Privacy Policy

This Privacy Policy explains how Cartilo Business Private Limited ("Cartilo", "we", "us" or "our"), a company incorporated in India with its registered office at D-59/59, Mahmoorganj, Varanasi, Uttar Pradesh 221010, India, collects, uses, shares and protects personal information when you use this website, our software products (including Skolio at skolio.in and The Case Diary at thecasediary.in), and our website and mobile app development services (together, the "Services").

By using our Services, you agree to this Privacy Policy. It is published in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023.

1. Information we collect

Information you give us

• Contact details: name, email address, phone number, company name and address when you send an enquiry, request a proposal or sign up.
• Account information: login details and profile information for our SaaS products.
• Billing information: billing name, address and GSTIN for invoicing. Card, UPI and bank details are entered directly with our payment gateway (Razorpay) and are never stored on our servers.
• Project information: requirements, content, files and feedback you share for a development project.
• Customer data: data that schools, advocates or businesses enter into our SaaS products, such as student or case records. This data belongs to our customer, and we process it only on their behalf.

Information collected automatically

• Device and browser type, IP address, pages visited, and date and time of visit.
• Cookies and similar technologies used to keep you signed in, remember preferences and understand website usage.

2. How we use your information

• To provide, operate and support our Services and your account.
• To reply to enquiries, prepare proposals and deliver projects.
• To process payments, issue GST invoices and handle refunds.
• To send service messages such as invoices, renewal reminders, security alerts and product updates.
• To improve our website and products and to fix problems.
• To prevent fraud and misuse, and to comply with legal obligations.

We will send promotional messages only with your consent, and you can unsubscribe at any time.

3. How we share information

We do not sell or rent your personal information. We share it only:

• With service providers who help us run our Services, such as payment gateways (Razorpay), cloud hosting, email and SMS providers. They may use the data only to provide their service to us.
• For legal reasons, when required by law, court order or a government authority, or to protect our rights, users or the public.
• In a business transfer, such as a merger or acquisition, in which case this policy continues to apply.

4. Payments

Online payments are processed by Razorpay Software Private Limited and other RBI-compliant payment partners. Your card, UPI and net-banking details go directly to them over encrypted connections and are handled according to their privacy policy and PCI-DSS standards. We receive only the transaction reference, amount and status.

5. Cookies

We use essential cookies for sign-in and security, and optional analytics cookies to understand how the website is used. Our pricing calculator and proposal maker save your selections in your own browser (local storage) so you don't lose them. This data is not sent to us unless you choose to email it. You can clear or block cookies in your browser settings, but some features may then stop working.

6. Data security

We use reasonable security practices, including HTTPS encryption, access controls, regular backups and secure coding standards. No method of transmission or storage is 100% secure, but we work hard to protect your data and will notify you and the authorities of any data breach as required by law.

7. Data retention

We keep personal information for as long as your account is active or as needed to provide the Services, and afterwards as required for legal, tax and accounting purposes (generally up to 8 years for invoices). Customer data in our SaaS products can be exported by the customer and is deleted within 90 days of account closure, unless the law requires us to keep it longer.

8. Your rights

You can ask us to:

• Access the personal information we hold about you.
• Correct or update inaccurate information.
• Delete your information, subject to legal requirements.
• Withdraw consent for marketing messages.
• Nominate another person to exercise your rights in case of death or incapacity.

Email cartiloindia@gmail.com with your request. We respond within 30 days.

9. Children's data

Our website is not meant for children. Skolio processes student information only on behalf of schools, who are responsible for obtaining any parental consent the law requires. We do not use children's data for advertising or tracking.

10. Third-party links

Our website may link to other websites. We are not responsible for their privacy practices, so please read their policies.

11. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top shows when it was last changed. Significant changes will be announced on this website.

12. Grievance Officer & contact

We acknowledge complaints within 48 hours and resolve them within 30 days.