Privacy policy

1. Who we are

Plumo is a monthly website service for small businesses, made by Dacway, 242 Jodbhavi Peth, Solapur 413002, Maharashtra, India ("Plumo", "we", "us").

This policy explains what personal data we collect, why, and the choices you have. It is written for India's Digital Personal Data Protection Act, 2023 (the "DPDP Act"). Under that law, we are the Data Fiduciary for the data you give us about yourself.

Questions? Write to privacy@getplumo.in or WhatsApp +91 90968 96464.

2. What we collect

When you use Plumo

Account details: your name, email address and mobile number.
Business details: your business name, address, opening hours, photos, logos, text and anything else you send us for your website.
Messages: change requests and chats with us in the Plumo app, on WhatsApp or by email.
Google connections: if you connect your Google Business Profile or other Google services, the details needed to link them.

Enquiries from your website visitors

When someone fills the enquiry form on your website, we receive their name, contact details and message and pass them to you in the Plumo app and by email. We handle this data on your behalf: for these enquiries, you (the business) decide why the data is collected, and we act as your Data Processor.

Usage data

Basic technical data such as device type, browser, pages visited, and the date and time of visits. We use it to keep the service working and secure and to understand how it is used.

If you open a getplumo.in link shared by a Plumo sales agent, we keep a small cookie with that agent's code for 30 days, so the agent is credited if you ask for a free preview. It holds no personal data.

Guides and updates by email

If you sign up for our guides or updates on getplumo.in, we keep your email address to send them. You can unsubscribe anytime.

Payments

Payments and autopay are handled by Razorpay. We receive the payment status, amount, date and a reference number. We never see or store your full card or bank details.

3. Why we use your data

To build your free preview and your website, and keep it online.
To make the updates you ask for and reply to your messages.
To deliver your website's enquiries to you.
To bill you, collect payment by autopay and keep accounts.
To send service messages, such as payment reminders and security notices.
To keep Plumo secure and prevent misuse.
To meet our legal duties, such as tax record-keeping.

We do not sell your personal data. We do not use it for advertising by others.

4. Our legal basis

We use your personal data on two grounds allowed by the DPDP Act:

Consent: you give it when you sign up, ask for a preview or contact us. You can withdraw consent at any time by writing to us. Withdrawing doesn't affect what we did before, but we may not be able to keep providing the service.
Legitimate uses: where the law allows us to use data without separate consent, for example data you share voluntarily for a service you asked for, or to comply with a law or a court order.

We share data only with service providers who help us run Plumo, and only as much as they need:

Hosting and database providers, who store your website and account data.
Payment processor: Razorpay, for payments and autopay.
Email and SMS providers, who deliver enquiries, reminders and service messages.

These providers must protect your data and use it only for our instructions. Our website hosting and database are in India (Mumbai). Some providers, such as our email service, may process data outside India. We may also share data when the law requires it, for example with tax authorities or under a court order.

6. How long we keep it

Account and website data: while your account is active, and for 30 days after you delete your account. After that it is deleted from our systems [and from backups within the backup cycle — confirm].
Bills and payment records: 8 years, because tax law requires it.
Website enquiries: while your account is active, then deleted with your account.

7. Your rights

Under the DPDP Act you have the right to:

Access: get a summary of the personal data we hold about you and how we use it.
Correction: fix data that is wrong or incomplete, and update it.
Erasure: ask us to delete your data when it is no longer needed, unless the law requires us to keep it. You can also delete your account.
Grievance redressal: complain to our Grievance Officer (below) and get a reply.
Nominate: name another person to use these rights for you if you die or become unable to.

To use any of these rights, email privacy@getplumo.in from your registered email. We may ask you to confirm who you are.

If you are a visitor who sent an enquiry through a business's website, please contact that business first. We will help them answer your request.

8. Children

Plumo is for business owners aged 18 or over. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us their data, write to us and we will delete it.

9. How we protect your data

We use secure https connections, access controls, and backups. Only people who need it to do their work can see your data. No system is perfectly secure, but if a breach affects your personal data, we will tell you and the Data Protection Board of India as the law requires.

10. Grievance Officer

If you have a concern or complaint about your personal data, contact our Grievance Officer:

Vipul Nashte, Dacway, 242 Jodbhavi Peth, Solapur 413002, Maharashtra. Email: hello@getplumo.in

We will acknowledge your complaint and reply within the time the law requires.

11. Data Protection Board of India

If you are not satisfied with our reply to your complaint, you can complain to the Data Protection Board of India, set up under the DPDP Act.

12. Changes to this policy

We may update this policy from time to time. When we make an important change, we will tell you in the Plumo app or by email before it takes effect. The date at the top shows when it last changed.

This page is a plain-language summary prepared for Plumo; have it reviewed by your lawyer/CA before publishing.