Legal

Privacy Policy

Draft, to be reviewed by counsel before launch. This page states what the product actually does today; it is not yet a final legal document.

What we collect

Account details for the people your company adds as users; customer and business records your company enters (names, addresses, phone numbers, tasks, quotations, complaints); and, for field staff, GPS location captured as a snapshot when a task action is taken (starting, reaching, completing) — never continuous background tracking.

Location consent

Location is only captured at the moment of a task action, with the field staff member aware it is happening (the app screen that triggers it), in line with India's Digital Personal Data Protection Act (DPDP). It is used to check attendance at a site and compute lateness — never sold, and never used to track someone outside of an assigned task.

Data isolation

Slary CRM is multi-tenant: many companies share one deployment, but each company's data is isolated by Postgres row-level security at the database layer, not only by application code. One company can never query another's records.

Where files are stored

Photos, signatures and documents uploaded to the product are stored in Cloudflare R2, a third-party object storage provider, under your company's own storage allotment.

We do not sell data

We do not sell or rent your company's data, or any personal data captured through the product, to anyone.

Exporting and deleting data

Every list in the product supports CSV export at any time. To request deletion of your account and associated personal data, use our account deletion page. To request deletion of your company's workspace and business data, contact us at hello@slary.in.

Contact

Questions about this policy: hello@slary.in.