Privacy Policy

This Privacy Policy explains how Shaikh's Infotech (sole proprietorship; Udyam Registration No. UDYAM-MH-26-1149491) ("LenDenManager", "we", "us"), registered at 20, Ganesh Court, Pudumjee Park, 1021/1 New Nana Peth, Pune, Maharashtra 411002, India, collects, uses, stores and protects personal data when you use the LenDenManager web app (lendenmanager.com), mobile apps and API (together, the "Service"). It is published under the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000 and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules").

1. Our role

For your account data (name, email, phone, login and billing details) we are the Data Fiduciary. For the business records you enter about your own customers, suppliers and staff (khata entries, invoices, phone numbers etc.) you are responsible for having a lawful basis to record them; we process that data only to provide the Service to you and on your instructions.

2. Data we collect

• Account data: name, email address, phone number (optional), password (stored only as a secure hash by our authentication provider), language preference.
• Business data you enter: business name and profile, customers, suppliers, transactions/khata entries, sales and invoices, expenses, stock/products, capital, personal expenses, team members you invite, and files you export.
• Billing data: plan, billing period, payment status and invoice records. Card/UPI/bank details are collected and processed by our payment gateway (e.g. Razorpay); we never see or store full card numbers.
• AI assistant data: questions you type into the AI assistant and the limited business context needed to answer them.
• Technical data: IP address, device/browser type, app version, error logs and basic usage events, used for security, abuse prevention and reliability.
• Support data: messages you send to support tickets or to help@lendenmanager.com.

We do not intentionally collect "sensitive personal data" as defined in the SPDI Rules other than passwords (hashed) and payment-related information handled by our payment gateway.

3. Why we use it (purposes)

• To create and secure your account and provide the ledger, billing, stock, reporting, PDF export and AI features.
• To sync data across your devices, including entries queued offline on your device and uploaded when you are back online.
• To process subscriptions, trials, renewals and refunds and to issue invoices or receipts.
• To send service emails (verification, password reset, invoices, important changes). We do not send marketing without your consent.
• To provide support, prevent fraud and abuse, and comply with law.

No advertising. No sale of data. We do not show ads, we do not sell or rent personal data, and we do not use your business data to train AI models.

4. Consent and notice

By creating an account you give consent, after reading this notice, to the processing described here for the stated purposes. You may withdraw consent at any time by deleting your account or writing to us (section 9); withdrawal does not affect processing already done, and some data may be kept where the law requires (section 7). Where we rely on a legitimate use under Section 7 of the DPDP Act (for example, legal compliance), we say so.

5. Our promise on staff access

LenDenManager staff and administrators cannot view your business data. Our admin console shows only your email address, business name, plan and basic counts (for example, the number of records), which we need to run accounts and billing. Access to business data is restricted by row-level security in our database to you and the team members you invite. Data exports you request are delivered to the account owner only.

6. Where data is stored and who processes it

AI assistant: when you use the AI assistant, the text of your question and the business context needed to answer it are sent to Google's Gemini API for processing. Do not include information you do not want shared with Google. The AI feature is optional.

Any transfer outside India is made only to countries not restricted by the Central Government under Section 16 of the DPDP Act, and under contracts requiring appropriate security.

7. Retention

We keep your data while your account is active. When you delete your account (Settings → Security → Delete account), deletion is scheduled with a 30-day grace period during which you can cancel; after it, an automated job erases your account and business data from active systems; backups roll off within a further 30 days. We retain billing and invoice records for the period required by tax and accounting law (generally 8 years under applicable tax law) and security logs for up to 180 days as directed under CERT-In rules.

8. Security

We use encryption in transit (TLS) and at rest, row-level security isolating each business, hashed passwords, least-privilege staff access and audit logging, aligned to reasonable security practices under the SPDI Rules (IS/ISO/IEC 27001 principles). No system is perfectly secure; keep your password private and enable available account protections.

Breach notification: if a personal data breach occurs we will notify the Data Protection Board of India and affected users without undue delay as required by the DPDP Act and its Rules, and report cyber incidents to CERT-In within the time required (currently 6 hours).

9. Your rights (Data Principal rights)

• Access: get a summary of the personal data we process and the processing activities.
• Correction and completion: update your profile in Settings, or ask us to correct data.
• Erasure: delete your account and data yourself in the app (see section 10).
• Data export: export your records (e.g. PDF/CSV) from the app, or request a full export.
• Withdraw consent at any time.
• Grievance redressal through our Grievance Officer (section 12), and thereafter the right to approach the Data Protection Board of India.
• Nominate another person to exercise your rights in the event of your death or incapacity.

Send requests to help@lendenmanager.com from your registered email address. We respond within 30 days (or sooner where the law requires).

10. Account deletion

You can delete your account yourself in the app: Settings → Security → Delete account (web and mobile), confirming by typing DELETE. You can also email help@lendenmanager.com from your registered email. When you confirm, you are signed out and a 30-day grace period starts; sign in again within 30 days and choose "Cancel deletion" to keep your account. After the grace period an automated daily job permanently erases your account, every business you own and all their records (customers, suppliers, transactions, sales, stock, expenses). Team members lose access to those businesses, so export anything you need first. We keep only what the law requires (e.g. invoices, receipts and payment records) and a pseudonymous audit entry recording that the erasure happened.

11. Children

The Service is meant for businesses and is not directed at anyone under 18. We do not knowingly process children's personal data; if you believe we have, contact us and we will delete it.

12. Cookies and local storage notice

We use only strictly necessary cookies and browser/device storage:

• Authentication session tokens to keep you signed in;
• Preferences such as language and theme;
• An offline queue on your device that holds new entries until they sync;
• Security cookies set by Cloudflare to protect against bots and attacks.

We do not use advertising, cross-site tracking or third-party analytics cookies. Because these items are essential to run the Service, they cannot be switched off without breaking sign-in; you can clear them in your browser at any time (which will sign you out and discard unsynced offline entries). If we ever add non-essential cookies we will ask for your consent first.

13. Grievance Officer

In accordance with the IT Act, 2000, the SPDI Rules and the DPDP Act:

Name: Dr. Mohammed Saad Shaikh
Organisation: Shaikh's Infotech
Address: 20, Ganesh Court, Pudumjee Park, 1021/1 New Nana Peth, Pune, Maharashtra 411002, India
Email: help@lendenmanager.com

We acknowledge grievances within 24 hours and resolve them within 15 days (or the period required by applicable law). If you are not satisfied, you may approach the Data Protection Board of India.

14. Changes

We will post updates here and notify you by email or in-app for material changes before they take effect.