RoutiSync.com Privacy Policy
This policy explains how RoutiSync.com, Hyderabad, India ("RoutiSync.com", "we") handles personal data when businesses and their staff use RoutiSync.com. It is written to meet the requirements of India's Digital Personal Data Protection Act, 2023 and the rules under it, the EU and UK General Data Protection Regulation (GDPR) and other privacy laws that may apply to you.
1. Our role
- Account and business contacts (the merchant administrator who signs up, and people who contact us): we decide how this data is used, so we are the data fiduciary / controller.
- Data a merchant enters about its employees, products and labels: the merchant decides why it is processed, so the merchant is the data fiduciary / controller and we act as its data processor. Employees should contact their employer first about this data; we will help the employer respond.
2. Personal data we collect
You give us
- Signup details: contact person's name, business name, trade licence or registration number, country, city, business email address, mobile number, and your password (stored only in our authentication directory in hashed form, never in our application database).
- Employee details entered by a merchant: name, email address, mobile number, employee code, outlet.
- Product and label data you enter, which may include personal data if you choose to put it on labels.
- Messages you send to support.
- Your acceptance of our Terms: the date, time and version.
Collected automatically
- Security and audit records: login attempts (with IP address and time), account changes, email-verification events, and print-job records (who printed what, when, at which outlet and printer).
- Technical data: browser and device information, IP address, error and performance logs.
- Print Agent data: computer name, agent version, printer names and IP addresses on your network, and printer status.
- Cookies: only cookies needed to sign you in and keep your session secure. We do not use advertising or cross-site tracking cookies.
3. Why we use it and our legal basis
| Purpose | Legal basis |
|---|---|
| Create and verify accounts, sign users in, provide the Service and support | Performance of our contract with the business; consent given at signup (India); legitimate interests (GDPR) |
| Send verification emails, security alerts and essential service messages | Contract; legitimate interests |
| Keep the Service secure, prevent fraud and misuse, keep audit and print records | Legitimate interests; legal obligations |
| Comply with law, respond to lawful requests, establish or defend legal claims | Legal obligation; legitimate interests |
| Improve the Service using anonymised, aggregated usage information | Legitimate interests |
We do not sell personal data, use it for advertising, or make decisions with legal effects about people solely by automated means.
4. Who we share it with
- Service providers who process data for us under contract: Amazon Web Services (hosting, database, file storage, email delivery through Amazon SES); Zoho (our support mailbox); and label-rendering services used to produce label previews (label content you preview may be sent to them). We may add or replace providers; an up-to-date list is available on request.
- Your own organisation: merchant administrators can see the employee accounts, audit records and print records of their business.
- Authorities and others where required by law, or to protect the rights, safety and security of our users, the public or us.
- A buyer or successor in a merger, acquisition or sale of assets, subject to this policy.
5. International transfers
We host in India and may use providers in other countries. Where data leaves its country of origin we rely on safeguards required by applicable law, such as the European Commission's Standard Contractual Clauses for transfers from the EU/EEA and the UK equivalent, and we do not transfer data to any country to which transfers are restricted by the Government of India.
6. How long we keep it
- Account and Customer Data: while the account is open, and up to 30 days after closure to allow export, then deleted, except as below.
- Unverified signups: may be deleted after 30 days without verification.
- Email verification links: expire after 24 hours; records of them are kept for up to 12 months for security.
- Security, audit and print records: up to 3 years, or longer where required by law or needed for a dispute or investigation.
- Invoices and tax records: as long as tax law requires.
7. Security
We use encryption in transit (HTTPS/TLS), access controls, hashed passwords and verification tokens, signed internal service calls, least-privilege access, logging and monitoring. No method of transmission or storage is completely secure. If a personal data breach occurs we will notify affected businesses, individuals and regulators as the law requires.
8. Your rights
Depending on where you live, you may have the right to: access your personal data; correct or update it; have it erased; withdraw consent (this does not affect earlier processing); object to or restrict processing; receive your data in a portable format; nominate another person to exercise your rights in case of death or incapacity (India); and complain to a data protection authority. Employees of a merchant should send requests about data their employer entered to that employer; we will assist it.
To exercise your rights, email support@routisync.com. We will respond within the time required by law (generally within 30 days). We may need to verify your identity first.
9. Grievance Officer (India) and contact
Grievance Officer: RoutiSync.com Support Team, Website: https://www.routisync.com, India · support@routisync.com. We acknowledge and address grievances promptly and within the timeframes prescribed by applicable law. Please email us with the subject line “Grievance” so that your concern can be routed to the appropriate team.
10. Children
RoutiSync.com is a business service and is not intended for anyone under 18. We do not knowingly collect children's personal data. If you believe we have, contact us and we will delete it.
11. Changes
We may update this policy. The version date at the top shows when it last changed. We will tell account holders about material changes by email or in the Service.