Privacy Policy

Munim Ji ("Munim Ji", "we", "us", or "our") is a group of industry-specific business management applications developed and operated by Lumosys Web ("Lumosys Web", the "Company"). This Privacy Policy explains how we collect, use, store and protect information when you use our website and any Munim Ji business application (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this policy, please do not use the Service.

We may collect the following categories of information:

• Account information — name, phone number, business name, business type, and login credentials (PIN-based, hashed and never stored in plain text).
• Business data — sales, purchases, expenses, ledgers, staff records and other data you or your staff enter into the Service.
• Payment information — subscription plan selected, billing cycle, and transaction references. We do not store your full card, bank or UPI credentials on our servers.
• Usage information — pages visited, actions performed within the app, device and browser type, and approximate location derived from IP address.
• Communications — messages you send us via the contact form, email, phone or WhatsApp.

We use the information we collect to:

• Provide, operate and maintain the Service for your business.
• Process your subscription, renewals, and payment-related communication.
• Respond to support requests and enquiries.
• Monitor and improve the security, performance and reliability of the Service.
• Send important service notices, such as trial expiry or renewal reminders.
• Comply with applicable legal and regulatory obligations.

We do not sell your personal or business data to third parties for advertising purposes.

Business data you enter into a Munim Ji application (such as sales, expenses, customer ledgers, and staff records) belongs to you and your business. This data is used solely to provide the Service to you and is not shared with other Munim Ji customers. Staff members you add to your account may access data according to the role-based permissions you configure for them.

Subscription payments are made via UPI or other payment methods you choose at checkout. Payment confirmation may be verified manually or through a third-party payment processor. We retain records of payment amount, plan, and date for billing history and support purposes, but we do not store sensitive payment credentials such as full card numbers or UPI PINs on our servers.

The Service may use cookies, local storage, or similar technologies to keep you signed in, remember your preferences (such as light/dark theme), and understand how the Service is used so we can improve it. You can control cookies through your browser settings; however, disabling cookies may affect certain features of the Service, such as staying logged in.

We use industry-standard practices to protect your information, including hashed PIN-based authentication, role-based access control, encrypted connections (HTTPS/TLS), and an audit trail for corrections and deletions within the app. However, no method of transmission or electronic storage is completely secure, and we cannot guarantee absolute security.

We retain account and business data for as long as your subscription is active, and for a reasonable period afterward to allow you to reactivate your account, comply with legal obligations, or resolve disputes. If you wish to permanently delete your data, please contact us using the details below.

We may use trusted third-party providers for infrastructure, hosting, database, and payment processing (for example, cloud hosting and database providers). These providers process data only as necessary to deliver their service to us and are not authorized to use your information for their own purposes. [Company name/details for any specific third-party processor may be added here as applicable.]

We maintain digital records of account activity, including login timestamps and key actions performed within the Service, as part of our security and audit practices. We may access, preserve, and disclose your account information, business data, or activity/login logs to law enforcement agencies, courts, or government or regulatory authorities where we reasonably believe such disclosure is required by applicable law, a valid legal process (such as a court order, summons, or lawful request from an investigating authority), or is necessary to protect the rights, property, or safety of Munim Ji, Lumosys Web, our users, or the public, or to investigate suspected fraud, illegal activity, or a violation of our Terms & Conditions.

Depending on applicable law — including India's Digital Personal Data Protection Act, 2023 (see Section 12 below) — you may have the right to:

• Request access to the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your account and associated personal data.
• Withdraw consent for optional communications at any time.

To exercise any of these rights, please contact us using the details in the "Contact Us" section below.

Munim Ji and Lumosys Web process personal data in accordance with India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), where applicable. Under the DPDP Act, you (as a "Data Principal") have the right to obtain a summary of the personal data we hold about you and its processing, seek correction, completion, and erasure of your personal data, withdraw consent at any time (without affecting the lawfulness of processing before withdrawal), nominate another individual to exercise these rights on your behalf in the event of your death or incapacity, and file a grievance with us regarding the processing of your personal data. We process personal data only for lawful purposes for which you have given consent or as otherwise permitted under the DPDP Act, and we implement reasonable security safeguards to prevent personal data breaches. If a grievance raised with us remains unresolved, you may approach the Data Protection Board of India as provided under the DPDP Act.

The Service is intended for business owners, staff and administrators, and is not directed at children under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will update the "Last updated" date at the top of this page when changes are made. Continued use of the Service after any changes constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy or how your data is handled, please reach out via our Contact page and our team will get back to you. [Registered business email/address to be added here.]