Privacy Policy

Muneem ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and safeguard your personal and business information when you use our website and the Muneem GST billing and accounting platform.

By using Muneem, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our services. This policy is intended to help you understand your rights and our obligations under applicable Indian law, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023.

This is a template policy. Please have it reviewed by a qualified legal professional before relying on it for regulatory or compliance purposes.

Personal Data: Information that identifies or can be used to identify an individual, such as name, email, phone number, and IP address.

Business Data: Information related to your business, including GSTIN, business name, client records, invoices, payments, and inventory.

Usage Data: Information about how you interact with our website and platform, including device information, browser type, pages visited, and feature usage.

Data Controller: The natural or legal person who determines the purposes and means of processing personal data. For Muneem, this is the entity operating the Muneem service.

We collect the following types of information:

• Account and Contact Information: Name, email address, phone number, business name, GSTIN, PAN, billing address, and other details you provide when registering or updating your profile.
• Business and Transactional Data: Client details, items, invoices, quotes, purchase orders, payment records, expenses, bank and UPI transactions, and GST return data that you upload or generate.
• Usage and Technical Data: IP address, browser type and version, device type, operating system, referring website, pages viewed, time spent, click patterns, and error logs.
• Communication Data: Records of your interactions with our support, sales, and feedback channels, including emails, chat transcripts, and call logs.
• Cookies and Similar Technologies: Essential cookies and, with your consent, analytics cookies such as Google Analytics and Cloudflare Web Analytics. You can manage your preferences through the cookie banner.

We collect information directly from you when you:

• Register for an account or update your profile.
• Create and manage invoices, clients, payments, and other business records.
• Contact our sales or support teams.
• Subscribe to newsletters or marketing communications.
• Respond to surveys or feedback requests.

We also collect information automatically through cookies, analytics tools, server logs, and error tracking technologies when you browse our website or use the platform.

We use your information for the following purposes:

• Providing the Service: To enable invoicing, GST reporting, payment tracking, multi-business management, and other platform features.
• Billing and Account Management: To process subscriptions, payments, renewals, refunds, and account administration.
• Customer Support: To respond to inquiries, troubleshoot issues, and improve your experience.
• Security and Fraud Prevention: To detect, prevent, and investigate unauthorized access, fraud, and other security incidents.
• Product Improvement: To understand usage patterns, identify bugs, and develop new features.
• Marketing: With your consent, to send product updates, tips, and promotional content. You can opt out at any time.
• Legal Compliance: To meet tax, accounting, GST, and other legal obligations, and to respond to lawful requests from authorities.

We process your personal data based on one or more of the following legal grounds:

• Consent: Where you have given clear consent, such as for marketing emails or analytics cookies.
• Contract: Where processing is necessary to provide the service under our Terms of Service.
• Legal Obligation: Where we are required to process data under Indian tax, GST, accounting, or other laws.
• Legitimate Interests: For security, fraud prevention, product improvement, and business analytics, provided your rights do not override these interests.

We do not sell your personal data. We may share your information only in the following circumstances:

• Service Providers: With trusted vendors who host our infrastructure, process payments, send emails, provide analytics, or support customer service. These providers are contractually bound to use data only for the purposes we specify.
• Payment and Government Integrations: To enable UPI, bank transfers, Razorpay, GST portal integration, and e-invoicing as required.
• Legal and Regulatory: When required by law, court order, or government authority, or to protect our rights, property, or safety.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate confidentiality protections.

Muneem primarily processes data within India. Some of our service providers, such as cloud hosting, analytics, and email delivery providers, may operate in other countries. When data is transferred outside India, we ensure appropriate safeguards are in place, such as standard contractual clauses or equivalent legal mechanisms, and that the receiving jurisdiction provides an adequate level of data protection.

We implement appropriate technical and organizational measures to protect your data, including:

• TLS 1.3 encryption for data in transit.
• Industry-standard encryption and access controls for data at rest.
• Role-based access controls and multi-factor authentication for our systems.
• Regular security assessments, vulnerability management, and audit logging.
• Incident response procedures to detect and respond to security breaches.

Despite these measures, no system is completely secure. We encourage you to use strong passwords and protect your account credentials.

We retain your personal and business data for as long as your account is active and as necessary to provide the service. We may also retain certain data for longer periods where required by Indian tax, GST, accounting, or other applicable laws. When you delete your account, we will securely delete or anonymize your data in accordance with our data retention schedule, except where we are required to keep it for legal, regulatory, or fraud-prevention purposes.

Depending on applicable law, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete data.
• Erasure: Request deletion of your personal data, subject to legal retention obligations.
• Objection and Restriction: Object to or request restriction of certain processing activities.
• Data Portability: Receive your data in a structured, machine-readable format.
• Withdraw Consent: Withdraw consent for marketing or analytics cookies at any time.

To exercise these rights, contact us at privacy@imuneem.com. We will respond within the time required by applicable law.

We use cookies and similar technologies to:

• Keep the website secure and reliable.
• Remember your cookie preferences.
• Understand how visitors use our site through analytics tools.

With your consent, we load Google Analytics and Cloudflare Web Analytics. You can manage or withdraw your consent at any time through the cookie banner at the bottom of the page.

Muneem is not intended for use by children under the age of 13. We do not knowingly collect personal data from children. If we become aware that a child under 13 has provided us with personal data, we will take steps to delete such information.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or service offerings. We will notify you of material changes through the application, email, or a prominent notice on our website. Your continued use of Muneem after the changes take effect constitutes acceptance of the revised policy.

If you have any concerns or grievances regarding the handling of your personal data, you may contact our Grievance Officer at:

Email: grievance@imuneem.com
Address: Muneem, Bengaluru, Karnataka, India.

We will acknowledge and address your concern in accordance with applicable law.

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: privacy@imuneem.com
Address: Muneem, Bengaluru, Karnataka, India.