Privacy Policy

1. Two kinds of data

• Account data about shop owners and their staff, which we collect to run MobiDesk: name, email address, mobile number, and sign-in details. For this data, MobiDesk decides how it is used.
• Shop data that a shop enters about its own business: its customers (name, mobile number, GSTIN), bills and payments, stock including IMEI and serial numbers, people it buys from (name, mobile number, city, ID type and number, and — only with their agreement — a small photo), and expenses. For this data, the shop decides what is recorded and why; MobiDesk stores and processes it on the shop’s behalf.

2. How we use data

• To provide MobiDesk: billing, stock, reports and the other features a shop uses.
• To set up shops, give support, send account emails (for example invitations) and handle subscriptions.
• To keep the service secure, prevent misuse and fix problems.

We do not sell personal data, do not use shop data for advertising, and do not share one shop’s data with another shop.

3. Who can see shop data

• Each shop’s data is kept separate. Only that shop’s owner and the staff the owner allows can see it, and the owner decides what each staff member can see (for example cost prices).
• Sellers’ ID numbers are shown in full only to the owner. Sellers’ photos are stored as private files, shown only to the owner through short-lived links, and the owner can delete them at any time.
• MobiDesk staff access a shop’s data only when needed to provide support, fix a problem or meet a legal requirement.

4. Services we use

We use trusted providers to run MobiDesk, who process data only for us: Supabase (database and sign-in), Vercel (hosting, and anonymous page-view counts without cookies), ImageKit (shop logos and private seller photos) and Resend (account emails). Some of their servers may be outside India. They are bound to protect the data and use it only to provide their service to us.

5. Security

• Data is sent over encrypted connections (HTTPS).
• Access rules in the database keep each shop’s data to that shop and its permitted staff.
• Important actions (bills, purchases, edits, sign-ins) are recorded in an activity log the owner can review.

No system is perfectly secure; if we learn of a breach that affects you, we will tell you and the authorities as the law requires.

6. How long we keep data

We keep data while a shop uses MobiDesk. After a shop cancels, we keep its data for 60 days so it can ask for a copy, then delete it, unless the law requires us to keep some records longer (for example for tax).

7. Your rights

• Shop owners and staff can ask us to see, correct or delete their account data.
• A shop’s customers and sellers should first contact the shop, which controls that data. The shop can correct or remove it, and we will help the shop do so.

8. Cookies

MobiDesk uses only the cookies needed to keep you signed in and secure. We do not use advertising or tracking cookies.

9. Changes to this policy

We may update this policy. If a change matters to you, we will tell you in the app or by email. The date at the top shows when it last changed.

10. Contact and grievances

For privacy questions or complaints, contact Mauzzam Shaikh through the contact form on mobidesk.shop. We aim to reply within 7 days.