Privacy Policy

1. Scope

This Privacy Policy describes how STALKUS DIGITAL processes information in connection with SUD TAX CRM / MY CLIENT HUB. It is a draft for customer transparency and counsel review — not a certification of compliance with every privacy statute.

LEGAL REVIEW REQUIRED: applicability of the Digital Personal Data Protection Act, 2023 (DPDP), Information Technology Act rules, and exact fiduciary/processor roles for each processing activity.

2. Roles (high level — subject to counsel)

For account and platform administration data (your users’ login identity, subscription metadata, operational logs), STALKUS DIGITAL typically decides how the SaaS is operated. For CRM business content you upload about your clients (leads, people, companies, etc.), you generally determine what to collect and why; we provide the software and hosting needed to store and process it on your instructions as part of the service.

LEGAL REVIEW REQUIRED: do not treat the above as a definitive DPDP “Data Fiduciary” / “Data Processor” determination.

3. Categories of information

• Account and administrator information (name, email, role).
• User authentication and session data.
• CRM records you create or import (leads, people/contacts, companies, opportunities, tasks, services-related fields).
• Website lead submissions routed through our intake when configured.
• Meta Lead Ads payload fields when a Meta integration is enabled for your tenant.
• Integration configuration metadata (not secrets returned to browsers).
• Technical logs, security events, and operational audit metadata.
• Cookie / similar technology data as described in the Cookie Policy.

Google Ads and WhatsApp integrations may be offered in future. We do not claim they are fully available in production unless enabled for your workspace. If enabled later, related data categories will be processed under updated notices.

4. Purposes

• Provide, secure, and support the SaaS.
• Authenticate users and protect tenants.
• Process lead intake and CRM workflows you configure.
• Operate commercial subscription / trial state in the Control Plane.
• Send transactional email (invites, password reset) via configured SMTP.
• Monitor abuse, troubleshoot incidents, and meet legal obligations.

5. Lawful basis / consent

LEGAL REVIEW REQUIRED: map each purpose to lawful basis / consent / legitimate use under applicable Indian law; invitation acceptance records acknowledgment of this Policy.

6. Retention and deletion

Account and operational records are retained while the workspace is active and for a limited period afterward for security, dispute, and backup purposes. CRM content retention primarily follows your use of the product. Cancellation does not automatically delete CRM data. Customer-requested deletion is handled through support / operator process.

LEGAL REVIEW REQUIRED: fixed retention schedules and breach-era deletion SLAs.

7. Access, correction, requests

Workspace administrators can manage many user and CRM records in-product. Privacy-related requests regarding platform-held account data may be sent to info@myclienthub.in. Requests about your end-clients’ data in the CRM are primarily your responsibility as the business that collected them.

8. Security

See the Security page for a customer-friendly summary of verified controls. No method of transmission or storage is 100% secure.

9. Subprocessors and third parties

Hosting, database, email SMTP, reverse-proxy/CDN, and CRM engine providers process data to deliver the service. Third-party marketing platforms (e.g. Meta) process data under their terms when you connect them.

10. International transfers

LEGAL REVIEW REQUIRED: disclose actual hosting regions and transfer safeguards once operator confirms infrastructure geography.

11. Children

The service is directed to businesses, not children. Do not knowingly submit children’s personal data except where your professional engagement lawfully requires it and you have a valid basis.

12. Security incidents

We maintain operational practices to detect and respond to security incidents affecting the platform. Customer notification content and timing will follow applicable law and counsel guidance.

LEGAL REVIEW REQUIRED: breach notification triggers and timelines under DPDP / contracts.

13. Contact

Privacy contact: info@myclienthub.in.