Privacy Policy

This Privacy Policy describes how AH&V Software ("AH&V", "we", "us", "our"), based in Sri Ganganagar, Rajasthan, India, handles data through TMS — our tailoring and boutique management platform, comprising the tenant admin web dashboard, the Android/iOS staff app, and each tenant's e-commerce storefront (together, the "Service").

1. Who controls your data

TMS is business software that we license to individual boutiques, tailoring studios, and garment businesses ("Tenants"). If you are a staff member using the staff app, or a customer of a Tenant's storefront, your account and the data in it belong to that Tenant's business — the Tenant is the data controller, and AH&V Software acts as their data processor / service provider, operating the infrastructure on their behalf under a business agreement. Requests about your data (access, correction, deletion) should go to the Tenant business you work for or ordered from — our Account Deletion page routes your request to them directly.

For the SaaS marketing site (this website), the platform admin accounts we issue to Tenants, and inquiries submitted through our contact form, AH&V Software is the data controller.

2. What we collect

Depending on which part of the Service you use, we (on the Tenant's behalf) process:

• Account & profile data: name, employee ID, email, phone number, address, gender, date of joining, profile photo, and identity/ID-proof documents you or your employer upload.
• Location data: GPS coordinates when you check in/out of attendance, start or complete a task, or record a client visit — used for attendance verification (geofence/IP/face-based, depending on what your Tenant enables) and to calculate distance travelled during work hours.
• Camera & photo/video data: order photos, task-completion proof photos/videos, expense-claim proof, ID-proof scans, profile pictures, and images/videos shared in chat.
• Microphone/audio data: voice messages you record in chat or task discussions.
• Face-attendance data (only if your Tenant enables this feature): a facial enrollment used to verify attendance check-ins. This is processed to confirm identity for attendance purposes only.
• Communications: chat messages, task-discussion messages, and internal notices.
• Order & transaction data: for storefront customers — items ordered, measurements, delivery address, order status, and payment status (we do not store your card number; card/UPI payments are processed directly by Stripe or Razorpay).
• Payroll data (staff only): salary structure, attendance-linked pay calculations, and payslips, visible to you and your Tenant's authorized admins.
• Device & technical data: device identifiers, push-notification tokens, IP address, browser/app user agent, and app crash/diagnostic logs.
• Optional website analytics: if you allow analytics on our public website, we store a rotating random visitor ID, a session ID, visited page paths, referring site and path, broad device type, browser/operating-system category, and approximate time a page stayed visible. Analytics does not store your raw IP address or full browser user-agent. You can reject analytics; the choice is remembered in this browser for up to 180 days.

3. How we use it

To operate the Service the Tenant licenses: creating and managing accounts; tracking orders, tasks, and production; verifying staff attendance and location where enabled; processing payments and payroll; sending order, task, and attendance notifications (in-app, push, email, and WhatsApp); preventing fraud and abuse (e.g. rate-limiting logins); and improving reliability (crash reporting). With your choice, we also use first-party website analytics to understand aggregate page traffic, device mix, and page engagement. We do not sell your data, and we do not use it to build advertising profiles.

4. Who we share it with

• Your Tenant's own staff/admins with the appropriate role and permissions within their business.
• Firebase / Google — push notifications (FCM) and, for the staff app, crash reporting (Crashlytics).
• Meta / WhatsApp Business API — order and attendance-related notifications, where a Tenant enables WhatsApp updates.
• Stripe and/or Razorpay — payment processing for online orders and subscription billing. We never see or store full card numbers.
• Email delivery providers — for transactional email (order updates, password resets, credentials).
• Law enforcement or regulators, only where required by applicable law.

We do not sell data to third parties or share it for third-party advertising.

5. Data retention

We retain data for as long as your account is active with your Tenant, and afterward for as long as needed to comply with legal, tax, and accounting obligations (for example, invoices, payroll records, and payment records are typically retained for the period required by Indian tax and labour law) or to resolve disputes. When you request deletion (see below), we delete or de-identify data that isn't subject to such a retention requirement.

Optional public-site analytics is retained for up to 90 days and then deleted. The random browser visitor identifier is rotated after 90 days. You can withdraw your analytics choice by clearing this site's browser storage; rejecting analytics stops future collection in that browser.

6. Your rights, and requesting deletion

You can ask to access, correct, or delete your account and data at any time. Staff app users can do this in-app (Account → Delete My Account) while logged in, or anyone — staff or storefront customer, with or without the app installed — can use our public Account Deletion request page. Requests go to your Tenant's admin, who reviews and completes them (some records may be retained as described in Section 5, in which case we'll tell you what and why).

7. Security

Each Tenant's business data is isolated in its own database. Passwords are hashed, not stored in plain text. Sensitive files are served through access-controlled, time-limited links. We use HTTPS in production and apply industry-standard security practices; no system is 100% secure, and we continuously work to improve ours.

8. Children's privacy

TMS is business software intended for adults operating or working at a boutique/tailoring business. It is not directed at children, and storefront purchases require the buyer to be of legal age to contract under applicable law.

9. Changes to this policy

We may update this policy as the Service changes. Material changes will be reflected by updating the "Last updated" date above.

10. Contact us

Questions about this policy, or about how a specific Tenant handles your data: email help40617@gmail.com. AH&V Software, Sri Ganganagar, Rajasthan 335001, India.

This policy describes our actual data practices to the best of our knowledge as a software provider; it is not a substitute for your own legal advice, and Tenant businesses remain responsible for their own compliance obligations (e.g. under India's Digital Personal Data Protection Act) as the controller of their staff's and customers' data.