Privacy Policy

This Privacy Policy explains how DueMate ("we", "us", or "DueMate"), a proprietorship operated by Lakhit Almeida and registered under the Ministry of MSME, Government of India (Udyam Reg. UDYAM-GA-02-0041088), collects, uses, and safeguards information when you use the DueMate SaaS application and website at https://duemateapp.com.

1. Information We Collect

a. Account Information. When you sign in using Google authentication, we receive your name, email address, and profile picture from Google. We store this to identify your account.

b. Business & Customer Information. You enter customer details (name, phone number, optional email, business type, service intervals, service history, notes) so that DueMate can compute and send service reminders. This information is stored on our servers and used only to operate the reminder features for your account.

c. Usage Information. We collect basic operational logs such as request timestamps, IP address, browser type, and pages visited, to keep the service secure and diagnose issues.

d. Cookies. We use one HTTP-only session cookie ("session_token") to keep you logged in. We do not use tracking or advertising cookies.

2. Google Authentication

We use Google Sign-In (via Emergent-managed OAuth) so you don't need a separate password. We only receive the basic profile fields listed above. We do not access your Gmail, Google Drive, calendar, or contacts.

3. WhatsApp Integration

DueMate uses the Meta WhatsApp Business Cloud API to send reminder messages to phone numbers you enter for your customers. When you send a reminder:

• The customer's phone number and the message body are sent to Meta's Graph API to be delivered.
• We store a copy of the message, delivery status, and any reply on our servers to show you the history.
• Meta's use of this data is governed by Meta's privacy policy.

You are responsible for having appropriate consent from your customers to send them WhatsApp reminders.

4. Payment Processing

If you subscribe to a paid plan, payments are processed by our payment-gateway partner (for example, Razorpay or Cashfree, subject to availability). We do not store card numbers, CVV, or bank account credentials on our servers — that information is handled directly by the payment gateway under their PCI-compliant systems. We only receive a transaction reference and the plan you subscribed to. Refunds and cancellations are handled per our Refund & Cancellation Policy.

5. Third-Party Service Providers

We rely on the following categories of third-party services:

• Google for authentication.
• Meta (WhatsApp Business Cloud API) for outbound messaging and inbound reply webhooks.
• Cloud hosting and MongoDB for data storage.
• Payment gateway partners for subscription billing.
• AI providers (used only when you invoke the AI-suggest-interval feature; only the business type name is sent).

6. How We Use Information

• To operate DueMate: compute next-service dates, send WhatsApp reminders, and store history.
• To secure the service and detect abuse (rate limiting, signed webhooks).
• To respond to your support requests.
• To send you essential service updates about your account or subscription.

We do not sell your personal information or your customers' personal information to any third party.

7. Data Security

We use industry-standard practices including HTTPS/TLS in transit, HMAC-verified webhooks, HTTP-only cookies, per-tenant data isolation, and access-controlled databases. No system is perfectly secure, so we encourage you to use a strong Google account and to promptly report any suspected unauthorised access.

8. Data Retention

8. Data Retention & Account Deletion

We retain your account data and customer records for as long as your account is active. If you delete a customer inside the app, that record is removed from our active database. If you close your DueMate account, you may request deletion of your data by emailing us — we will delete or anonymise your data within a reasonable period, except where retention is required for legal, tax, accounting, or fraud-prevention purposes.

Payments are processed through our payment-gateway partner. See our Refund & Cancellation Policy for details on cancellation windows and refund eligibility.

9. Your Rights

You may access, update, or delete your own account information from within the DueMate application. You may also request a copy or deletion of your data by writing to us at support@duemateapp.com, or follow our step-by-step Data Deletion Instructions. We will respond within a reasonable time.

10. Children's Privacy

DueMate is a business tool intended for use by adults operating a service business. We do not knowingly collect information from children under 18. If you believe a child has provided us information, please contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The effective date at the top of this page will reflect the latest revision. Material changes will be communicated by email or an in-app notice.

12. Contact

Questions about this policy? Write to support@duemateapp.com.