Privacy Policy

This Privacy Policy applies to the Tiles Ex Doc Software as a Service ("Service") provided by Tiles Ex Doc Private Limited ("we", "our", or "us"). We are committed to protecting the privacy and security of your data. This policy is governed by the Digital Personal Data Protection Act, 2023 (DPDP Act, India) and other applicable international data protection frameworks.

Tiles Ex Doc operates primarily as a Data Processor on behalf of our clients (the "Data Fiduciary"). When you input your buyers', suppliers', or employees' data into Tiles Ex Doc, you are the Data Fiduciary. We only process this data according to your instructions to provide the Service. We do not use your business data for our own purposes, nor do we sell or monetize it.

We collect and process the following data categories:

• Account Data: Name, business email, contact number, company name, GSTIN, and billing information (processed as Data Fiduciary).
• Service Data: Shipment records, export documents, financial ledgers, and catalog data (processed strictly as Data Processor).
• Technical Data: IP addresses, browser types, session durations, and error logs to ensure platform security and stability.

We use authorized sub-processors to deliver the Service. These include:

• Cloud Hosting: Data is hosted securely on Amazon Web Services (AWS) or equivalent enterprise infrastructure located within India, ensuring data localization compliance.
• Payment Gateways: RBI-compliant payment aggregators for subscription processing.

All sub-processors are bound by strict confidentiality and data processing agreements.

Tiles Ex Doc implements industry-standard security measures including AES-256 encryption at rest, TLS 1.2+ for data in transit, continuous vulnerability monitoring, and role-based access control (RBAC) to protect against unauthorized access, alteration, disclosure, or destruction of your data.

Service Data is retained as long as your subscription is active. Upon cancellation or termination of the agreement, you have 30 days to export your data. After 30 days, all Service Data is securely and permanently purged from our primary servers and backups in compliance with the DPDP Act.

In accordance with the DPDP Act, 2023, if you have any questions, grievances, or requests regarding your data, please contact our Grievance Officer:

Grievance Officer
Email: privacy@tilesexdoc.com
Address: Tiles Ex Doc Private Limited, Morbi, Gujarat — 363641, India