Privacy Policy

1. What we collect

We collect only what we need to provide our services:

• Account details: your name, email address and password (stored only as a one-way hash), and optionally your phone number.
• Business details you add: company name, address, website, tax ID and GST number.
• Documents you upload for your filings, and the notes you write when requesting a service.
• Service, invoice and payment-reference records created while we work for you.
• Messages you send us, and the one-time codes we email to verify your sign-in.
• Technical data: your IP address, app activity and error information in our server logs, used for security and troubleshooting.

2. What we do not collect

The app does not use advertising or analytics trackers, does not track you across other apps or websites, and does not access your location, contacts, camera, microphone or photo library. It only opens the files you choose to upload.

3. Why we use your data

• To create and secure your account and confirm it is you signing in.
• To review and deliver the services you request, and to prepare and send invoices.
• To contact you about your account, services and payments (for example sign-in codes, approval and invoice emails).
• To keep MIDRUS secure, prevent misuse and fix problems.
• To meet our legal, tax and accounting obligations.

4. Legal basis

We process your data with your consent (given when you create an account) and for the legitimate uses the law permits, such as performing our services to you and complying with legal obligations. You can withdraw consent at any time by deleting your account; this does not affect processing already done.

5. Who can see your data

We do not sell your personal data. It is available to:

• MIDRUS team members who need it to handle your account and filings.
• Service providers that help us run MIDRUS, such as our cloud hosting provider and our email delivery provider. They may process data only on our instructions.
• Government authorities, courts or regulators where the law requires us to disclose it, and professional advisers under a duty of confidentiality.

6. Payments

The app shows our UPI details so you can pay us. The payment is made in your UPI app and processed by your bank and the UPI network. MIDRUS never receives or stores your bank account, card or UPI PIN details.

7. How we protect your data

• Data travels between the app and our servers over encrypted (HTTPS) connections.
• Passwords are stored only as one-way hashes. Your sign-in session is kept in your device's secure storage and is removed when you sign out.
• Document downloads use short-lived, signed links rather than public addresses.
• Access to client data is limited to authorised staff.
• No system is perfectly secure. If a breach affects your personal data we will notify you and the authorities as the law requires.

8. How long we keep it

We keep your account data while your account is active. If you delete your account, we erase your profile, sign-in details, uploaded documents and sign-in codes. Invoices and tax records we have already issued are retained, without a login attached, for the period required by Indian tax and company law (currently up to eight years for many records). Backups are overwritten on their normal schedule.

9. Your rights

You can, at any time:

• see and correct your details in Profile;
• delete your account and personal data yourself in Profile → Delete account;
• ask us for a copy of the personal data we hold about you, or to correct or erase it, by emailing info@midrusindia.com;
• withdraw your consent, and nominate another person to exercise your rights if you cannot;
• make a complaint about how your data is handled. Write to our grievance contact below; if you are not satisfied you may approach the Data Protection Board of India.

10. Children

MIDRUS is for adults running or managing a business or their own tax affairs. It is not intended for anyone under 18, and we do not knowingly collect children's data. If you believe a child has given us data, contact us and we will delete it.

11. Changes to this policy

We may update this policy. The current version and its date are always shown here, and we will tell you about material changes in the app or by email.

12. Contact and grievance redressal

Grievance contact, MIDRUS ASSOCIATE PRIVATE LIMITED Plot No-601/7036, AT/PO-Saranga, PS-Parjang, Dist-Dhenkanal-759146, Odisha, India Email: info@midrusindia.com We aim to acknowledge your request promptly and to resolve it within 30 days.