Privacy Policy

This Privacy Policy explains how Deepak Soni, sole proprietor trading as Manage Mobiles ("Manage Mobiles", "we", "us", or "our") collects, uses, stores, shares and protects information in connection with the Manage Mobiles mobile application, website and related services (collectively, the "Service").

This Policy should be read together with our Terms & Conditions.

1. Who This Policy Applies To

Manage Mobiles is a business-management tool used by mobile phone shop owners and their staff ("Shop Users"). Shop Users, in turn, enter information about their own customers, suppliers, vendors and staff ("Third-Party Data") into the Service.

This Policy explains:

• What information we collect directly from Shop Users;
• What information Shop Users enter about other individuals, and our role in processing it;
• How that information is used, stored, shared and protected.

2. Information We Collect

2.1 Information you provide directly

• Account details: name, shop name, email/username, mobile number, password, business address, GSTIN.
• Staff accounts: staff name, email, password, and the specific permissions granted to that staff login.
• Subscription and billing details: selected plan, payment status, billing history.
• Support communications: anything you send us via email, phone or in-app support requests.

2.2 Business data you enter about others (Third-Party Data)

Depending on which features you use, this may include:

• Customer details: name, address, mobile number, Aadhaar number, customer photograph, Aadhaar photograph.
• Device/transaction records: IMEI numbers, device photographs, purchase/sale prices, condition notes.
• Vendor/supplier details: name, address, mobile number, email, GSTIN.
• Invoices, purchase orders, payment and ledger records.
• Staff records for your own employees.

You are the party responsible for having lawful grounds and, where required, consent to collect and store this Third-Party Data - see Section 9 of our Terms & Conditions. We process it on your instructions, as your service provider, to operate the Service.

2.3 Information collected automatically

• Device information: device model, OS version, unique device/FCM token (for push notifications).
• Usage data: screens viewed, feature usage, app version, timestamps (via Firebase Analytics).
• Location: shop address and, where provided, shop latitude/longitude (used for storefront/discovery features).
• Log data: IP address, request timestamps, error logs, for security and troubleshooting.

2.4 Payment information

Payments are processed by Razorpay. We do not collect or store your full card number, CVV or bank account credentials - Razorpay handles this directly and is itself PCI-DSS compliant. We store only transaction references, amounts, status and timestamps.

If you connect your own Razorpay account to accept payments from your customers through the app ("Razorpay Embedded Payments"), we store an encrypted access/refresh token issued by Razorpay so the app can create orders on your behalf. This token is encrypted at rest and is not visible to us in plain text.

3. How We Use Information

We use the information described above to:

• Provide, operate and maintain the Service (inventory, billing, reporting, staff access control);
• Process payments and manage subscriptions;
• Send transactional communications (receipts, subscription reminders, security alerts, support responses);
• Send push notifications relevant to your account/business;
• Detect, investigate and prevent fraud, abuse or security incidents;
• Improve the Service through aggregated/anonymised usage analytics;
• Comply with legal, tax and regulatory obligations;
• Enable optional features you choose to use (e.g. shop-to-shop transfers, online storefront listings, referrals).

We do not sell personal information to third parties.

4. How We Share Information

We share information only as necessary to operate the Service:

• Payment processing: Razorpay (payment collection, and, for shops using Embedded Payments, delegated order creation on the shop's own connected account).
• Cloud infrastructure & hosting: our application servers and database.
• Image/file storage: Cloudinary and/or ImageKit (for photographs uploaded through the app - device photos, customer photos, product images, bill/invoice scans).
• Push notifications & analytics: Firebase (Google) - Cloud Messaging and Analytics; Google Analytics on this website.
• Email delivery: our transactional email provider, for receipts, confirmations and support correspondence.
• Other shops (only where you use shop-to-shop / storefront features): information you explicitly choose to share as part of a transfer request, dealer interaction, or public storefront listing.
• Legal/regulatory: where required by law, court order, or lawful government request.
• Business transfers: in connection with a merger, acquisition or sale of assets, subject to this Policy continuing to apply to your data.

Some of these providers (e.g. Firebase, Cloudinary/ImageKit, Google Analytics) may process or store data on servers located outside India. By using the Service, you acknowledge this cross-border processing, which we take reasonable steps to ensure is subject to appropriate safeguards.

5. Data Retention

We retain personal data for as long as your account is active and as needed to provide the Service. After account termination, we may retain certain data where necessary for legal, tax, accounting, fraud-prevention or dispute-resolution purposes, consistent with Section 24 of our Terms & Conditions. Otherwise, data is deleted or anonymised in accordance with our data-retention practices.

6. Data Security

We use industry-standard measures to protect information, including:

• Encryption of sensitive credentials (e.g. connected payment account tokens) at rest;
• Access controls limiting staff-level data access based on shop-owner-configured permissions;
• Secure transmission (HTTPS/TLS) for data in transit.

No system can be guaranteed 100% secure. You are responsible for keeping your own login credentials and devices secure.

7. Your Rights

Subject to applicable law (including India's Digital Personal Data Protection Act, 2023), you may have the right to:

• Access the personal data we hold about you;
• Correct inaccurate or incomplete data;
• Withdraw consent, where processing is based on consent;
• Request erasure of your data, subject to our legitimate retention needs described in Section 5;
• Lodge a grievance with our Grievance Officer (Section 10) or with the competent regulatory authority.

To exercise these rights, contact us using the details in Section 10. We may need to verify your identity before acting on a request.

If you are a Shop User's customer, supplier or staff member and want to exercise rights over data entered about you, please contact the shop that entered your information directly - they control that data. We will assist the Shop User in responding to such requests where technically required.

8. Children's Data

The Service is intended for business use by adults operating or employed by a mobile phone retail business. We do not knowingly collect personal data from individuals under 18 as account holders. Where Shop Users record transactions involving customers, no age verification is performed by the Service itself.

9. Cookies

Our website uses Google Analytics (via Google's gtag.js) to understand site usage, which sets cookies in your browser. You can control or disable cookies through your browser settings; doing so may affect some site functionality.

10. Grievance Officer / Contact

For privacy questions, complaints or to exercise your rights under applicable data protection law, contact:

Grievance Officer: Deepak Soni
Manage Mobiles
Operated by: Deepak Soni, sole proprietor trading as Manage Mobiles
Email: info@managemobiles.com
Phone: +91 8178525207
Address: 59-SP, Sector 40, Gurugram, Haryana - 122001, India

We will acknowledge and address grievances within the timeframe required by applicable law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the application, website, or other reasonable means. The "Last Updated" date at the top of this page reflects the most recent revision.

12. Governing Law

This Policy is governed by the laws of India, consistent with our Terms & Conditions.