Privacy policy

Last updated 20 October 2026

This privacy policy explains how managemate ("we", "us" or "our") collects, uses, shares and protects personal data when you visit our website at managemate.in, sign up for or use the managemate web app (together, the "service"), or contact us. It is written to meet our obligations under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act") and the Information Technology Act, 2000 and the rules made under it.

In short

• We collect what we need to run your account, your workspace and your subscription.
• The business records you enter belong to you. We process them only to provide the service, and we never sell them or use them for advertising.
• Payments are handled by Razorpay. We never see or store your full card number, UPI PIN or banking password.
• Our marketing website may use analytics and advertising tools (Google Analytics, Google Ads, Microsoft Clarity and Meta Pixel). They do not run inside the managemate app.
• You can access, correct and erase your personal data, withdraw your consent, and raise a grievance with our Grievance Officer.

1. Our role

• Your account, subscription and visits to our website. We decide why and how this personal data is processed, so we are the "Data Fiduciary" for it under the DPDP Act.
• Data you enter about other people. When you and your users enter personal data into a workspace about others, such as customers, suppliers or staff, your business decides what to collect and why. Your business is the Data Fiduciary for that data, and we process it on its behalf, as a "Data Processor", only to provide the service. If you are a customer or supplier of a business that uses managemate and want to exercise your rights, please contact that business. We will help it respond.

2. What we collect

Account and team details

• Your name, email address, password and role, and the workspaces you belong to. Passwords are stored only as secure hashes, never in readable form.
• When an administrator invites you to a workspace, the name, email address and role they enter for you.
• When you sign up with your email address, the one-time code we send you (stored only as a hash) and the IP address of the request, which we use to prevent abuse.

Sign in with Google

If you sign up or sign in with Google, Google shares your name, your email address, whether that address is verified, and a unique identifier for your Google account. We do not receive your Google password, and we do not get access to your email, contacts or files.

Business and billing details

Your business name, legal name, logo, addresses, phone number, email address, GSTIN and state, and the bank account and UPI details you choose to print on your documents. For your subscription, the billing name, address, state and GSTIN (if applicable) you enter for your invoices.

Your workspace data

Products, photos, prices, stock, locations, customers and suppliers (which can include names, phone numbers, email addresses, addresses and GSTINs), orders, invoices, bills, payments, expenses, production records and notes that you and your users enter or import. We process this data to provide the service to your business, as described in section 1.

Payment details

Payments are processed by Razorpay. You enter your card, UPI or bank details directly with Razorpay, and Razorpay handles them under its own terms and privacy policy. We receive details of each payment and subscription, such as the amount, date, status, type of payment method, and the payer's email address, phone number or UPI ID. We keep the invoices and credit notes we issue to you.

Messages to us

When you email us, or use the contact form on our website (which opens your email app with a prepared message), we receive your name, email address, business name and anything you write.

Technical data

When you use the service, our hosting provider processes technical data such as your IP address, browser and device type, and the pages and features requested, so that the service can be delivered, kept secure and fixed when something goes wrong. A few preferences are also saved in your browser (see section 5).

Records for once-per-customer offers

The free trial and the money-back guarantee are each available once per customer. To apply this fairly, we keep identifiers of the workspace that used them, such as administrators' email addresses or Google accounts, the business and billing email addresses and phone numbers, the PAN contained in a GSTIN, and the payer's email address, phone number or UPI ID. These are stored only as one-way hashes, not in readable form.

3. How we use personal data

• To create and run your account and workspace, sign you in and keep the service secure.
• To provide the features you use, including printing, sharing and importing.
• To process payments, issue invoices and credit notes, and manage seats, renewals, refunds and the free trial.
• To send the emails needed to run your account: sign-up codes, invitations, password resets, trial reminders, payment receipts, payment problems, refund confirmations and seat requests. If we send product news or offers, we will do so only with your consent, and you can unsubscribe at any time.
• To answer your questions and support requests.
• To understand how visitors use our website and to measure our advertising (see section 4).
• To prevent fraud and abuse, enforce our terms of service and comply with the law.

We process personal data with your consent, which you give when you sign up, use the service or contact us, and for the legitimate uses the DPDP Act allows, such as when you have voluntarily provided data for a specific purpose, or when we must comply with the law. We do not sell personal data, and we do not use your workspace data for advertising or share it with advertisers.

4. Website analytics and advertising

When enabled, the following tools run on our marketing website at managemate.in, such as the home, features, pricing and documentation pages. They are not used inside the managemate app, where your business data is kept, and we do not send your workspace data to them. They use cookies and similar technologies, and each provider processes the data under its own privacy policy.

How to opt out. The website works fully without these tools.

• Choose Decline in the cookie notice, or later under Cookie settings at the bottom of every page. This turns the tools off on this device. Visitors from the European Economic Area, the United Kingdom and Switzerland are not measured by Google's tools unless they choose Accept.

• Block or delete cookies in your browser settings, or use your browser's tracking protection or a content blocker.

• Google Analytics: install the Google Analytics opt-out browser add-on.

• Google ads: turn off personalised ads in My Ad Center. You can read how Google uses information from sites that use its services.

• Microsoft Clarity: block or delete its cookies (named below). Microsoft's privacy statement explains how it handles this data.

• Meta: change how Meta uses information from other websites for ads in your ad preferences.

How you found us. When you arrive at our website, it remembers in your browser, for up to 90 days, how you first found us: the campaign tags in the link you followed (such as utm_source), an ad click identifier if you came from an ad, the website that referred you and the first page you visited. If you then sign up, these details are saved with your new workspace, so we can see which of our marketing works. We use them only for that purpose. If you came from a Google ad, we may report the ad click identifier, with the date you started using or purchased the service, back to Google Ads to measure that campaign; we do not send your name, email address or workspace data with it.

5. Cookies and browser storage

6. Who we share personal data with

We share personal data only with the service providers that help us run managemate, who may use it only to provide their services to us and must protect it.

We may also disclose personal data when required by law, a court order or a government authority, to protect the rights and safety of our customers, the public or ourselves, or as part of a reorganisation, merger or sale of our business, in which case we will tell you. When you choose to share a document through WhatsApp, email or another app, it is sent by that service under its own terms.

Transfers outside India. Some of our service providers store or process data outside India, including in the United States. We transfer personal data only as Indian law permits, including any restrictions the Government of India notifies under the DPDP Act.

7. How long we keep it

• Account and workspace data: for as long as the workspace exists. A paused workspace, for example after a trial ends, a plan is cancelled or a payment fails, keeps its data in full. When an administrator asks us to delete a workspace, we delete or anonymise its data within a reasonable period, except for records we must keep by law. Copies in backups are removed as those backups expire.
• Users who leave: when a user is deactivated, their records of past work, such as documents they created, stay with the workspace so its history remains complete.
• Billing records: payments, invoices and credit notes are kept for as long as tax and accounting laws require, even after a workspace is deleted.
• Once-per-customer records: the hashed identifiers described in section 2 are kept after a workspace is deleted, for as long as we offer the free trial and the money-back guarantee.
• Sign-up requests and IP addresses: only for as long as needed for security and to prevent abuse.
• Messages: for as long as needed to deal with them and keep a record of our correspondence.
• Website analytics data: for the period set in each provider's retention settings.

Otherwise, we delete personal data once it is no longer needed for the purpose it was collected for, or when you withdraw your consent, unless the law requires us to keep it.

8. How we protect it

We protect personal data with reasonable security safeguards. Data is encrypted in transit using HTTPS. Passwords and one-time codes are stored only as hashes. Each workspace's data is kept separate, and roles and permissions control what each user can see and do. Access to our systems is limited to people who need it, and we use established providers to host our service.

No system is completely secure, so please keep your password safe and tell us if you notice anything unusual. If a personal data breach affects you, we will inform you and the Data Protection Board of India as the law requires.

9. Your rights

Under the DPDP Act, you have the right to:

• Access information: obtain a summary of the personal data we process about you, how we process it, and who we have shared it with.
• Correction and erasure: have inaccurate or incomplete data corrected, completed or updated, and have data erased when it is no longer needed for its purpose, unless the law requires us to keep it. You can change many details yourself in the app.
• Withdraw consent: withdraw your consent at any time, as easily as you gave it. This does not affect processing that took place before, but we may no longer be able to provide some or all of the service.
• Grievance redressal: raise a grievance with our Grievance Officer, who will respond as described below.
• Nominate: nominate another person to exercise these rights on your behalf in the event of your death or incapacity.

To exercise any of these rights, email hello@managemate.in. We may ask you to confirm your identity first. If your request is about data a business holds about you in its workspace, please contact that business, as explained in section 1. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

10. Grievance Officer

If you have a concern or complaint about how we handle personal data, please contact our Grievance Officer. We will acknowledge your grievance and respond within one month of receiving it.

Grievance Officer, managemate

• Email: hello@managemate.in

11. Children

The service is designed for businesses and is not intended for children. Under the DPDP Act, a child is anyone under 18. We do not knowingly collect personal data from children, and we do not track children or direct advertising at them. If you believe a child has given us personal data, please contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. We will publish the updated policy on this page and change the date at the top. If a change is significant, we will also tell you by email or in the app before it takes effect.

13. Contact us

For any other questions about this policy, please contact us:

• Email: hello@managemate.in