Privacy Policy
Last Updated & Effective Date: November 10, 2026
1. Overview & Commitment
At AlgoSetu Technologies ("AlgoSetu", "we", "our"), we understand that pharmaceutical business data, dealer directories, product margins, and doctor contact lists are the lifeblood of your company. This Privacy Policy outlines our transparent data handling practices for users of the PharmaCRM Windows desktop software and associated cloud services available at https://crm.algosetu.com.
We do not sell, rent, monetize, or broker customer data to third-party advertisers or data brokers under any circumstances.
2. Information We Collect
We collect information strictly necessary to provision, authenticate, secure, and bill for our software services:
- Organization & Administrative Data: Company/PCD franchise legal name, official business email, authorized administrative contact person, phone number, and billing details provided during onboarding or waitlist submission.
- Authentication Credentials: Passwords securely hashed using one-way Argon2id cryptographic hashing, pending/confirmed RFC 6238 TOTP secrets, single-use hashed recovery backup codes, and active session tokens.
- Audit & System Logs: Client IP address, user agent, login timestamps, and administrative audit trails recorded in an immutable ledger to prevent unauthorized access.
- Customer CRM Records: Doctor contacts, distributor inquiries, territory notes, and pipeline status entries input into the application by your team. These records remain the exclusive property of your organization.
3. How Your Information is Stored & Protected
We employ multi-layered enterprise security mechanisms to protect customer data against unauthorized access, leakage, or loss:
Strict Multi-Tenant Row Isolation
Every database query enforces strict tenant_id constraints. Data belonging to one pharma company cannot be accessed or viewed by any other tenant.
Number Shield™ Data Masking
Direct phone numbers are masked on the representative desktop interface. Field representatives cannot extract or export your proprietary doctor directory.
TLS 1.3 In-Transit Encryption
All communications between the Windows desktop client, mobile gateway, and backend servers are encrypted using high-grade TLS 1.3 certificates.
PBKDF2 Encrypted Daily Backups
Automated encrypted database dumps with SHA-256 verification are generated daily to protect against data corruption or hardware failure.
4. Online Payments & Financial Data Policy
Zero Payment Credential Storage
All online subscription payments are processed securely through authorized, PCI-DSS Level 1 compliant payment gateway providers (such as Razorpay, upon approval and integration).
- We NEVER collect, process, or store: Credit/Debit card numbers, CVV codes, UPI PINs, netbanking credentials, or banking passwords on our servers.
- All financial transaction details are handled directly within the encrypted checkout interface provided by the authorized payment gateway.
- We retain only the transaction reference ID, payment timestamp, amount paid, and invoice status for billing and accounting compliance.
5. Third-Party Service Providers
We engage reputable infrastructure providers strictly for cloud server hosting, database storage, and payment processing. All third-party providers are bound by strict confidentiality and data protection agreements consistent with this policy.
6. Data Retention & Deletion
Customer business data is retained for the active duration of the paid software subscription. Following subscription expiration or cancellation, data is preserved for a grace period of up to ninety (90) days to facilitate renewal or data export. Upon written request by an authorized account owner, all tenant databases and records will be permanently purged from active servers and subsequent backup rotations.
7. Privacy Officer Contact
For questions regarding data privacy, security practices, or data deletion requests, contact:
Data Protection Desk — AlgoSetu Technologies
Email: contact@algosetu.com
Billing Inquiries: contact@algosetu.com
Website: https://crm.algosetu.com