Introduction

This Privacy Policy explains how Softmerce ("we," "us," or "our"), operated by Accordex Private Ltd., collects, uses, stores, and protects your personal information when you use our software-as-a-service (SaaS) platform and related business management solutions.

Your privacy is important to us. This policy applies to all users, businesses, administrators, employees, and end-customers who interact with any Softmerce product or service.

---

Information We Collect

We collect different types of information to provide and improve our services:

1. Account and Business Information

• • Company/Organization name and details
• • Business owner/administrator information (name, email, phone number)
• • Business registration details and tax information (GST, PAN, etc.)
• • Industry type and business category
• • Billing and payment information
• • User roles and access permissions

2. Operational Data

• • Customer and client contact information
• • Transaction records and financial data
• • Employee information (for HR and payroll features)
• • Inventory and product information
• • Project and task management data
• • Appointment and scheduling information
• • Communication logs and correspondence
• • Documents, files, and media uploads

3. Technical and Usage Information

• • IP addresses and device information
• • Browser type and operating system
• • Login timestamps and session duration
• • Feature usage and interaction patterns
• • Error logs and diagnostic data
• • Cookies and tracking technologies

4. Communications

• • Customer support inquiries and tickets
• • Email correspondence
• • Feedback and feature requests
• • Survey responses

5. Third-Party Integrations

• • Data from connected services (payment gateways, SMS providers, email services)
• • API authentication credentials (encrypted)
• • Social media and marketing platform integrations

---

How We Use Your Information

We process your information for the following purposes:

Service Delivery

• • To create and manage your account
• • To provide platform features and functionality
• • To enable data synchronization across integrated modules
• • To manage user roles, permissions, and access controls
• • To execute automated workflows and notifications

Business Operations

• • To process subscriptions, invoices, and payments
• • To provide customer support and technical assistance
• • To notify you about updates, maintenance, and new features
• • To verify identities and prevent unauthorized access

Analytics and Improvement

• • To understand usage patterns and improve user experience
• • To monitor system performance and reliability
• • To develop new features and enhance existing functionality
• • To conduct product testing and optimization

Compliance and Security

• • To comply with applicable laws, regulations, and tax requirements
• • To detect and prevent fraud, security breaches, and abuse
• • To maintain necessary audit trails and records
• • To protect the rights and safety of our users

Marketing and Communication (With Consent)

• • To send newsletters, product updates, and promotional materials
• • To provide educational content and best practices
• • To recommend relevant features based on your usage

---

Legal Basis for Processing

We process your personal data based on:

• • Contractual Necessity: To fulfill our service agreement with you
• • Legitimate Interests: To improve our products, ensure security, and operate our business
• • Legal Obligations: To comply with applicable laws and regulations
• • Consent: For marketing communications and optional features (which you can withdraw anytime)

---

How We Protect Your Information

Your data security is our top priority:

Technical Security Measures

• • Encryption: All sensitive data encrypted in transit (SSL/TLS) and at rest (AES-256)
• • Secure Infrastructure: Data hosted on secure cloud servers with redundancy and backup
• • Access Controls: Multi-factor authentication and role-based access restrictions
• • Network Security: Firewalls, intrusion detection systems, and DDoS protection
• • Regular Security Audits: Penetration testing and vulnerability assessments

Organizational Security Measures

• • Limited Access: Only authorized personnel can access customer data
• • Employee Training: Regular security awareness and data protection training
• • Incident Response: 24/7 monitoring and rapid response protocols
• • Vendor Management: Strict security requirements for third-party providers

Payment Security

• • We do NOT store complete credit/debit card information
• • All payments processed through PCI-DSS compliant payment gateways
• • Financial data protected with bank-level security standards

Data Segregation

• • Customer data segregated by organization to prevent cross-contamination
• • Isolated databases for enhanced security
• • Role-based access ensures users only see authorized information

---

Data Retention

We retain your information based on the following criteria:

Active Accounts

• • Data retained as long as your account remains active
• • Available for immediate access and use

Deleted Accounts

• • Grace Period: 30 days to recover deleted data
• • Permanent Deletion: After 30 days, data is securely deleted from active systems
• • Backup Archives: May remain in encrypted backups for up to 90 days

Legal Requirements

• • Financial records retained for 7 years (Indian tax law compliance)
• • Transaction records retained as per legal requirements
• • Audit logs retained for 1 year

You can request deletion of your data at any time by contacting contact@softmerce.com, subject to legal retention obligations.

---

Data Sharing and Disclosure

We do NOT sell your personal information to third parties.

We may share your information only in the following circumstances:

With Your Consent

• • When you explicitly authorize data sharing
• • When you enable integrations with external services

Service Providers

We share data with trusted third-party vendors:

• • Cloud hosting and infrastructure providers
• • Payment gateways and banking partners
• • Email, SMS, and communication service providers
• • Analytics and monitoring tools
• • Customer support platforms

All providers are bound by strict confidentiality agreements and use data only for specified purposes.

Legal Requirements

We may disclose information when required by:

• • Court orders, subpoenas, or legal processes
• • Government agencies or regulatory authorities
• • Law enforcement investigations
• • Tax authorities for compliance purposes

Business Transfers

In the event of merger, acquisition, or sale:

• • Users notified at least 30 days in advance
• • Option to delete account before transfer
• • Acquiring entity bound by this Privacy Policy

Protection and Safety

To protect rights, property, or safety of:

• • Softmerce and Accordex Private Ltd.
• • Our users and customers
• • The general public
• • To prevent fraud or illegal activities

---

Cookies and Tracking Technologies

We use cookies to enhance your experience:

Types of Cookies

Essential Cookies (Required):

• • Session management and authentication
• • Security and fraud prevention

Functional Cookies:

• • Remember preferences and settings
• • Save form data and user inputs

Analytics Cookies:

• • Understand usage patterns
• • Track performance metrics

Marketing Cookies (With Consent):

• • Deliver targeted content
• • Measure campaign effectiveness

Cookie Management

Control cookies through:

• • Browser settings
• • Our cookie preference center
• • Opt-out tools

Note: Disabling essential cookies may limit functionality.

---

Your Rights and Choices

You have the following rights:

Access and Portability

• • View all personal information we hold
• • Download your data in common formats
• • Transfer data to another provider

Correction and Updates

• • Update or correct inaccurate information
• • Edit profile and business details

Deletion

• • Delete your account and associated data
• • Request erasure of personal information (where legally permissible)

Consent Management

• • Opt-out of marketing communications
• • Manage email, SMS, and notification preferences
• • Revoke third-party integration access

Restriction and Objection

• • Limit how we use your data
• • Object to data processing
• • Request human review of automated decisions

How to Exercise Your Rights

• 1. Log in to your account and visit Settings
• 2. Email us at contact@softmerce.com
• 3. Contact our support team

We will respond within 30 days.

---

International Data Transfers

Primary Location

Softmerce operates from India. Data is primarily processed and stored on servers in India.

Transfers Outside India

If you access from outside India:

• • Your information will be transferred to and processed in India
• • We implement appropriate safeguards for international transfers
• • Standard Contractual Clauses used where applicable

By using Softmerce, you consent to data transfer and processing in India.

---

Children's Privacy

Softmerce is a business software platform not intended for individuals under 18 years of age.

• • We do not knowingly collect information from minors
• • Users must be at least 18 years old
• • If we discover data from minors, it will be deleted immediately
• • Contact us at contact@softmerce.com if you believe we have collected such data

---

Changes to This Privacy Policy

We may update this policy to reflect:

• • Changes in products or services
• • Legal or regulatory requirements
• • Industry best practices

Notification Process

When we make material changes:

• • Update the "Last Updated" date
• • Send email notification to users
• • Display notice in your dashboard
• • Provide 30 days' notice (where required)

Your continued use after changes constitutes acceptance.

---

Third-Party Links and Services

Softmerce may link to third-party websites and services.

Important:

• • We are not responsible for third-party privacy practices
• • Third parties have their own privacy policies
• • Review their policies before use
• • We welcome feedback about integrations

---

Data Breach Notification

In the event of a data breach:

• • Immediate investigation and impact assessment
• • Affected users notified within 72 hours
• • Details and remediation steps provided
• • Regulatory notification as required
• • Appropriate remediation measures offered

---

Governing Law and Jurisdiction

This Privacy Policy is governed by the laws of India.

Disputes subject to exclusive jurisdiction of courts in Bangalore, Karnataka, India.

---

Contact Us

For questions or requests regarding this Privacy Policy:

Accordex Private Ltd.

Product: Softmerce

Email: contact@softmerce.com

Website: www.softmerce.com

Address: 322, Avenue 26,

Prestige augusta Golf Village, Anagalapura,

Bengalore, KA 560077

Phone: +91 9486961040

Your Trust Matters

At Softmerce, we are committed to:

• • Transparency: Clear communication about data use
• • Control: Giving you choices about your information
• • Security: Industry-leading protection practices
• • Compliance: Meeting all legal requirements
• • Responsibility: Ethical data use

---

Start Your Digital Business Journey

Try Softmerce Today – All-in-One Business Management Platform

It's Free to Try!

---

By using Softmerce, you acknowledge that you have read, understood, and agree to this Privacy Policy.