Privacy Policy

OpsRail ("OpsRail," "we," "us," or "our") is operated by YSS Borkar, Margao, Goa, India. This Privacy Policy explains how we collect, use, and protect information when you use the OpsRail sales-to-dispatch CRM platform (the "Service").

Two kinds of data we handle

Account data — information about you and your organization as a customer of OpsRail: names, work email addresses, phone numbers, and login credentials of your team members, and your company's billing and contact details. For this data, OpsRail is the data controller.

Business data you process through OpsRail — the leads, customers, quotations, orders, inventory, delivery, and invoicing records your organization enters into the platform, including your own customers' names, contact details, addresses, and GST numbers. This data belongs to you. OpsRail acts only as a data processor on your behalf, under the terms of our Data Processing Addendum, and does not use it for any purpose other than providing the Service to you.

What we collect

• Account details you provide during onboarding (name, email, phone, company)
• Usage data: login times, actions taken in the app, audit logs (for security and support)
• Technical data: IP address, browser type, device information, and error diagnostics (if you enable error tracking)
• Business records you or your team input, as described above

How we use it

• To provide, maintain, and support the Service
• To authenticate users and enforce role- and territory-based access control
• To send transactional emails you trigger, such as emailing a quotation or invoice to your customer
• To diagnose and fix errors
• To comply with legal obligations

We do not sell your data, and we do not use your business data for advertising or profiling.

Who we share it with

We use a small number of subprocessors to run the Service:

• Supabase (database hosting, currently in the Singapore region) — stores all application data
• Your configured email provider — sends emails on your behalf when you use the email feature
• Sentry (error tracking) — receives error diagnostics only if you enable it

We do not share your data with any other third party except where required by law.

Data retention

We retain your data for as long as your account is active. Audit logs are retained for compliance purposes. On request, or upon termination of service, we will delete or return your data within a reasonable period, except where retention is required by law.

Security

We use encrypted connections (HTTPS/TLS), hashed passwords, role-based access control, and rate limiting on login. No system is perfectly secure, and we encourage you to use strong, unique passwords.

Your rights

Under India's Digital Personal Data Protection Act, 2023, and other applicable law, you may request access to, correction of, or erasure of your personal data, and may withdraw consent where applicable. To exercise these rights, contact us using the details below.

Cookies

Our marketing website may use minimal cookies for analytics. The OpsRail application itself uses only essential session cookies required for login.

Changes to this policy

We may update this policy from time to time. Material changes will be communicated to account administrators by email.

Contact / Grievance Officer

YSS Borkar, Margao, Goa, India
Email: contact@yoursoftwaresupplierborkar.com