Privacy policy
This policy explains how DESKAUTOMATION ("we", "us"), a proprietorship of Mukul Karale, Pune, handles personal data on deskautomation.in and in our products: Inward, WhatsApp reminders and WhatsApp document intake.
Who decides what happens to the data
Our customers are accounting firms. When a firm uses our products for its own clients, the firm decides why and how that client data is used, and we process it only on the firm's instructions. Under the Digital Personal Data Protection Act, 2023, the firm is the Data Fiduciary and we act as its Data Processor. Clients of a firm should contact that firm first about their data.
What we collect
- From firms we work with: name, firm name, email, phone number and billing details.
- On behalf of firms: their clients' names and phone numbers, WhatsApp messages and delivery status, and documents clients send on WhatsApp (such as invoices, Form 16 or bank statements).
- On this website: standard server logs (IP address, time, page requested), kept for security, and Google Analytics, which uses cookies to count visits and show which pages are read (pages viewed, approximate location, device and browser). We use this only to improve the website. We run no advertising trackers and do not sell data. You can block these cookies in your browser settings or with Google's opt-out add-on at tools.google.com/dlpage/gaoptout.
How we use it
- To send messages the firm has scheduled, record replies and show the firm which clients responded.
- To receive documents sent on WhatsApp and deliver them to the firm's own computer.
- To provide support, billing and service notices to firms.
We do not sell personal data, use it for advertising, or message anyone the firm has not asked us to message.
WhatsApp and Meta
Messages are sent through the official WhatsApp Business Platform (Cloud API) operated by Meta. The WhatsApp Business account, phone number and Meta billing belong to the firm. Meta processes message content under its own terms and privacy policy. Anyone can stop receiving messages by replying STOP; we then mark them as opted out.
Documents: relay, not storage
- Documents are downloaded from Meta promptly and encrypted before they are stored on our server.
- The firm's desktop software pulls them to the firm's own computer, after which we delete our copy.
- Documents that are not collected are deleted within 30 days of receipt.
Where data is stored
Our servers run on major cloud providers (such as Google Cloud) and may be located outside India. Access is limited to us, protected by encryption, unique credentials and two-factor authentication.
How long we keep it
Message records and contact lists are kept for as long as the firm uses our service, and deleted within 30 days after the firm ends the service or asks us to delete them, unless the law requires us to keep them longer. Billing records are kept as required by tax law.
Your rights
Under the DPDP Act you may ask to access, correct or erase your personal data, withdraw consent, and nominate someone to exercise these rights. If you are a client of a firm, please contact the firm; we will help them respond. See how to request deletion.
Grievance officer
Mukul Karale, DESKAUTOMATION
Pune, Maharashtra, India
Email: mukul@deskautomation.in
We aim to respond within 7 days. If you are not satisfied, you may approach the Data Protection Board of India.
Changes
We will update the date at the top when this policy changes and inform customer firms of significant changes by email.