InvoiceNET® ERP - Privacy Statement

Version 1.

This statement describes what information C-LAND INFOSOFT PVT. LTD. ("C-Land", "we") holds about the firms that license InvoiceNET® ERP and the people who use it, what we do with it, and how it is protected - on our cloud and on installations you host yourselves.

1. What we hold about your firm and your users

To license and support the software we hold:

your firm's name, address, GSTIN and contact details, and the licence serial with its module entitlements;
the names, login names and e-mail addresses of registered users, so that sign-ins, password-reset links and service notices work;
support correspondence and, for cloud installations, operational logs (sign-in times, network addresses, errors) kept for security and diagnosis;
billing records for the subscription.

2. Your business data - cloud and on-premises

Your business data (accounts, inventory, payroll, customers, suppliers and the rest) is YOURS, and where it lives depends on your deployment:

CLOUD: your databases are stored on servers we manage, as custodian on your behalf. We access their content only to provide, support and secure the service. We do not use it for any purpose of our own, do not sell it, and do not read it except as a support case or the operation of the service requires.
ON-PREMISES: your databases are on your own servers and we hold none of your business data. A backup you send us to reproduce a fault is used only for that case, kept only while the case is open, and then deleted.

You are the controller of the personal data your firm processes through the software (your customers', suppliers' and employees' details); we act on your instructions in respect of it.

3. How we use what we hold

We use the information in section 1 to issue and manage your licence, to provide support, to send service messages (a password-reset link a user asked for, notice of maintenance, notice of a change to these documents), to bill the subscription, and to meet our legal obligations.

We do not sell your information, and we do not use it for third-party advertising.
Marketing from us, if any, is separate and only with the consent recorded against your customer record; you can withdraw it at any time.

4. How it is protected

Passwords are stored encrypted and are never sent in readable form. Cloud databases sit behind firewalls, are reachable only by the application and by named C-Land staff who need access, and their transport is encrypted (HTTPS/TLS). Access to licensing and billing records is limited to staff who need it. We will tell you without undue delay if we become aware of a breach of security affecting data we hold about you or for you.

On installations you host, the protection of the servers and databases is under your administration - section 4 of the Terms of Use describes the division.

5. Backups and how long things are kept

Cloud databases are backed up as described in the Terms of Use (section 5), and backups are stored separately from production. When a cloud subscription ends we keep your databases for 60 days, supply a copy on request, and then delete them from production and, in the ordinary cycle, from backups.

Licensing and billing records are kept for as long as tax and company law requires. Support records are kept for as long as they are useful. Operational logs are kept for 30 days.

6. Who we share with

We share information only with those needed to deliver the service, and only what they need:

our hosting provider, for cloud installations (Microsoft Azure, South India region);
e-mail and SMS providers, to carry the messages the software sends;
payment providers, where your subscription is collected through one;
professional advisers and authorities, where the law requires.

Services YOU connect to the software (your own SMTP server, SMS gateway, payment gateway, e-invoice portal) receive data under your configuration and their own terms - that sharing is yours, not ours.

7. Where data is stored

Cloud databases and their backups are stored in India, in the South India region of Microsoft Azure. Licensing and billing records are stored in India. We will tell you before moving your data to a different country.

8. Your choices and contact

Ask us at support@cland.co.in to see or correct the details we hold about your firm or your users, to receive a copy of your cloud data, or to have data deleted where the law allows. Questions and complaints about this statement go to C-LAND INFOSOFT PVT. LTD., Sulthanpet, Palakkad, Kerala-678001, support@cland.co.in, +91 99461 08614. About C-Land: https://www.cland.co.in