Celonix is a business platform for mobile phone shops, spare-parts dealers and repair technicians. This policy explains what personal data we collect, why we collect it, how it is protected, and the control you have over it. It is written to align with India's Digital Personal Data Protection Act, 2023.

1. Who processes your data

Celonix is the data fiduciary for account data you give us directly (sign-up, sign-in, billing). Your shop, dealer or technician workspace also contains business records about your customers and staff — for that data you are the controller and Celonix is the processor, storing and securing it on your instruction.

2. What we collect

Account data — name, email address, phone number, city, shop name, password (stored only as an Argon2id hash), Google account identifier if you use Google sign-in, and account status (trial, plan, approval).

Business records you enter — customer names and phone numbers, sales and invoices, khata (udhaar) credit balances and collections, repair job cards (device model, IMEI, fault notes), second-hand phone purchases with seller ID details, inventory, expenses, suppliers, and staff records such as attendance, salary and ID documents.

Payments — subscriptions are processed by Razorpay. We store the subscription status and payment record; card, UPI and net-banking credentials are entered into Razorpay's checkout and never reach our servers.

Communications — transactional email from noreply@celonix.in (verification, sign-in codes, password resets, receipts and notices). Khata and repair reminders your shop sends open WhatsApp with the customer's number — the message goes from your phone, through WhatsApp, not through us.

Technical data — sign-in sessions and device identifier, security cookies, IP address in server logs, and an append-only audit trail of sensitive actions (logins, approvals, edits) for fraud detection and dispute resolution.

Website visit counts — on this public site we count page visits without cookies: the page, the referring site, and phone or computer. A visitor is counted as a one-way hash that changes every day, so a visit can't be traced back to you or linked across days.

3. Why we collect it

To provide the service you asked for: running your account, billing your plan, rendering your shop data to you and your staff, verifying email ownership, securing accounts, and sending service messages. We do not sell personal data and we do not run advertising trackers on our sites.

4. Who we share it with

Only the processors needed to run the service: our hosting provider (servers), Razorpay (payments), Google (when you choose Google sign-in), and our email provider for transactional mail. Dealer–shop business (catalogues, orders, ledgers) is shared between the two parties of that transaction, with both sides' consent. We may disclose data when legally required by Indian law or a competent authority.

5. How it is protected

TLS on every connection, password hashing with Argon2id, two-step verification by email one-time codes, single-use password reset links, rate limiting and brute-force protection, strict browser security headers, least-privilege access to production, and encrypted backups. Sensitive actions are recorded in an audit log that cannot be edited or deleted.

6. How long we keep it

Account and billing data: while your account is active and for 7 years where accounting law requires. Business records: as long as your account exists. Backups rotate out within 30 days. When you close your account we delete or anonymise your data within 30 days, except what we must retain for legal or accounting obligations.

7. Your rights

You can access and export your data (reports and CSV exports are built into the app), correct it from Settings, and request deletion by writing to us. You can withdraw consent (for example, disconnect Google sign-in or close your account) at any time — processing needed to run your active subscription and meet legal duties may continue until then. If you are a shop's customer or staff member and want your data corrected or erased, contact your shop first — they control those records; we will help on their instruction or where the law directs us.

8. Children

Celonix is a business tool and is not offered to anyone under 18.

9. Changes to this policy

If we change this policy materially we will notify account holders by email before the change takes effect. The live version always lives at this page.

10. Contact & grievances

Questions, data requests or grievances: support@celonix.in — we respond within 7 working days.