1Who we are

This Privacy Policy explains how SaleShade (“we”, “us”, or “our”) collects, uses, shares, and protects personal data when you:

1. visit or interact with our website at www.saleshade.in (the “Website”); and
2. use the SaleShade application and related services (the “Service”).

Company details

By using the Website or the Service, you agree to the practices described here. If you do not agree, please do not use the Website or the Service.

2The personal data we collect

a. Information you give us directly

• Demo / enquiry requests: when you submit a form on our website, we collect your name and phone number, and optionally your email address, business name, city, and any message you send.
• Account information: if you register for SaleShade, we collect the details needed to create and manage your account — such as your name, business name, contact details, and login credentials.
• Communications: when you contact us by WhatsApp, email, or phone, we keep a record of that correspondence.
• Billing details: billing name, GSTIN, and payment information handled through our payment provider.

b. Information we collect automatically

When you use the Website or Service, we may collect technical and usage information such as your IP address, device and browser type, pages viewed, and dates/times of access, using cookies and similar technologies (see Section 7).

Tools used:

• Google Analytics

c. Business data you put into the Service

When you use SaleShade, you and your team enter and store business data — for example product/SKU records, price lists, catalogues, customer records, showroom visitor details, leads, estimates, and product images. This may include personal data about your own customers and contacts. For that data, you (the showroom/business) are the Data Fiduciary and SaleShade acts as a Data Processor, processing it on your behalf and on your instructions (see Section 9).

3How we use personal data

We use personal data to:

• respond to your demo requests and enquiries;
• provide, operate, maintain, and improve the Service;
• set up and administer your account, and deliver implementation, on-site setup, training, and support;
• communicate with you about your account, service updates, and related matters;
• process your payments for our services and manage renewals;
• keep the Website and Service secure and prevent misuse or fraud; and
• comply with applicable laws and respond to lawful requests.

4The basis on which we process personal data

We process personal data based on your consent, and/or for the legitimate/permitted uses allowed under the DPDP Act (for example, where you have voluntarily provided your data for a specified purpose). Where we rely on consent, you may withdraw it at any time (see Section 10); withdrawal will not affect processing already carried out.

5How we share personal data

We do not sell your personal data. We share it only as follows:

• Service providers / sub-processors: trusted third parties who help us run the business — for example hosting/cloud providers and email, messaging and SMS delivery services.
• Within our team: with staff who need it to provide the Service.
• Legal and safety reasons: where required by law, regulation, legal process, or government request, or to protect our rights, our users, or the public.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this policy.

6How long we keep personal data

We keep personal data only as long as necessary for the purposes in this policy, or as required by law. When data is no longer needed, we delete or anonymise it.

Account type	Data retention period
Active accounts	Life of account + 6 months
Closed accounts	6 months

7Cookies and similar technologies

Our website uses cookies and similar technologies to make the site work, remember preferences (such as your chosen language), and understand how the site is used. You can control cookies through your browser settings; blocking some cookies may affect how the site works.

Third-party cookies / tools used:

• Google Analytics

8How we protect personal data

We apply reasonable technical and organisational security measures — including access controls and need-to-know restrictions — to protect personal data against unauthorised access, alteration, disclosure, or loss. No system can be completely secure, but we work to protect your information and to address any security incident appropriately.

9The SaleShade platform: our role as a processor

For the business data you store in SaleShade (Section 2c), you decide what data is collected and why, so you are responsible for having a lawful basis — including the necessary consents and notices — for the personal data of your own customers that you put into the Service. We process that data only to provide the Service to you, in line with your instructions and our agreement with you, and not for our own purposes.

10Your rights

Subject to applicable law, you have the right to:

• access the personal data we hold about you and how we process it;
• request correction or updating of inaccurate or incomplete data;
• request erasure of your personal data;
• withdraw consent where we rely on it;
• nominate another individual to exercise your rights in the event of death or incapacity; and
• raise a grievance about how we handle your data.

To exercise any of these, contact us at hello@saleshade.in. We will respond within the timeframes required by law, after verifying your identity to avoid any misuse of this policy.

11Children

The Website and Service are intended for businesses and are not directed to children. We do not knowingly collect the personal data of children under the age of 18 years without verifiable parental or guardian consent as required by the DPDP Act. If you believe we have, please contact us so we can address it.

12Where we store and process data

We store and process personal data in India. Our data is hosted on the server services purchased / leased from Hostinger.

13Third-party links and services

The Website and our communications may link to third-party services. We are not responsible for the privacy practices of those third parties; please review their policies.

Third-party services used:

• SMS provider: Kiri Infotech, 204, Ranjeet Hanuman Road, Gumasta Nagar, Usha Nagar, Indore, Madhya Pradesh – 452009, India.
• WhatsApp API: Meta Platforms, Inc., 1 Meta Way, Menlo Park, California 94025, USA.
• Email provider: Gmail, operated by Google LLC, a subsidiary of Alphabet Inc., USA.
• Push notifications: Google Firebase.
• App distribution: Apple App Store and Google Play Store.
• SSL certificate.

14Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version here and revise the “Last updated” date. We will notify you of significant changes as required by law.

15Grievance Officer and contact details

In accordance with the DPDP Act and the Information Technology Act, 2000, our Grievance Officer is:

For any questions about this policy or your personal data, contact: