Legal
Privacy policy
Last updated:
This policy explains, in plain language, how Kramaline handles personal data. Kramaline is a work order tracking service for manufacturing companies, operated by Pratik Mane from India. In this policy "we" means the Kramaline team and "your company" means the business that subscribes to Kramaline.
Who decides what
- Your company's business data (orders, customers, vendors, dates and anything else your team enters) belongs to your company. Your company decides what goes in and who can see it; we process it only to run the service for them.
- Account data of the people who sign in (name, email and role) is handled by us to provide sign-in and support.
Data we collect
- Account data: full name, work email address, role (viewer, editor or admin), optional department, and your password, which is stored only as a one-way hash.
- Business data your team enters: work orders, units, customers, vendors, dates, remarks, document folder links and settings.
- Activity records: which user changed what and when, so your team has a change history.
- Technical data: sign-in times and the IP address and browser information that our hosting providers record when you use the service.
- Contact data: your name, email address or phone number and message when you contact us by email or WhatsApp.
Why we use it
- To provide the service: sign-in, showing and saving your company's data, exports.
- To keep it secure: access control, abuse prevention and investigating problems.
- To support you and to send service and billing messages.
- To meet legal, tax and accounting obligations.
We do not sell personal data and we do not use it for advertising.
Where it is stored
The database, including authentication data, is hosted in India, in the Mumbai region. Each company's data is isolated by access rules enforced in the database. The database is backed up every night.
Who processes it for us
- Supabase – database, sign-in and backups, hosted in the Mumbai region.
- Vercel – hosts the web application that your browser loads.
- Email and WhatsApp providers – only when you choose to contact us that way.
These providers act on our instructions and may not use the data for their own purposes.
How long we keep it
- Business and account data: for as long as your company's subscription is active.
- After the subscription ends, your company can export its data for 30 days. We then delete it within 90 days, unless the law requires us to keep something longer (for example invoices).
- Backups are overwritten on a rolling basis.
Your rights (Digital Personal Data Protection Act, 2023)
You can ask us to:
- tell you what personal data about you we process and why;
- correct, complete or update it;
- erase it when it is no longer needed for the purpose it was collected, subject to legal requirements;
- nominate another person to exercise these rights if you are unable to.
If your request concerns data that your company entered, we will usually involve your company's admin, because your company decides about that data. You can also withdraw consent you have given us; this does not affect processing that took place before.
Grievances
Contact our grievance officer, Pratik Mane, at the support email address shown on this site. We will acknowledge your message within 7 days and resolve it within the time the law requires. If you are not satisfied, you may complain to the Data Protection Board of India.
Children
Kramaline is a business tool and is not meant for anyone under 18.
Changes
If we change this policy we will update the date at the top and, for significant changes, tell your company's admin in advance.