1. Who we are
TileFlow (“we”, “us”) is software for tile, granite and sanitary showrooms, run by Nikul Prajapati, Mehsana, Gujarat, India. It is offered at tileflow.in and app.tileflow.in. This policy explains what data we handle and how. It is written with India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 in mind.
2. Two kinds of data, two roles
- Account data — the showroom owner's and staff members' names, mobile numbers, email addresses and passwords (stored only as a secure hash). For this data we decide how it is used, so we are the Data Fiduciary.
- Showroom data — what a showroom enters in TileFlow: its customers, suppliers and staff list, quotations, bills, payments, stock, attendance, expenses and photos. The showroom decides what to enter and why, so the showroom is the Data Fiduciary for it and we process it only on the showroom's behalf, to run the service.
3. What we collect
- Account data you give us when you sign up or when an owner adds staff.
- Showroom data you enter or upload.
- Technical data needed to run and protect the service: sign-in times, the device and browser type, IP address in server logs, and error reports when something in the app fails.
- If you turn on notifications, a push address for your device, issued by your browser's push service.
We do not collect payment card numbers. We do not use advertising or third-party tracking cookies in the app.
4. How we use it
- To provide TileFlow: sign-in, saving and showing your records, making PDFs and reports, and sending the notifications you turn on.
- To keep it secure: preventing misuse, finding and fixing errors.
- To contact the owner about the account, billing and important changes.
We do not sell personal data, and we do not use showroom data for advertising or to train AI models.
5. Where it is stored
Records and photos are stored with Supabase on servers in Mumbai, India. Each showroom's data is kept separate by access rules enforced in the database, so one showroom cannot read another's. Data is encrypted in transit (HTTPS).
6. Who else handles it
We use a few service providers, only for running the service:
- Supabase — database, sign-in and file storage (Mumbai, India).
- Cloudflare — delivers the website and app and protects them from attacks.
- Browser push services (for example Google or Apple) — deliver notifications you turned on. They receive only the notification text.
- Google Fonts — the website loads its fonts from Google, which receives your IP address when you open it.
WhatsApp messages, bills and reminders you share from TileFlow are sent by your own WhatsApp app; we do not send them for you.
7. Requests from authorities
We disclose data to a government authority only when Indian law requires it, for example a written notice or summons. We give only what is asked, keep a record of the request, and tell the showroom owner unless the law forbids it.
8. How long we keep it
- We keep data while the account is active.
- The owner can download a full backup at any time, and can delete the showroom's data from Settings. Deleted data is removed at once from the live system and from our backups within 30 days.
- Showrooms may have their own legal duty to keep business records (for example, GST records for 72 months). Please download a backup before deleting.
- App error reports are deleted after 30 days. Server logs are kept by our providers only for a short time, as needed for security.
9. Your rights
You can ask to see, correct or erase your personal data, or withdraw consent, by writing to us. If your data was entered by a showroom (for example, you are its customer), please contact that showroom first; we will help them with your request.
10. Security incidents
If a breach affects personal data, we will inform the affected showrooms and the authorities as Indian law requires.
11. Children
TileFlow is a business tool for adults and is not meant for anyone under 18.
12. Changes
If we change this policy in a way that matters, we will tell owners in the app or by email before it takes effect.
13. Contact and grievance officer
Nikul Prajapati, Mehsana, Gujarat, India · support@tileflow.in · WhatsApp +91 99045 60143
We reply within 30 days.