Privacy Policy

This Privacy Policy explains how Mishora CRM (“Mishora”, “we”, “us”) handles personal data on mishoracrm.com (the “Website”) and in connection with the Mishora CRM software service (the “Service”). We are based at Mishora CRM, Girnar Khushboo Plaza, Gunjan Road, Phase 2, GIDC, Vapi, Gujarat.

It covers two different situations. Please read the one that applies to you:

• Website visitors and people who contact us. We decide why and how your personal data is used, so we are the “Data Fiduciary” under the Digital Personal Data Protection Act, 2023 (the “DPDP Act”). Sections 2 to 8 and 10 to 13 apply to you.
• Customers of the Service and the people in their records. A business that uses Mishora puts its own leads, customers and staff data into it. For that data the business is the Data Fiduciary and we process it on the business’s behalf. Section 9 explains this.

This policy is governed by the laws of India, including the Information Technology Act, 2000 and the rules under it, and the DPDP Act and its rules as they come into force.

Details you give us:

• your name and work email address, which we need to answer a demo or contact request;
• your phone number, company name, team size and message, where the form asks for them; and
• anything you send us by email, phone or WhatsApp, including our conversation with you.

Technical data: like any website, our servers and our hosting provider record standard information when you visit, such as your IP address, browser and device type, the pages requested and the time. We use it to deliver the Website, keep it secure and investigate abuse.

What we do not collect: the Website does not currently use analytics, advertising or tracking cookies, and does not run advertising pixels. Fonts and images are served from our own site. If we ever add an analytics tool, we will update this policy first and ask for your consent where the law requires it.

Mishora is a business product and this Website is not directed at children. We do not knowingly collect personal data from anyone under 18.

We use the details you submit only for what you would expect when you contact a software company:

• to reply to your enquiry, and to arrange, run and follow up a demo;
• to send you a quote, pricing or other information you asked for;
• to keep a record of our conversation so you do not have to repeat yourself;
• to keep the Website secure and prevent spam and abuse; and
• to meet our legal obligations.

We do not sell your personal data and we do not use it to build advertising profiles. We will send you marketing emails or messages only if you ask for them, and each one will tell you how to opt out.

Where the DPDP Act requires your consent, it is given when you submit a form after seeing this notice. You can withdraw it at any time (see section 8).

When you submit a form, the details are sent to our business email inbox. Only the people at Mishora who need them to respond can see them.

We use a small number of service providers to run the Website and our communications, mainly our website hosting provider and our email service provider. They handle personal data only to provide those services to us. If you gave us a phone number, or contacted us on WhatsApp, we may reply the same way.

We may disclose personal data where the law requires it, in response to a valid request from a court or authority, or to protect our rights or the safety of others. If Mishora is ever merged with or acquired by another business, we will make sure your personal data stays protected and we will tell you.

We do not sell or rent personal data to anyone.

Our hosting and email providers may store and process data on servers outside India. We choose providers that follow recognised security practices, and we transfer personal data only where the DPDP Act and its rules allow it.

We keep enquiry details for as long as we need them to deal with your request, and for up to 24 months after our last contact with you, so we can follow up sensibly and answer questions about earlier conversations. If you become a customer, your details are then covered by our customer records and the Terms of Service.

You can ask us to delete your details sooner at any time. We may keep limited information for longer where the law requires it, for example tax and accounting records.

The Website is served over HTTPS, so what you send us is encrypted in transit. Access to the inbox that receives enquiries is protected by passwords and limited to the people who need it. No method of transmission or storage is completely secure, so we cannot promise absolute security. If a personal data breach affects you, we will tell you and the authorities as the law requires.

Under the DPDP Act you have rights over your personal data. You can ask us to:

• give you a summary of the personal data we hold about you and how we use it;
• correct or update anything that is inaccurate or incomplete;
• erase your personal data once it is no longer needed for the purpose it was collected;
• stop relying on your consent: you may withdraw it at any time, and that does not affect what we did before you withdrew it; and
• use our grievance process in section 13. You may also nominate another person to exercise these rights for you if you die or become unable to.

To use any of these rights, email mishoracrm@gmail.com or write to us at the address in section 13 and tell us what you would like us to do. We may need to confirm who you are first. We will respond within a reasonable time, and in any case within the time the law allows. If you are not satisfied with our response, you can complain to the Data Protection Board of India.

If you use Mishora for your business, you decide what personal data goes into it, such as your leads, customers, quotes, invoices, work orders, tickets and staff records. For that data:

• you are the Data Fiduciary and we are your processor. We process it only to provide the Service to you, and on your instructions;
• we do not use it, or the data of the people in it, for our own marketing or advertising, and we do not sell it;
• each customer’s data is kept separate from other customers’ data;
• you are responsible for having a lawful basis, and any notice or consent needed, to collect and use your own contacts’ data, including for WhatsApp and other messaging; and
• if someone whose data is in your account contacts us about it, we will pass their request to you.

Further detail, including security, sub-processors and deletion when you leave, is in the Terms of Service and any agreement we sign with you.

Mishora connects to services you choose to use, including WhatsApp, Instagram and Meta Ads, IndiaMART, JustDial, TradeIndia, Sulekha and Razorpay. When you connect one, data flows between Mishora and that service as you have set it up, and the service’s own privacy policy applies to its side. Payments made through Razorpay are processed by Razorpay under its own terms and privacy policy.

This Website may link to other sites. We are not responsible for how they handle personal data.

The Website uses only what it needs to work and does not set analytics or advertising cookies at the moment. If that changes, we will update this page and, where the law requires, ask for your consent first.

We update this policy when our practices or the law change. The date at the top shows the latest version. If a change significantly affects how we use your personal data, we will tell you by email or with a notice on the Website before it takes effect.

For questions about this policy, to use your rights, or to complain about how we have handled your personal data, contact our Grievance Officer:

• Grievance Officer, Mishora CRM
• Email: mishoracrm@gmail.com
• Phone: +91 81286 62287
• Address: Mishora CRM, Girnar Khushboo Plaza, Gunjan Road, Phase 2, GIDC, Vapi, Gujarat

We acknowledge complaints promptly and resolve them within the time the law allows.