Privacy policy

In effect from 04-10-2026 · Big Market 360 Private Limited

1. 1. Two kinds of personal data

   • Your account with us. The details of the people who sign up for and use EaseDesk. For this data, Big Market 360 Private Limited decides how it is used, and is the data fiduciary under the Digital Personal Data Protection Act, 2023.
   • The data you keep in EaseDesk. Your customers, vendors, staff and their documents. This data is yours. You decide what goes in and why; EaseDesk only processes it for you, as your data processor. The data processing addendum sets out how.

2. 2. What is collected

   • When you sign up: your name, email address, a password, and the name of your business. If you sign in with Google, your Google account’s name and email address.
   • When you set up your business: its address, GSTIN, PAN, bank details and logo, and a mobile number if you choose to verify one.
   • When you use the app: the records you and your team enter, the files you upload, and a log of who changed what and when (your audit log).
   • Technical details: the IP address, browser and device of each sign-in, the times of your sessions, reports of errors in the app, and counts of page visits. On the public website, Google Analytics also records which pages are read, the rough location and the kind of device, using its own cookies.
   • When you pay: the amount, date and payment reference. Card, UPI and bank details are entered on Razorpay’s page and never reach EaseDesk.
   • When you write to us: the name, email address, phone number and message you send through the contact form, email, phone or WhatsApp.

   Passwords are stored only as a one-way hash. Nobody at EaseDesk can read your password.

3. 3. What it is used for

   • To run EaseDesk for you: signing you in, keeping your records, making your documents and sending the emails you ask it to send.
   • To send service messages: sign-in codes, invitations, renewal reminders, and notices about your account and security.
   • To bill you and keep the accounts and tax records the law requires of us.
   • To keep the service secure: stopping misuse, finding faults and investigating incidents.
   • To help you when you ask for support.
   • To tell you about new features, only if you have not unsubscribed. Every such email has an unsubscribe link.

   Your data is never sold, never used for advertising, and never used to train AI models.

4. 4. The legal basis

   You give your details to use EaseDesk, and they are used for that purpose and for the purposes the law allows without separate consent, such as meeting legal duties and keeping the service secure. Product news is sent on your consent, which you may withdraw at any time by unsubscribing.

5. 5. Who it is shared with

   • The services that help run EaseDesk, each for its own job only: hosting, network and storage, email, SMS and sign-in, and payments. They are named on the sub-processors page.
   • The people in your own organisation, according to the roles its Owner gives them.
   • A government authority or court, when the law requires it. Where the law allows, the Owner is told first.

   It is shared with nobody else.

6. 6. Where it is kept

   The servers that run EaseDesk and its database are in India (Mumbai). Files and encrypted backups are kept in Cloudflare R2 storage. Email, SMS codes, notifications and the network that carries traffic to EaseDesk are run by the providers on the sub-processors page, some of which may process data outside India.

7. 7. How long it is kept

   • While your organisation is open: for as long as you use EaseDesk, including while it is read-only.
   • After you close it: for 90 days, during which it can be reopened. Then the organisation’s records and files are deleted.
   • Backups: every nightly backup is kept for 14 days, and one a month for a year, all encrypted. Deleted data leaves the backups as they age out.
   • Server logs: for 180 days, as the CERT-In directions require.
   • Our own invoices to you and payment records: for as long as tax and company law require.
   • Export files: a full export you ask for is deleted 7 days after it is made.

8. 8. How it is protected

   • Every connection to EaseDesk is encrypted (HTTPS).
   • Each business’s records are kept separate from every other business’s at the database level.
   • Backups are encrypted, and a backup is restored as a test every week.
   • Payment keys you connect are stored encrypted.
   • You can require two-step sign-in and set password rules for your whole team.
   • Our staff work from a console that shows your plan and usage, not your books. To help you, they open a support session that needs a stated reason, lasts at most an hour, shows a banner in the app, is recorded in your audit log and is emailed to the Owner. Staff sign in with two-step sign-in, and their access is reviewed every quarter.

   More detail is on the security page. No system is perfectly secure; if something goes wrong, section 10 applies.

9. 9. Your rights

   For your own personal data you may:

   • see it and correct it, in the app under Account, or by writing to us;
   • ask for a copy: the Owner can export everything in the organisation at any time;
   • ask for it to be erased, by closing the organisation or, for one user, by asking the Owner to remove you. Records the law requires to be kept, and your name on documents and audit entries you made, remain;
   • withdraw consent to product news by unsubscribing;
   • name another person to use these rights for you if you die or are unable to;
   • complain to our grievance officer, and after that to the Data Protection Board of India.

   If you are a customer, vendor or employee of a business that uses EaseDesk, that business holds your data. Please ask it first; we will help it answer you.

10. 10. If there is a breach

    If personal data is breached, the Owners of the affected organisations and the Data Protection Board of India are told without delay, with what happened, what data is affected and what is being done. Security incidents are also reported to CERT-In as its directions require.

11. 11. Cookies

    This website has no advertising scripts. It counts visits with Google Analytics, which sets two cookies of its own, and with Cloudflare’s own script, which uses none. Google Analytics is not loaded in the app, which uses only the cookies needed to keep you signed in. Every cookie, and how to stop the counting, is in the cookie policy.

12. 12. Children

    EaseDesk is for businesses. It is not meant for anyone under 18, and accounts are not knowingly opened for them.

13. 13. Changes to this policy

    When this policy changes, the date at the top changes with it. The Owner is told by email or in the app before a change that affects how your data is used.

14. 14. Grievance officer

    Sumit Kumar, grievance@easedesk.com. A complaint is acknowledged within 24 hours and resolved within 15 days. For anything else about your data, write to hello@easedesk.com.

Big Market 360 Private Limited, F211, First Floor, Commercial Hub, B Wing, Express Zone, Goregaon East, Mumbai 400063. GSTIN 27AALCB4590L1Z4. Write to hello@easedesk.com.