delete your personal data
• Export your data in a portable format
• Object to certain processing activities
• Restrict how your data is processed
• Withdraw consent at any time

To exercise these rights, contact us at privacy@techie-dms.com.

9. International Data Transfers

Your data is stored in data centers located in India (AWS Mumbai Region). If you access the Service from outside India, your data may be transferred to and processed in India. We ensure appropriate safeguards are in place for such transfers.

10. Children's Privacy

The Service is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it immediately.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or in-app notification at least 30 days before they take effect. Continued use of the Service after changes constitute acceptance.

12. Contact Us

For privacy-related questions or requests: