Policy

01 Who is responsible

Manas Bhadarka, sole proprietor of DWARONE, is the person responsible for personal data processed for our websites, marketing, accounts, and billing. Under Indian law that includes acting as Data Fiduciary under the Digital Personal Data Protection Act, 2023, as it applies. Depending on where you live, other roles may also apply (for example as a controller under the EU or UK GDPR). For Customer Data that you upload into a product on behalf of your organization, your organization is typically responsible for that data and we process it only to provide the product as instructed by you.

Grievance Officer (India): Manas Bhadarka. Contact for requests under this Policy worldwide: hello@dwarone.com.

02 Data we collect

Information you provide

• Account data — name, email, password (stored in hashed form), organization or workspace name, role, and profile details you choose to add.
• Billing data — billing name, address, tax identifiers, plan selection, and subscription status. Payment-card details are collected by our payment processors; we do not store full card numbers.
• Communications — messages you send to us (for example support or hello@dwarone.com), and preferences for product or marketing emails if you opt in.
• Customer Data — content, files, configuration, and other materials you or your users submit to a product.

Information collected automatically

• Usage and device data — pages and features used, timestamps, approximate location derived from IP address, browser type, device identifiers, referring URLs, and diagnostic logs.
• Cookies and similar technologies — to keep you signed in, remember settings, measure traffic, and secure the products. You can control cookies in your browser; some features may not work without them.

Information from others

We may receive information from payment processors (payment success or failure), identity or single-sign-on providers if you use them, and from people in your organization who invite you to a workspace.

03 How we use data

We use personal data to:

• create and manage accounts, workspaces, and access;
• provide, operate, maintain, and improve websites and products;
• process subscriptions, invoices, renewals, refunds, and failed-payment recovery;
• send transactional messages (receipts, security alerts, product notices);
• provide support and respond to inquiries;
• monitor abuse, fraud, security incidents, and Terms violations;
• comply with law, enforce agreements, and protect DWARONE, customers, and the public;
• with your consent where required, send product updates or marketing (you can unsubscribe).

We do not sell your personal data.

04 Payments and subscriptions

Paid products use third-party payment processors to handle cards, invoices, and recurring billing for customers in India and internationally. Those processors collect and process payment data under their own policies. We receive limited information needed to confirm payment, apply the correct plan, issue invoices (including GST tax invoices where Indian GST applies, and other tax invoices where we must collect tax), and handle cancellations or refunds.

If a payment fails, we may retry the charge, notify you, and suspend or downgrade access until billing is current.

05 When we share data

We share personal data only as needed with:

• Service providers who help us host, operate, secure, analyze, communicate, or bill — including providers that may be located in India or other countries — under contracts that limit their use of the data;
• Payment processors for checkout and subscriptions;
• Your organization — administrators of a workspace may see member names, emails, roles, and activity relevant to that product;
• Professional advisors and authorities when required by law or to protect rights and safety;
• A buyer if the DWARONE business is transferred or sold, with appropriate safeguards.

We do not share Customer Data with other customers or for unrelated advertising.

06 Cookies

We use strictly necessary cookies for authentication and security. We may use analytics cookies to understand how the website and products are used so we can improve them. Where the law of your country requires consent before non-essential cookies (for example in the EEA or UK), we will ask for that consent.

07 Retention

We keep personal data only as long as needed for the purposes above: while your account is active, for the life of a subscription plus a reasonable period for invoices and tax records, and as required by law. Customer Data is retained according to the product and your account status, then deleted or de-identified after closure, subject to backups and legal holds.

08 Security

We use technical and organizational measures designed to protect personal data, including encryption in transit, access controls, and hashed passwords. No method of transmission or storage is completely secure. You are responsible for using a strong password and for access you grant to others in your workspace.

09 International processing

DWARONE is established in India. To provide SaaS products to customers worldwide, we and our providers (for example hosting, email, analytics, and payment processors) may process personal data in India and in other countries.

If you use a product from outside India, your data will be transferred to India and may be transferred to other countries where our providers operate. Those countries may have data-protection rules that differ from the rules in your country. We use contractual and other safeguards with processors where the applicable law requires them (including standard contractual clauses or equivalent tools for transfers from the EEA or UK, when they apply).

By creating an account or using a product, you understand that your data will be processed in India and in other locations as described in this Policy, except where a mandatory law says we need a different legal basis for the transfer — in which case we will rely on that basis.

10 Your rights

Your rights depend on where you live. They may include the right to access, correct, delete, or export personal data, to withdraw consent, and to object to or restrict certain processing.

In India, that includes rights under the Digital Personal Data Protection Act, 2023 as it applies, and the right to raise a grievance with us and, where the law allows, with the Data Protection Board of India.

If you are in the European Economic Area, the United Kingdom, Switzerland, or another place with similar laws, you may have additional rights under the GDPR, UK GDPR, or local law, including the right to lodge a complaint with your local supervisory authority. If you are in California or another US state with a data-protection statute, you may have rights under that statute (for example to know, delete, or opt out of certain sharing, to the extent it applies to us).

To exercise these rights or to file a grievance, email hello@dwarone.com. We may need to verify your identity. If you use a product through an organization, we may redirect account or Customer Data requests to that organization’s administrator.

You can close your account in the product or by contacting us. Closing an account does not automatically erase billing, GST, or other tax records we must keep under applicable law.

11 Children

DWARONE products are not directed at children. We do not knowingly collect personal data from persons under 18 years of age, or under a higher age if the law of your country requires it. If you believe we have, contact us and we will delete it.

12 Product-specific notices

A DWARONE product may collect additional data needed for its purpose (for example operational logs, integrations you connect, or files you upload). That product may link to a short notice describing extra processing. Those notices form part of this Policy for that product.

13 Changes

We may update this Policy. The effective date will change when we do. For material changes, we will provide notice through the product, by email, or on this page. Continued use after the effective date means you accept the updated Policy.