Privacy Policy

1. Introduction

This Privacy Policy explains how Enerscript Technologies Pvt Ltd ("Mudratrack", "we", "us") collects, uses, stores, shares, and protects your information when you use the Mudratrack website and platform. We are committed to handling your data responsibly and in accordance with applicable Indian law, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023.

By using Mudratrack, you consent to the practices described in this policy.

2. Information We Collect

2.1 Information you provide

• Account details: name, business name, email address, mobile number, password (stored in hashed form).
• Business and tax details: GSTIN, PAN, business address, state code, bank details you choose to print on invoices, business logo.
• Customer and transaction data: your customers' names, addresses, GSTINs, contact details, invoice line items, HSN/SAC codes, tax rates, amounts, and payment records that you enter or upload.
• Support communications: messages you send us by email, WhatsApp, or through the in-app AI chat assistant.

2.2 Information collected automatically

• Device and browser type, operating system, IP address, and approximate location.
• Log data such as pages visited, features used, timestamps, and error reports.
• Cookies and similar technologies used to keep you logged in, remember preferences, and measure usage.

2.3 Payment information

Wallet recharges are processed by our payment gateway partner Razorpay. Your card number, CVV, UPI PIN, and net-banking credentials are entered directly on Razorpay's PCI-DSS compliant systems. Mudratrack never receives or stores your full payment credentials. We store only a transaction reference, amount, date, status, and payment method type for accounting and reconciliation.

3. How We Use Your Information

Purpose	What it involves
Providing the service	Creating and storing invoices, generating e-Invoices (IRN) and e-Way Bills, producing reports, maintaining your wallet balance
Delivering documents	Sending invoices and reminders to your customers via WhatsApp and email on your instruction
Statutory transmission	Transmitting invoice data to the Government of India's IRP and e-Way Bill systems through our authorised GST Suvidha Provider
Payments	Processing wallet recharges, refunds, and reversals through Razorpay
Support	Responding to your queries and troubleshooting issues
Improvement & security	Diagnosing errors, preventing fraud and abuse, improving features and performance
Legal compliance	Meeting tax, audit, accounting, and law-enforcement obligations

We do not sell, rent, or trade your personal or business data to any third party for marketing purposes.

4. How We Share Information

We share data only as necessary, with:

• Government systems: the Invoice Registration Portal (IRP) and e-Way Bill portal, via our authorised GST Suvidha Provider, strictly for generating the documents you request.
• Razorpay: for processing wallet recharges and refunds.
• Communication providers: WhatsApp Business API and email delivery providers, to send the documents you instruct us to send.
• Cloud infrastructure providers: for secure hosting, storage, and backups.
• Professional advisers and authorities: where required by law, court order, or a valid regulatory request.

All service providers are bound by confidentiality and data-protection obligations, and may use your data only to perform the service on our behalf.

5. Data Security

• All data in transit is encrypted using TLS/HTTPS.
• Passwords are stored using industry-standard one-way hashing; we cannot read them.
• Access to production data is restricted to authorised personnel on a need-to-know basis.
• Regular backups, activity logging, and monitoring are in place.

While we apply reasonable security safeguards, no system is completely secure. You are responsible for keeping your login credentials confidential.

6. Data Retention

We retain your account and invoice data for as long as your account is active, and thereafter for the period required to comply with Indian tax and accounting law (generally up to 8 years for financial records). You may request deletion of your account at any time; we will delete or anonymise data that we are not legally obliged to retain.

7. Your Rights

Subject to applicable law, you may:

• Access and obtain a copy of the personal data we hold about you.
• Correct or update inaccurate or incomplete data — most details are editable directly in your account settings.
• Request deletion of your account and associated data.
• Withdraw consent for non-essential processing, such as marketing communications.
• Export your invoices and business data.

To exercise any of these rights, write to hello@mudratrack.com. We will respond within 30 days.

8. Cookies

We use essential cookies to keep you signed in and maintain session security, and analytics cookies to understand how the Platform is used. You can control cookies through your browser settings, though disabling essential cookies will prevent you from logging in.

9. Children's Privacy

Mudratrack is intended for businesses and is not directed at children. We do not knowingly collect personal data from anyone under 18 years of age.

10. Changes to this Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest revision. Material changes will be communicated by email or an in-app notice.

11. Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please contact us: