Data security, in plain words
This page was written after a security audit, not before one — so every sentence on it is checked rather than hoped. Where your data lives, who can reach it, how long it is kept, and who answers for it.
Your data lives in India
SaleShade is hosted with Hostinger (Hostinger International Limited) on servers located in Mumbai, India. Personal data is stored and processed in India, and it stays in India.
Traffic between your browser, the apps and the server is encrypted in transit (SSL).- Hosting, retention and sub-processor facts on this page match the Privacy Policy — the formal version governs.
- The same facts apply to both halves: Desk and Operations run on the same platform.
Access is decided by role
Inside the platform, access is not a free-for-all. Every person works under their own login, and roles and permissions decide what each login can see and do — the salesperson, the warehouse team and the owner each get their own view, not a shared password.
Outside the platform, the rule is written into the Terms: your business owns its data, and SaleShade processes it solely to provide and support the service — as a Data Processor acting on your instructions, with your business as the Data Fiduciary under the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.
Every action leaves a trail
Estimates, orders, receipts, replacements — each record carries its own history: who created it, who changed it, and when. Nothing is edited silently. When a question comes up months later, the answer is on the record itself, not in somebody's memory.
How long data is kept
- Active accounts — data is retained for the life of the account plus six months.
- Closed accounts — data is retained for six months.
- If payment stops — access is suspended after 15 days, and your data stays available for export for 180 days before it may be deleted.
- On your own terms — you can export your data during the window, and you can also delete your own records from inside the platform without waiting the window out.
Checked before published
SaleShade's code and infrastructure go through consolidated security reviews — findings are logged in a register and tracked to closure, not filed away. The most recent review completed in August 2026, and every flagged point was addressed before this page was published. Further reviews are part of the routine, not a one-time event.
Two honest notes, because this is the one page where honesty matters most: the Terms make you responsible for keeping your own exports and backups, and nothing on this page replaces the Privacy Policy — the formal version governs.
Sub-processors are named
SMS
Kiri Infotech — Indore, Madhya Pradesh, India
WhatsApp API
Meta Platforms, Inc. — USA
Gmail, operated by Google LLC
Push notifications
Google Firebase
App distribution
Apple App Store and Google Play Store
Analytics
Google Analytics
Security
SSL certification
Each third party is named with its purpose — the same list, kept current, lives in the Privacy Policy.
A named person answers
Under the DPDP Act a named Grievance Officer answers for how data is handled — the name, designation and address are published in the Privacy Policy. If anything about your data ever needs a human, write to hello@saleshade.in and a named person, not a queue, is accountable for the reply.
Bring the hard questions to a demo — plain answers are the house style.
Ask for a demo