This Privacy Policy explains how Digital Mitro ("we", "us", "our") collects, uses, shares, and protects information through the Digital Mitro CRM system — the Admin, Employee, and Client web portals, and the Digital Mitro mobile app (together, the "Service"). It applies to admins, employees, and clients who use the Service, and to the business contacts (leads and callback details) that employees enter into it.
When an account is created (by a SuperAdmin/Admin, or by self-registration for Client accounts), we collect: name, email address, phone number, a hashed password, and, optionally, a profile photo and job description.
When an employee clocks in or out, we record the timestamp and the device's IP address. We do not collect GPS or precise location data for attendance.
Direct messages, channel/group messages, and any files, images, or documents shared in them (including task attachments and monthly task reports). Files are stored either with our storage provider (Cloudinary) or on our own server, depending on the type.
Payslips and salary sheets that Admins upload for employees. These are only accessible to the employee they belong to and to authorized Admins.
Employees may enter details about the business's own leads and customers — name, email, phone, address, country, and notes — when logging callbacks, sales, or transfers. This data is about the business's contacts, not about the employee entering it, and is collected on behalf of, and controlled by, the business.
A push-notification token (via Firebase Cloud Messaging) so the app can deliver alerts for messages, tasks, callbacks, and concerns you have permission to see.
Text and dates submitted through the Concerns feature (e.g. leave requests, punch-correction requests).
We do not use your information for advertising, and we do not sell personal information to third parties.
We share information only with the service providers that help us run the Service, and only as needed for that purpose:
| Provider | Purpose |
|---|---|
| MongoDB Atlas | Database hosting for all application data |
| Cloudinary | Storage and delivery of images, videos, and file attachments |
| Google Firebase Cloud Messaging | Delivering push notifications to the mobile app |
| Google (Gmail SMTP) | Sending transactional emails (e.g. notifications, OTP codes) |
We may also disclose information if required by law, or to protect the rights, property, or safety of Digital Mitro, our users, or others.
We retain account and business data for as long as the account is active, and for a reasonable period afterward for legitimate business purposes such as payroll records, audit trails, and legal or regulatory compliance. When you request deletion (see below), we delete what we can while retaining only what we're required to for those reasons — see our Account & Data Deletion page for details.
Passwords are stored hashed, not in plain text. Access to administrative functions and to other people's data is controlled by role-based permissions, so an Admin only sees what their SuperAdmin has scoped them to see. Connections to the Service are encrypted in transit. No system is perfectly secure, and we can't guarantee absolute security, but we work to protect information against unauthorized access, alteration, or loss.
If you are located in India, these rights are consistent with the Digital Personal Data Protection Act, 2023. If you are located elsewhere, you may have additional rights under your local law; contact us and we'll do our best to help.
The Service is a workplace tool intended for use by employees, admins, and business clients, and is not directed at, or intended for use by, children. We do not knowingly collect information from anyone under 18.
Our service providers may store or process data on servers located outside of India. Where this happens, we rely on those providers' own safeguards for cross-border data transfer.
We may update this policy from time to time. If we make material changes, we'll update the "Last updated" date above and, where appropriate, notify users in-app.
Questions about this policy, or about your data? Email us at digitalmitrous@gmail.com.