Privacy policy

UdyogDesk is a business-to-business product. Your employer — the company whose workspace you sign in to — decides what information is entered into the service and is the controller of that information. We process it on their behalf as their service provider.

If you are a customer, patient or vendor of a business that uses UdyogDesk and you want your records corrected or removed, please contact that business directly. They control those records; we cannot change them without their instruction.

Account information

Your name, work email address, assigned role and the workspace you belong to. Passwords are stored only as a one-way bcrypt hash — we cannot read them.

Business records you enter

The operational data your company records in the service: customers and vendors (including names, addresses, phone numbers, email addresses and GSTIN), sales orders, GST tax invoices, payments, cash-register entries, inventory and production records, dispatch and delivery documents, and e-way bill data.

Health information (clinic workspaces only)

Where a company has enabled the healthcare pack, the service stores patient records, prescriptions and clinical documents that the clinic enters. This is sensitive personal data. Clinical document files are encrypted at rest. This information is never shown on any public payment link and is never written to our application logs.

Technical information

Server logs recording request times, error details and the IP address of requests, used to keep the service running, to rate-limit the public payment links against abuse, and to maintain an audit trail of who changed what. Your browser stores a session token so you stay signed in; the mobile app stores that token in the device’s encrypted secure storage.

The current version of the Android app does not request or collect location data. It declares no location permissions.

A future version may offer live delivery tracking, where a driver’s phone shares its position with their dispatch office while a delivery run is in progress. If we release that feature, it will be explained in the app and will start only after the driver explicitly agrees. It would apply only to the driver role, never to office staff, and would never be used for advertising.

We never store card numbers, UPI identifiers or bank account numbers. When a customer pays an invoice through a payment link, the payment is handled entirely by the payment gateway. We keep only the gateway’s transaction reference and whether the payment succeeded, so the invoice can be marked paid.

To provide the service: to sign you in, show your workspace’s records, produce GST invoices and other documents, and keep an accurate ledger. To keep the service secure and reliable: to investigate errors, prevent abuse and maintain audit records. To meet legal obligations: tax and accounting records must be retained under Indian law.

We do not sell your information. We do not use it for advertising, and we do not profile you for marketing.

We share information only where it is needed to run the service:

• Hosting. The service runs on servers we operate, located in a commercial data centre.
• Government compliance providers. Where your company has enabled e-way bills or e-invoicing, the relevant invoice and transport details are sent through a GST Suvidha Provider to the government portal, as the law requires.
• Payment gateway. Payment details are handled by the gateway, not by us.
• Email delivery. Where your company configures it, documents you choose to send are delivered through an email provider.

We may also disclose information where we are legally required to, such as a valid order from a court or tax authority.

Business records are kept for as long as your company’s workspace is active, and afterwards for as long as Indian tax and company law requires accounting records to be preserved. Server logs are kept for a short operational period. Financial records cannot be deleted on request while a retention obligation applies — corrections are made by posting an offsetting entry, so the audit trail stays intact.

All traffic runs over encrypted HTTPS connections. Passwords are stored as bcrypt hashes. Public payment links are protected by an unguessable token that is stored encrypted, is scoped to a single customer, is rate-limited, and allows nothing except viewing that invoice and paying it. Access inside the application is controlled by role, so staff see only what their role permits. Clinical documents are encrypted at rest.

No system is perfectly secure. If a breach affects your information, we will notify the affected company and the relevant authority as required by law.

Under India’s Digital Personal Data Protection Act, 2023, you may ask for access to your personal data, ask for it to be corrected, withdraw a consent you have given, and complain about how it is handled.

Because your employer controls your workspace data, please raise these requests with them first. If you cannot, write to us at info@sevendmobility.com and we will work with them to respond.

Staff accounts are created and removed by the owner or administrator of your workspace; ask them to remove your access. To request deletion of an entire workspace and the personal data in it, email info@sevendmobility.com from the address registered as the workspace owner. We will confirm the request, delete the workspace and its personal data, and retain only what tax and accounting law requires us to keep.

UdyogDesk is workplace software and is not directed at children. We do not knowingly create accounts for anyone under 18.

If we change this policy we will update the date at the top of this page, and for significant changes we will tell workspace owners directly.

SevenD Mobility — operator of UdyogDesk.
Email: info@sevendmobility.com

Back to udyogdesk.com