Privacy Policy

Mulberry Sales is operated by Sahaya George Ashinth A, of 32A/12, Salate Matha Street, Thalavaipuram, Nagercoil, Kanyakumari District, Tamil Nadu 629004. For anything in this policy, contact sgashinth@gmail.com or use the details on our Contact page.

There are two relationships to keep apart. For the account of the business that subscribes, we decide why and how data is used. For the operational data a subscriber puts into their workspace — their shops, customers and staff — the subscriber is responsible for that data and we process it on their instructions, as their service provider.

Account and billing data. Business name, contact person, email address, phone number, GST details where you supply them, plan and subscription history, and payment records (transaction ID, amount, status and the last few digits of the instrument returned by the payment gateway). We do not receive or store full card numbers, CVV, UPI PINs or net-banking passwords.

Workspace users. Names, roles, login identifiers, phone or email used for OTP, and a hashed password. Passwords are stored only as irreversible hashes.

Operational data you enter. Products, price lists, shops and their contact details and locations, invoices, payments and collections, stock movements, purchases, damages, expenses and notes.

Field and device data. Where your plan enables it and your staff are told: attendance clock-in/clock-out times, GPS location of salesmen and vehicles during working hours, shop location pins, photographs attached to bills or delivery proof, and delivery signatures. Location is captured for route and delivery verification, not for tracking people outside working hours.

Technical data. IP address, device and browser type, app version, timestamps, and error and audit logs — used to keep the service secure, diagnose faults and investigate misuse.

• To provide the service you subscribed to, and to keep your workspace's data separate from every other workspace.
• To authenticate users, including sending one-time passwords, and to keep accounts secure.
• To take payment, issue tax invoices, apply plan limits and manage renewals, grace periods and cancellations.
• To provide support you ask for, and to send service messages such as trial-expiry, payment-failure and product-change notices.
• To detect, investigate and prevent fraud, abuse and security incidents.
• To meet legal, tax and accounting obligations.

We do not sell personal data, and we do not use your operational data to train machine-learning models or to advertise to your customers.

We share data only with service providers who help us run Mulberry Sales, under contract and only for that purpose:

• Cloud hosting and database — Amazon Web Services, in the Asia Pacific (Hyderabad, India) region.
• Payments — Razorpay, to process subscription payments and issue receipts. Their handling of your payment details is governed by their own privacy policy.
• Email and messaging providers, to deliver one-time passwords and service notifications.
• Maps and geocoding services, where a shop location or route is displayed.
• Google Drive, but only if you switch on the optional backup feature — the app is granted access solely to the backup files it creates in your own Drive, and to nothing else in it.

We may also disclose data where the law requires it, or to establish or defend a legal claim. If the business is ever transferred, subscriber data may pass to the acquirer under the same commitments, and you will be told.

Workspace data is hosted on Amazon Web Services infrastructure in India (Asia Pacific – Hyderabad). Some of our service providers may process limited data outside India; where they do, we rely on their contractual safeguards.

The web console uses cookies that are strictly necessary to sign you in and keep you signed in — a session cookie, a refresh-token cookie and, for support sessions, a short-lived impersonation cookie. There are no advertising cookies and no third-party tracking pixels. Blocking these cookies will stop you being able to sign in.

• Workspace and operational data: for as long as the subscription is active.
• After cancellation: retained for 60 days so you can reactivate or export, then deleted.
• Invoices and payment records: retained as long as tax and accounting law requires, which is longer than the retention period above.
• Security, audit and error logs: retained for a limited period for investigation, then rotated out.

Traffic is encrypted in transit with TLS. Passwords are hashed, refresh tokens are stored hashed, access is scoped by role and by workspace, and payment credentials are handled entirely by the payment gateway. No system is perfectly secure, so we also keep audit logs and will notify affected customers of a personal-data breach as the law requires.

You can ask us to give you a copy of your personal data, correct it, delete it, or stop a particular use of it. Workspace owners can export most data directly from the console at any time. If you are an employee of a subscriber, please contact your employer first — they control that workspace — and we will help them respond.

Send requests to sgashinth@gmail.com. We will respond within 30 days. We may need to verify your identity before acting.

Mulberry Sales is a business product and is not directed at, or intended for use by, anyone under 18.

We will post any update on this page and change the "last updated" date. Where a change materially affects how we use personal data, we will notify workspace owners.