1. Who we are
EnvironDesk is operated by EnvironDesk Technologies Pvt. Ltd., 402, Titanium Square, Thaltej Cross Road, SG Highway, Ahmedabad, Gujarat 380059, India. We are the data fiduciary in respect of personal data processed through this website and the EnvironDesk platform.
For any privacy question, or to exercise the rights described below, write to us at hello@environdesk.com.
2. What we collect
We collect only what we need to provide the service and to talk to you about it.
- Information you give us: name, work email, phone number, company name and anything you type into a form on this site or into the platform.
- Client and factory data you upload: consent orders, lab reports, manifests and related documents. This is your data — we process it on your instructions and for no other purpose.
- Usage data: pages viewed, features used, and error diagnostics, so we can find what's broken and what's confusing.
- Technical data: IP address, browser and device type, collected in server logs.
3. How we use it
We do not sell your personal data. We do not share your client or factory data with other customers, and we do not use it to train models offered to anyone else.
- To provide, operate and support the EnvironDesk platform.
- To send the alerts you configure — WhatsApp, email and in-app.
- To respond to your enquiries and provide support.
- To send product and compliance updates, where you have opted in. Every such message carries an unsubscribe link.
- To improve the product, using aggregated and de-identified usage data.
- To meet our own legal and regulatory obligations.
4. WhatsApp communications
Where you enable WhatsApp alerts, messages are sent through the official WhatsApp Business API using pre-approved templates. You choose which numbers receive them, and every recipient can opt out at any time by replying STOP or by telling us. If you configure alerts to your clients' numbers, you are responsible for having their consent to be contacted.
5. Security
Security is the whole product for a compliance system. Concretely:
- Encryption in transit with TLS 1.3, and at rest with AES-256.
- Hosted in India — AWS Mumbai (ap-south-1). Your data does not leave the country in the ordinary course of the service.
- Logical isolation between customer accounts.
- Role-based access control, so your own team sees only what you allow.
- Audit trail of access and changes.
- Encrypted backups every six hours, with 30-day retention.
- Least privilege internally: our staff access customer data only where necessary for support, and such access is logged.
No system is perfectly secure. If a breach affects your data, we will tell you and the relevant authority without undue delay.
6. How long we keep it
We retain your account and platform data for as long as your subscription is active. On termination, you may export everything; we then delete your data within 90 days, except where we are required to retain records for legal, tax or accounting purposes. Marketing contact data is retained until you unsubscribe.
7. Your rights
Subject to applicable law, including the Digital Personal Data Protection Act, 2023, you may:
- Access the personal data we hold about you.
- Have inaccurate data corrected, and incomplete data completed.
- Have your data erased, where we have no overriding obligation to retain it.
- Export your data in a portable, open format — available from within the platform at any time, without asking us.
- Withdraw consent to marketing communications.
- Nominate another person to exercise these rights in the event of your death or incapacity.
- Complain to us first, and to the Data Protection Board of India if we do not resolve it.
To exercise any of these, email hello@environdesk.com. We respond within 30 days.
8. Who we share data with
We use a small number of processors to run the service. Each is bound by contract to process data only on our instructions:
- Cloud hosting and storage — Amazon Web Services, Mumbai region.
- Messaging — WhatsApp Business API provider, for the alerts you configure.
- Email delivery — for transactional and, where opted in, product email.
- Product analytics and error monitoring — usage and diagnostic data only.
- Payments — our payment gateway. We never see or store your full card details.
We may also disclose data where we are legally compelled to, or to establish or defend legal claims.
10. Children
EnvironDesk is a business product and is not directed at children. We do not knowingly collect personal data from anyone under 18.
11. Changes to this policy
We will update this page when our practices change, and revise the date at the top. Where a change materially affects your rights, we will tell you by email before it takes effect.
Last updated 1 July 2026.