Who we are
AUZslab (“AUZslab”) is the data fiduciary for the personal data described here, under India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000. Address: to be added. GSTIN: to be added. When a business uses our apps to store its own customers' and employees' details, that business decides what is stored and we process it on its behalf.
What we collect
- Account details: your name, email address, phone number and the business name you give us. If you sign in with Google we receive your name, email address and Google account identifier (never your Google password).
- Business data you enter: products and prices, orders and bills, customers, stock, expenses, staff and payroll records (such as attendance, salary and bank details a business chooses to store), accounting documents, bookings and uploaded files such as logos and photos.
- Staff logins: a username and a PIN, stored only as a one-way hash. We never store a PIN or password in readable form.
- Payments: the amount, date, order number and the UPI reference or payment id. Card, UPI and bank details are handled by our payment partner; we do not see or store card numbers.
- Device and usage data: IP address, browser and device type, sign-in times and the technical details of errors, used for security and to fix problems.
- Location (optional): if a business turns on location-checked clock-in in Payroll, the staff member's device location is read when they clock in or out and stored with that attendance record. We do not track location at other times.
- Cookies and local storage: a sign-in token and small settings (like your language or theme) on your device.
- Website analytics: on our public marketing website only (not inside the POS, Payroll, Accounting or other business apps), Google Analytics (GA4) collects pages viewed, approximate location and device/browser type, and how you arrived at the site, to help us understand and improve it. We do not use advertising or retargeting trackers, and we don't sell this data.
Why we use it
- To create and run your account and the apps you pay for.
- To take payments, keep billing records and send receipts and renewal reminders.
- To keep the service secure, stop misuse and fix errors.
- To answer your questions and give support.
- To meet legal duties (tax, accounting, responding to lawful requests).
We use your data with your consent and for these purposes only. We do not sell it, rent it, or use it for advertising or to train AI models.
Who we share it with
Only the service providers we need to run AUZslab, each limited to its job:
- Server and backup providers that host the apps and keep encrypted copies of the database.
- Google for sign-in, and Google Analytics for website traffic (marketing website visits only).
- Razorpay (and your bank or UPI app) for payments.
- An email provider (our email provider) to send sign-in, receipt and reminder emails.
- An error-monitoring provider (an error-monitoring provider) that receives technical error details.
- Authorities where the law requires it.
Some providers may store data outside India. We choose providers with reasonable security and use them only for the purposes above.
How long we keep it
- While your account is active.
- If an account ends or you delete it, we delete or anonymise your data within 30 days, except records we must keep by law, such as billing and tax records (kept for as long as the law requires, commonly up to 8 years).
- Encrypted backups are replaced on a regular cycle, so deleted data leaves backups within a few weeks after that.
How we protect it
- All traffic uses HTTPS. Passwords and PINs are stored as one-way hashes.
- Each business's data is separated from every other business's, and staff only see what their role allows.
- Sign-ins can be revoked per device, and we keep an audit trail of important actions.
- We monitor the service, keep nightly backups, and test that backups can be restored.
No system is perfectly secure. If a breach affects your data we will tell you and the authorities as the law requires.
Your rights
You can ask us to show you the personal data we hold about you, correct it, delete it, or stop processing it where the law allows. You can withdraw consent and nominate someone to exercise these rights for you. You can do most of this yourself, signed in, under Account, Privacy & my data: download your personal data, change your email-updates choice, and send us a request. To delete your account yourself, see Delete your account. For anything else, email helloauzslab@gmail.com and we will reply within 30 days. If you are not satisfied you may complain to the Data Protection Board of India.
Children
AUZslab is for businesses and is not meant for anyone under 18. We do not knowingly collect children's data.
Grievance officer
Name: Ashish Kumar Meena. Email: helloauzslab@gmail.com. Phone: shown on our contact page. Write to us with any complaint about how your data is handled and we will acknowledge it within 48 hours and resolve it within 30 days.
Changes to this policy
We may update this policy. For changes that matter we will notify you by email or in the app before they apply. The date at the top shows the latest version.