Privacy Policy

Last updated: 06 March 2026

This Privacy Policy describes how Maarkit ("we", "us", "our"), operated by Jain Allaudeen A, collects, uses, and protects your information when you use our platform at maarkit.biz and app.maarkit.biz.

1. Information We Collect

Data Type	What We Collect	Why
Account Info	Name, email, phone, business name, city	Account creation, communication
Business Data	Purchases, sales, stock, vendors, customers	Core service functionality
Payment Info	Transaction IDs via Razorpay (we never store card numbers)	Subscription billing
Usage Data	Login times, pages visited, feature usage	Service improvement
Device Info	Browser type, IP address, device type	Security, audit logs

2. How We Use Your Information

We use your information to:

• Provide and maintain the Maarkit service
• Process your subscription payments via Razorpay
• Send important service notifications (downtime, billing, security)
• Improve the platform based on usage patterns
• Prevent fraud and enforce our Terms of Service
• Respond to your support requests

We do NOT use your data for advertising. We do NOT sell your data to third parties. Ever.

3. Data Isolation

Maarkit uses a multi-tenant architecture with strict data isolation. Each business account operates in a completely separate workspace. No user from one business can access another business's data. This is enforced at the database level through tenant-scoped queries.

4. Data Storage and Security

• All data is stored on encrypted cloud servers (PostgreSQL on Render.com)
• Passwords are hashed using bcrypt (12 rounds) — we never store plain-text passwords
• All API communication uses HTTPS/TLS encryption
• Authentication uses JWT tokens with automatic refresh
• Role-based access control (RBAC) with 35 granular permissions
• Every data modification is logged in an immutable audit trail

5. Payment Processing

Payments are processed through Razorpay, a PCI-DSS compliant payment gateway. We never store, process, or have access to your credit/debit card numbers. Razorpay's own privacy policy governs how they handle your payment data: razorpay.com/privacy

6. Data Retention

• Active accounts: Data retained as long as your account is active
• Cancelled accounts: Data retained for 30 days after cancellation, then permanently deleted
• Audit logs: Retained for the lifetime of the account
• Backups: Rolling daily backups retained for 30 days

7. Your Rights

You have the right to:

• Access — Export all your data at any time using the Backup feature
• Correct — Update your account and business information
• Delete — Request complete deletion of your account and data
• Portability — Download your data in JSON format

To exercise these rights, contact us at hello@maarkit.biz.

8. Cookies

Maarkit uses essential cookies only for authentication (JWT token storage in localStorage). We do not use tracking cookies, advertising cookies, or third-party analytics. No cookie consent banner is needed as we only use essential functional cookies.

9. Third-Party Services

Service	Purpose	Data Shared
Render.com	Application hosting	Encrypted application data
Razorpay	Payment processing	Transaction amount, email
Netlify	Landing page hosting	None (static page only)

10. Children's Privacy

Maarkit is a business management tool designed for adults. We do not knowingly collect information from anyone under 18 years of age. If we discover that a minor has created an account, we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification. Continued use of the Service after changes constitutes acceptance.

12. Governing Law

This Privacy Policy is governed by the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 of India.

13. Contact

For privacy-related questions or requests:
Jain Allaudeen A (Data Controller)
Email: hello@maarkit.biz
Location: Madurai, Tamil Nadu, India