This Privacy Policy explains how Purposix ("we", "us") collects, uses, shares and protects personal information when you use our websites and software products.
1. Information We Collect
- Account data — name, business name, email, phone, country, role.
- Customer data — records you upload into the product (students, customers, invoices, attendance, etc.).
- Payment data — billing address and partial card metadata returned by our payment processors. We do not store full card numbers, CVVs or UPI PINs.
- Usage data — pages visited, features used, device, IP address, cookies.
2. How We Use Information
- To provide and operate the Services and process subscriptions.
- To authenticate users and prevent fraud.
- To send transactional emails (receipts, security alerts, product updates).
- To improve features and customer support.
- To comply with legal and tax obligations.
3. Payment Processing & Data Sharing
When you make a payment, the following PCI-DSS-compliant processors may receive your billing data, card data and transaction metadata directly from your browser:
- Stripe — international card payments. See the Stripe Privacy Policy.
- Razorpay — payments in India. See the Razorpay Privacy Policy.
- Cashfree — payments in India and recurring mandates. See the Cashfree Privacy Policy.
These processors act as independent data controllers for the payment data they receive. We only retain the transaction reference, amount, currency, status and a tokenised reference required for refunds, accounting and chargeback handling.
4. Other Third-Party Processors
- Cloud hosting (ISO-certified data centres in India).
- Transactional email (e.g. Resend / Amazon SES).
- WhatsApp Business API providers (where you enable WhatsApp automations).
- Product analytics (privacy-friendly, IP-truncated).
5. Data Retention
Account and customer data are retained for as long as your subscription is active and for up to 12 months after cancellation, after which they are permanently deleted unless required by law (e.g. tax invoices retained for 8 years under Indian law).
6. Security
We use TLS 1.2+ in transit, AES-256 at rest, role-based access controls, audit logs and automated daily backups. Despite reasonable measures, no system is 100% secure.
7. Your Rights
Subject to applicable law (including India's DPDP Act 2023 and the EU GDPR), you may request access, correction, deletion, portability or restriction of your personal data. Email privacy@purposix.com.
8. Cookies
We use essential cookies for authentication and minimal analytics cookies to understand product usage. You can control cookies through your browser settings.
9. International Transfers
Data is primarily stored in India. Some processors (e.g. Stripe) may process data in the US/EU under standard contractual clauses or equivalent safeguards.
10. Children
The Services are not directed at children under 16. We do not knowingly collect personal data from children.
11. Changes
We will notify you in-app or by email at least 14 days before material changes to this Policy.
12. Grievance Officer
In accordance with the Information Technology Act 2000 and DPDP Act 2023, our Grievance Officer can be reached at grievance@purposix.com.