Privacy Policy
Last updated: 10 November 2026
This policy explains what personal data AllNest collects, why, and what rights you have under India's Digital Personal Data Protection Act, 2023 (DPDP Act). This is a draft and should be reviewed by a lawyer before launch.
1. What we collect
Your name, work email, password (stored only as a one-way hash), the organization name, and the business data you enter into AllNest, such as customers, orders, vendors and tasks. We also record when you accepted the Terms and when you last signed in.
2. Why we collect it
To create your account, run the features you use, keep the service secure, and contact you about the service. We do not sell your data.
3. Consent
We ask for your consent when you create an account. You can withdraw it at any time by deleting your organization or writing to us.
4. Who can see your data
Only members of your organization, and our team when needed to give support. Your data is stored with our hosting and database providers, who process it on our behalf.
5. Your rights
- Access and download your data: use Export in Settings.
- Correct your data: edit it in the app, or ask us.
- Erase your data: delete your organization in Settings.
- Grievance: write to us and we will respond within a reasonable time.
6. How long we keep it
We keep your data while your organization is active. After an Owner deletes an organization we hold the data for 30 days in case of a mistake, then permanently remove it.
7. Security
Passwords are hashed, secrets such as API keys are encrypted, and every query is scoped to your organization. No system is perfectly secure, so we also ask you to use a strong password.
8. Grievance contact
Write to shivamc872@gmail.com for any privacy request or complaint.