This policy explains how Madandaaz ("Madandaaz", "we") handles personal data when you use https://www.madandaaz.com, start a trial, buy a licence or use the licence features of our desktop software. We process personal data in line with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.
The short version
- The records you keep inside ClassHive, LodgeOS, CareOS and DistributorOS stay on your own computer. We never receive them.
- We hold only what we need to sell, deliver and support your licence: your account, billing details and the computers your licence is activated on.
- We do not sell your data and we do not use advertising trackers.
1. What we collect
- Account details: your name, email address, phone number and password (stored only as a secure hash).
- Organisation and billing details: business name, billing email, phone, GSTIN, address, city, state and PIN code, and the names and emails of team members you invite.
- Payment records: amount, plan, invoice number, payment status and the payment reference and method type (for example "UPI" or "card") returned by Razorpay. Card numbers, UPI PINs and bank credentials are entered directly with Razorpay and never reach us.
- Licence and device data: your licence key, a one-way hashed identifier of each activated computer, its computer name, operating system and version, the app version, the IP address it connects from, and the dates of activation and check-ins.
- Trial sign-ups: the name, email, phone and organisation entered when you start a free trial inside an app, together with the device data above.
- Website data: standard server logs (IP address, browser, pages requested, time) and essential cookies that keep you signed in and protect forms. We do not use analytics or advertising cookies.
2. What we do not collect
Students, parents, guests, patients, prescriptions, dealers, stock, invoices and every other record you enter into our Software are stored in a database on your own computer. They are not sent to us during activation or check-ins. Automatic backups are written to a folder or drive you choose, not to our servers.
3. Why we use your data
- to create and secure your account and organisation;
- to process payments, issue GST tax invoices and keep accounting records required by law;
- to issue, activate and validate licences, enforce the number of computers per plan and prevent misuse of trials and keys;
- to send service emails: licence keys, payment receipts, renewal reminders, password resets and team invitations;
- to answer your support requests and improve the Software.
We process this data to perform our contract with you, to meet legal obligations (such as GST record-keeping), and for the legitimate uses permitted under the Digital Personal Data Protection Act. We do not send marketing emails unless you have opted in.
4. Who we share it with
- Razorpay, our payment gateway, to process payments, mandates and refunds.
- Our hosting and email providers, who store data and deliver emails on our behalf under confidentiality obligations.
- Members of your organisation: owners and admins can see the organisation's licences, computers and invoices.
- Government authorities, when we are legally required to disclose information.
We never sell or rent personal data.
5. How long we keep it
Account and licence data is kept while your account is active and for a reasonable period afterwards so you can return. Invoices and payment records are kept for as long as GST and income-tax law require (currently up to eight years). Device records are kept for the life of the licence. Server logs are deleted after a short period.
6. Security
The website is served over HTTPS. Passwords are hashed, licence tokens are digitally signed, and access to our admin systems is limited to staff who need it and is logged. No system is perfectly secure; if a breach affects your personal data we will notify you and the Data Protection Board as the law requires.
7. Your rights
You can see and correct most of your data yourself in your account. You may also ask us to give you a summary of the personal data we hold about you, correct or erase it (except where we must keep it by law, such as tax invoices), withdraw consent, or nominate someone to exercise these rights on your behalf. Write to us from your account email and we will respond within 30 days.
8. Children
Our website and accounts are meant for businesses and are not directed at children. Institutes that record students' details in ClassHive do so on their own computers as data fiduciaries in their own right.
9. Grievance officer
If you have a concern about how your data is handled, contact our grievance officer:
Grievance Officer, Madandaaz
Email: support@madandaaz.com
We acknowledge complaints within 48 hours and aim to resolve them within one month.
10. Changes
We will post any changes to this policy on this page and update the date at the top. Significant changes will also be emailed to account owners.