Privacy Policy

1. Who we are

MitraDesk (mitradesk.com) is an online platform from Jaipur, Rajasthan, India. People use it to apply for services with their documents and pay securely, and shops and service providers use it to offer their services, keep their own ledger (Len Den), keep customer files in folders, use PDF tools and talk to each other (Let's Talk). In this policy "MitraDesk", "we" and "us" mean the MitraDesk service and the people who run it.

This policy explains what information we collect, why, and what you can do about it. By using MitraDesk you agree to this policy and to our Terms of Service.

2. What we collect

Information you give us

• Account: your name, username, email address and password. The password is stored only as a one-way hash; nobody at MitraDesk can see it.
• Shop or provider details: if you offer services: your business details, the ID of your work (for example a CSC or e-Mitra ID), your profile photo, and your shop location if you choose to share it.
• Orders: the forms you fill in and the documents you attach when you apply for a service, and the proof a provider uploads when the work is done.
• Your own records: entries you add in Len Den, and the files and folders you keep in Data sheet.
• Messages and calls: Let's Talk messages are end-to-end encrypted on your device. We store and pass on only the encrypted form and basic details needed to deliver them (who to, when).

Information collected automatically

• Device and usage: IP address, browser and device type, pages used, and error logs, to keep the service secure and working.
• Notifications: if you allow notifications, a push token for your browser or phone.
• Location: only when you choose to share it (for example to show your shop to nearby customers). You can turn this off in your browser or phone at any time.
• Cookies: a sign-in cookie to keep you logged in, and small settings (such as language) stored in your browser. We do not use advertising or tracking cookies.

Payments

Payments are handled by our payment partner PayU. Your card, UPI or bank details go directly to PayU; MitraDesk does not see or store them. We keep the payment reference, amount and status.

3. How we use your information

• To create and run your account, and to sign you in securely.
• To send your order to the provider you choose, track it, and refund you when the rules say so.
• To store your files, ledger entries and folders, and keep them behind the PINs you set.
• To deliver messages, calls and notifications you asked for.
• To prevent fraud and misuse, fix problems and improve MitraDesk.
• To follow the law and answer lawful requests from authorities.

We do not sell, rent or trade your personal information, and we do not use it to show you advertisements.

4. Google Drive (Google user data)

You can choose to connect your Google account so that the files you keep in MitraDesk are saved in your own Google Drive. This is optional; MitraDesk works without it.

• What we ask for: only the Google permission drive.file. With it MitraDesk can see and change only the files that MitraDesk itself creates in your Drive (kept in a folder named "MitraDesk"). We cannot see, open or list any other file in your Drive. We also read your Google email address to show which account is connected.
• How we use it: only to save the files you put in MitraDesk into your Drive, to open or download them when you ask, and to delete them when you delete them in MitraDesk.
• Encryption: files are encrypted before they are saved to your Drive, so Google and anyone else who opens them in Drive sees only unreadable data.
• What we keep: a Google access token, stored encrypted on our server, so MitraDesk can do the above for you; and the Drive file IDs of the files it saved. We do not keep copies of the file contents on our servers beyond what is needed to upload or download them.
• Disconnecting: you can disconnect Google Drive at any time in MitraDesk, or from your Google Account at myaccount.google.com/permissions. We then delete the token. Files already in your Drive stay yours.

MitraDesk's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, do not use it to train AI or machine-learning models, and no person at MitraDesk reads it unless you ask us to (for example for support), it is needed for security, or the law requires it.

5. Who we share it with

• Providers you order from: the form details and documents needed to do the work you asked for.
• Service partners who run parts of MitraDesk for us, only for that purpose: hosting (Amazon Web Services), payments (PayU), email delivery and push notifications.
• Google, only if you connect Google Drive, to save your encrypted files in your Drive.
• Authorities, when Indian law requires it or to protect the safety and rights of users and MitraDesk.

6. How we protect it

• Everything between you and MitraDesk travels over HTTPS.
• Passwords and PINs are stored only as one-way hashes.
• Let's Talk is end-to-end encrypted; Len Den and Data sheet folders can be locked with your own PIN.
• Access to servers is limited and protected.

No system is perfectly secure. If we learn of a breach that affects you, we will tell you and the authorities as the law requires.

7. How long we keep it

We keep your information while your account is active. When you delete something (a file, an entry, a folder), it is removed from our servers. When you ask us to delete your account, we delete your personal information within 30 days, except records the law requires us to keep (for example payment records), which we keep only as long as required.

8. Your choices and rights

• See and correct your details in Settings.
• Download or delete your files, entries and folders at any time.
• Turn off notifications and location sharing in your browser or phone.
• Disconnect Google Drive at any time.
• Ask us for a copy of your information, or to delete your account, by writing to us (see Contact).

9. Children

MitraDesk is for people aged 18 and over. We do not knowingly collect information from children. If you believe a child has given us information, write to us and we will delete it.

10. Changes to this policy

We may update this policy. The date at the top shows the latest version. If a change is important, we will tell you in MitraDesk or by email before it takes effect.

11. Contact and grievances

For any question, request or complaint about your information, write to us at connect.hacky@gmail.com. We will reply within 15 days, and sooner for urgent matters.

MitraDesk, Jaipur, Rajasthan, India.