Privacy Policy

Last updated:

Draft for internal legal review. This policy is written to be accurate about what the portal actually does today (as of this draft) and to meet Google's API Services User Data Policy requirements for the Sheets/Calendar scopes it requests. It has not been reviewed by counsel as a finished, binding policy — please review and adjust before relying on it or publishing it live, particularly the DPDP Act 2023 and contact-details sections.

Kanoon Mitra Solutions ("we", "us", "our") operates the Labour Law Compliance Portal at kanoonmitrasolutions.com (the "Portal"), used by employers, HR consultants and payroll consultants to generate and maintain statutory labour-law compliance documents, registers and calculators for their own establishments or their clients'.

1. What We Collect

When you use the Portal, we collect:

Account information: your name, email address, and a hashed (never plain-text) password, plus your company/establishment's name, address, PAN, GSTIN and CIN.
Billing information: handled directly by our payment processor, Razorpay — we receive a subscription status and payment confirmation, never your card/bank details.
Compliance data you enter: employee registers, wage records, personnel documents and similar — see Section 2, this does not get stored on our own servers.
"Book a Call" enquiries: name, phone, email, company and message, if you submit that form.

2. Google Account Data — Sheets & Calendar

If you connect your Google Account, we request exactly three narrow permissions, using Google's OAuth consent flow:

drive.file — access only to files this app itself creates in your Drive, never your existing files or your whole Drive.
spreadsheets — to read and write the one spreadsheet this app creates for your company's compliance register data.
calendar.events — to create and update calendar events for your statutory compliance due dates, never to read your existing calendar.

Your compliance register data (employee registers, wage records, and similar) is written directly to that spreadsheet in your own Google Drive — it is not copied to, cached on, or stored by our own servers at any point. We only store an encrypted credential that lets our server read and write that one spreadsheet and your calendar on your behalf, until you disconnect it.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: we use Google user data only to provide and improve the specific, user-facing features described above, we do not use it for advertising, we do not sell it, and we do not allow humans to read it except where necessary for security, to comply with law, or with your explicit consent (e.g. a support request you initiate).

You can disconnect Google access at any time from the dashboard, or directly at myaccount.google.com/permissions. Disconnecting stops our access to your spreadsheet/calendar going forward — it does not delete the spreadsheet itself, which remains yours in your own Drive.

3. How We Use Information

To provide the Portal's features — generating documents, computing statutory dues, tracking compliance due dates.
To process payment and manage your subscription.
To respond to support requests and "Book a Call" enquiries.
To send you service-related emails (login codes, due-date reminders, billing notices) — never marketing email without separate consent.

4. Data Retention & Deletion

Account and billing records are retained for as long as your account is active, plus whatever period applicable tax/accounting law requires afterward. Compliance register data lives in your own Google Sheet, under your own control — you can export, edit or delete it at any time independently of us, and deleting your account does not delete that spreadsheet (it's yours). To request deletion of your account/billing records, contact us using the details in Section 7.

5. Third Parties We Use

Razorpay — payment processing.
Google — your own Google Account, for Sheets/Calendar storage as described above.
We do not sell or rent your personal information to anyone.

6. Your Rights

Subject to India's Digital Personal Data Protection Act, 2023 and other applicable law, you may request access to, correction of, or erasure of your personal data held by us, and may withdraw consent for its processing, by contacting us as below.

7. Contact

Kanoon Mitra Solutions — kanoonmitrasolutions@gmail.com
Gurugram: Flat No. 104, 47-L, New Colony, Sector 7, Gurugram, Haryana - 122001
Ludhiana: SCF 4059, 200 Feet Main Road, Dugri, Ludhiana - 141013