Data Protection

Your data is yours

Customers, suppliers, employees, items, invoices and everything else your company records in Prabandh belong to your company. For the personal data in it, your company decides why and how it is used, so under India's Digital Personal Data Protection Act, 2023 your company is the Data Fiduciary and Manhotra Consulting is your Data Processor.

As your processor we:

• process your data only to provide Prabandh and the support you ask for, on your instructions and under your agreement with us;
• never sell your data or use it for our own marketing or for anyone else's;
• keep it confidential and limit our own people's access to what a support task needs;
• help you answer requests from the people whose data you hold, such as a request to correct or erase their data;
• tell you without undue delay if we become aware of a breach that affects your data, with what we know, so that you can meet your own duty to inform the Data Protection Board and the people affected;
• return or delete your data when your agreement ends, as set out below.

A data processing agreement setting out these duties in contract form is available on request.

Safeguards built into the product

Each company is its own

Every query is scoped to the company of the signed-in user, taken from the login itself and never from what a browser sends. One customer cannot read another customer's data.

Access by role and by row

You decide who may create, read, change or delete each kind of record, starting from preset roles or your own. Row-level scope lets a person see only their own customers, units or locations.

A permanent record of change

Who changed what, and when, is recorded. Accounting entries are reversed, never deleted, and closed periods are locked.

Personal data handled with care

Identity numbers are masked on screen, consent is recorded where the product collects it, and access to personal data is logged.

Credentials kept secret

Keys for your payment, marketplace, shipping and messaging accounts are stored encrypted, are never shown again after you save them, and are kept out of logs.

Money goes straight to you

Payments collected through Prabandh go directly to your own merchant account. Prabandh records them; it never holds your money.

Customer data stays out of development

Our development and testing use demonstration companies only. Customer data is not copied to developers' machines.

Services that may process your data

Some features send data to outside services, and only when you switch them on with your own accounts:

• e-mail, SMS and WhatsApp providers, to send the notifications you configure;
• payment providers (Razorpay, Cashfree, Paytm), using your own merchant accounts;
• marketplaces and delivery services (such as Amazon, Flipkart, Myntra, Meesho and Shiprocket), using your own seller and shipping accounts;
• government systems you file with, such as the GST and e-invoice portals, using your own credentials.

The hosting arrangements, backup and recovery targets and any other providers that apply to your deployment are confirmed with you in writing before you go live.

Where your data is kept, and for how long

Where your data is hosted and how it is backed up are agreed for your deployment and stated in your agreement. Your data is kept while your subscription runs. When it ends you can export it, and we then delete it within the period your agreement sets, except where the law requires us to keep something for longer.

Your obligations as Data Fiduciary

Because you decide what personal data goes into Prabandh, you remain responsible for having a lawful basis or valid consent for it, for giving notice to the people concerned, and for answering their requests. The product gives you the tools; the choices are yours. We say Prabandh is built for India's data-protection law, not that it makes you compliant: compliance depends on how you use it, and is for you and your counsel to confirm.

Questions and grievances

Ankush Manhotra, Grievance Officer, Manhotra Consulting
E-mail: contact@prabandh.in

For security questions about a specific deployment, see Security or ask in your inquiry.