This Privacy Policy explains how Mystical Glow Hub (“MGH Books”, “we”, “us”, “our”) collects, uses, shares, retains and protects personal data when you use our website (web.mghaiapps.com) and the MGH Books application (books.mghaiapps.com) (together, the “Services”).
We are committed to handling your data responsibly and in accordance with applicable Indian laws, including the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Information Technology Act, 2000 and rules thereunder.
1. Who we are (Data Fiduciary)
Mystical Glow Hub is the provider of MGH Books and acts as the Data Fiduciary for personal data processed about you as a user of our Services. For business data you enter about your own customers, suppliers and employees, you are the Data Fiduciary and we act as a Data Processor on your behalf (see our Data Processing terms).
Contact: supportbooks@mghaiapps.com.
2. Information we collect
- Account information — your name, email, phone number, business name, GSTIN and password, provided when you sign up or set up your company.
- Business data you enter — invoices, parties (customers/suppliers), items, purchases, payments, payroll, accounting entries and related records you create using the Services.
- Usage & technical data — IP address, device/browser type, pages visited and actions taken, used to operate, secure and improve the Services.
- Cookies & similar technologies — see our Cookie Policy.
- Payment information — when you buy a plan, payment is processed by our payment gateway (Razorpay). We receive limited transaction details (such as plan, amount and status); we do not store your full card or banking credentials.
- Communications — messages you send us (e.g. support requests) and your responses to surveys or feedback.
3. How we use your information
- To provide, operate and maintain the Services and your account.
- To process your transactions and manage subscriptions and billing.
- To provide customer support and respond to your requests.
- To secure the Services, prevent fraud and abuse, and maintain audit trails.
- To improve and develop features, reliability and performance.
- To send service-related communications (and, with your consent where required, product updates).
- To comply with legal, regulatory and tax obligations.
4. Legal bases for processing
We process personal data on the basis of your consent, the performance of our contract with you (the Terms of Service), our legitimate uses as permitted under the DPDP Act, and to comply with legal obligations. Where we rely on consent, you may withdraw it at any time (which may affect your ability to use certain features).
6. Data storage, location & security
Your data is stored on secured servers. We use technical and organisational measures including encryption in transit (TLS), access controls, role-based permissions, audit logging and automated backups to protect your data.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your login credentials confidential and for maintaining your own periodic exports/backups of critical data.
7. Data retention
We retain personal and business data for as long as your account is active and as needed to provide the Services, and thereafter as required to comply with legal, tax and accounting obligations, resolve disputes and enforce our agreements. When data is no longer required, we delete or anonymise it. You may request deletion as described below, subject to legal retention requirements.
8. Your rights
Subject to applicable law, you have the right to:
- Access and obtain a summary of the personal data we process about you.
- Correct or update inaccurate or incomplete data.
- Request erasure of your data, subject to legal retention requirements.
- Withdraw consent where processing is based on consent.
- Nominate, in case of death or incapacity, another person to exercise your rights (as provided under the DPDP Act).
- Grieve and seek redress through our Grievance Officer (below).
10. Children
The Services are intended for businesses and are not directed to children. We do not knowingly collect personal data of children except as permitted by law and with verifiable parental consent where required.
11. Third-party links
The Services may link to third-party sites or services (such as the GST portal, payment gateway or our app). Their privacy practices are governed by their own policies, and we are not responsible for them.
12. Changes to this Policy
We may update this Policy from time to time. Material changes will be notified through the Services or by updating the “Last updated” date. Your continued use of the Services after changes take effect constitutes acceptance.
13. Grievance Officer & contact
In accordance with the IT Act and the DPDP Act, you may contact our Grievance Officer for any concerns or to exercise your rights:
Grievance Officer, MGH Books (Mystical Glow Hub) — Email: supportbooks@mghaiapps.com · Customer care: customercarebooks@mghaiapps.com · Phone: +91-98794-49746.
We will acknowledge and address grievances within the timelines prescribed under applicable law.