Privacy Policy | Sanchalio

This Privacy Policy explains how Sanchalio collects, uses, shares and protects information when you use Sanchalio's website (sanchalio.com) and the software products operated by Sanchalio, including Brokiva (brokiva.sanchalio.com). We follow the principles of India's Digital Personal Data Protection Act, 2023: we collect only what we need, use it for clear purposes, and keep it secure.

1. Information we collect

Information you give us

Account details: name, email address, phone number, business name and password (stored only in encrypted, hashed form).
Profile details such as a photo or business logo, if you upload them.
Business data you add to our products, such as properties, leads, customer contacts, deals, rental records and documents.
Messages you send us through our contact form, support chat or email.

Information collected automatically

Technical data such as IP address, browser and device type, and the date and time of access, used for security and to fix problems.
Essential cookies that keep you signed in and protect forms from misuse.

Information from partners

Payment status from Razorpay, such as whether a payment succeeded, the payment method type and transaction reference. We do not receive or store your full card or bank details.
If you connect WhatsApp, the details Meta provides to connect your business number and deliver messages.

2. How we use information

To create and run your account and provide the features you use.
To process subscriptions, trials and payments, and to send invoices and payment notices.
To send service messages, such as account security alerts, welcome emails and replies to your enquiries.
To keep the Services secure, prevent fraud and abuse, and fix errors.
To understand how features are used so we can improve them.
To meet legal, tax and accounting obligations.

We do not sell your personal data, and we do not use your business data for advertising.

3. Data you hold about your own customers

When you add information about your own clients or leads to our products, you decide what is collected and why, and we process it on your behalf only to provide the Services. You are responsible for having a lawful reason to collect that information and for informing your customers where required.

4. Who we share information with

We share information only with service providers who help us run the Services, and only what they need:

Secure cloud hosting and database providers that store the Services.
Razorpay, to process payments and recurring billing.
Meta (WhatsApp Business Platform), if you choose to connect WhatsApp.
Email delivery providers, to send account and service emails.
Google reCAPTCHA, to protect our forms from automated abuse.

We may also disclose information if required by law, court order or a government authority, or to protect the rights and safety of our users and Sanchalio.

5. How we protect information

All connections to our Services use HTTPS encryption.
Passwords are stored only as secure hashes and are never visible to our team.
Each business workspace is kept separate, and team members only see the records they are permitted to see.
Uploaded files are stored privately and are not publicly listed.
Access to production systems is restricted to authorised personnel.

No system is completely risk-free, but we take reasonable technical and organisational steps to protect your information. If a data breach affects you, we will inform you and the relevant authorities as required by law.

6. How long we keep information

We keep account and business data for as long as your account is active. When an account is closed or deletion is requested, we delete it as described on our Data Deletion page. Payment and invoice records are kept for the period required by Indian tax laws. Contact form messages are kept for as long as needed to respond and follow up.

7. Your rights

You can ask us to:

tell you what personal information we hold about you;
correct information that is inaccurate or incomplete;
delete your information, subject to legal retention requirements;
withdraw consent for optional uses, such as marketing emails.

Most account details can be updated directly in your account settings. For other requests, contact us at the address below. We may need to verify your identity before acting on a request.

8. Cookies

We use only essential cookies needed to sign you in, keep your session secure and protect forms from automated submissions. If reCAPTCHA is enabled, Google may set its own cookies for bot detection under Google's privacy policy. We do not use advertising cookies.

9. Children

Our Services are meant for businesses and are not directed at anyone under 18. We do not knowingly collect personal data from children.

10. Changes to this policy

We may update this policy when our Services or the law change. The date at the top shows the latest version. We will notify account holders of significant changes by email or in the product.

11. Contact us

If you have any questions about this policy, write to us at hello@sanchalio.com. We aim to reply within two working days.