Privacy Policy

1. About us and scope

This website and the board software offered on it are owned and run by PalmGro Creative Agency (Gagan Suthar, Proprietor), Sri Ganganagar, Rajasthan, India, under the product brand PalmGro Flow ("we", "us", "our"). This policy explains how we handle information when you visit our website, request a demo, contact us, or buy a setup or optional feature (add-on).

2. Information we collect

We collect only what we need to answer your requests and manage your licence:

• Contact details: your name, email, phone number, company name and any message you send through the contact form or by email.
• Purchase details: your licence reference, what you bought, the amount, and the Razorpay payment and order IDs. We do not store card data.
• Technical data: basic diagnostics such as IP address and browser type, used only to prevent spam, keep the service secure and keep the website working.
• Website visits: on palmgroflow.com we count visits with our own simple tool (no Google Analytics, no advertising tags). It saves a random visitor number in your browser, and records which pages you open, what you click on the site (for example a plan or a button), how long a page stays open, the website or app that sent you, the campaign tag in the link, your device type, browser and time zone. At the start of a visit your IP address is sent once to our provider ipinfo.io to find your rough city, state and internet provider; only those are kept. It does not store your IP address, name, email or anything you type, except that a sign-up or contact request made on the site is marked on that visit. To stop it on a browser, open palmgroflow.com/?notrack once; browsers that send the Global Privacy Control signal are not counted.

The board runs on your own hosting, so we do not access, collect or store your agency's internal data, such as employee selfies, attendance logs, CRM leads or financial records.

3. Payments

All payments are processed by Razorpay. We never see or store your card number, UPI PIN or net-banking credentials. Razorpay handles them under its own privacy policy and security standards.

4. Your workspace and your team's data

A copy on your own hosting: the board is self-hosted on your own infrastructure. Daily reports, selfie attendance, tasks, leads and financial entries are stored only in your own database. We have no access to this data, and we do not monitor, sell or monetise it. At handover you change the database and hosting passwords. If you ask for technical support that needs us to look at your copy, we do so only after you give us explicit written permission, and you can end that access at any time.

To check your licence and offer updates, the app contacts our licensing service and sends only your licence key, your domain and the app version. It does not send your team's data.

An online plan (palmgroflow.com/app): we host your workspace. Each company gets its own separate database, sealed off from every other company. Your team's reports, attendance photos, tasks, leads and money entries stay in it. For this data you are in control and we act on your behalf: we use it only to run the service for you. We look at it only when you ask us for support, to keep the service secure, or when Indian law requires it. We never sell it or use it for advertising.

For the account itself we keep the owner's name, email, mobile number, company name, plan and payment history, and a record of when you agreed to our terms and this policy (date, version and IP address).

AI assistant (optional add-on): when someone uses the chat, their question and a short summary of the data that person can already see in the app are sent to our AI provider (Anthropic) to write the answer. Passwords from the Vault are never sent. We do not store the questions or answers.

Help & support: requests sent from Settings → Help & support, and our replies, are kept in our help desk so we can follow up.

5. Why we use information

• Support: to answer your enquiries and give technical help.
• Operations: to process purchases, activate features and send invoices.
• Security: to protect the website and prevent spam and unauthorised access.
• Compliance: to meet tax, legal and accounting obligations under Indian law.

6. Sharing with others

We do not sell or rent your personal information. We share relevant details only with service providers we need to run the business (such as Razorpay for payments, ipinfo.io to find the rough city of website visits, our hosting and email providers, and Anthropic for the optional AI assistant), or when Indian law or a regulator requires it.

7. Demo environment

Demos use sample data only. Please do not enter real personal, business or confidential information in a demo. We may reset or wipe the demo data at any time without notice.

8. Cookies

Our website does not use advertising, marketing or third-party tracking cookies. To count visits it keeps a random visitor number in your browser's local storage (not a cookie); clearing your browser data removes it. The board app uses only the essential session cookie needed to sign you in and keep your session secure.

9. Retention and security

We keep enquiry emails only as long as needed to follow up. Website visit records are deleted after 180 days. We keep transaction records for as long as Indian tax law requires. On an online plan, we keep your workspace while your account is open and for up to 90 days after access ends, then delete it permanently. We use reasonable, industry-standard measures to protect your information, but no digital system can be guaranteed completely secure.

10. Your rights

You can ask to access, correct or delete the personal information we hold about you, and withdraw your consent, subject to tax and legal record-keeping duties. These rights follow India's Digital Personal Data Protection Act, 2023. Write to our grievance officer, Gagan Suthar, at hello@palmgroflow.com. We reply within 7 working days.

11. Changes to this policy

We may update this policy from time to time and will change the date below when we do. If the change is important, account owners on an online plan are asked to agree to the new version before they carry on.

Partner program

If you apply to be a partner, we keep your name, email, phone number, the website or page you named and what you told us about how you will share PalmGro Flow, so we can review the application and run your partner account. For payouts we keep your UPI ID or bank account details and, if you give it, your PAN; the account number and PAN are stored encrypted. Payouts are sent through Razorpay (RazorpayX), which receives the payout details it needs to send the money. When someone opens a partner link, we count the visit for that partner without storing who the visitor is, and the browser remembers the partner code for a limited time so the sign-up can be credited. A partner sees the business name of the customers they referred, partly hidden, and the amounts of their commissions, but never the customer's contact details or workspace data.

Last updated: 11 November 2026