Privacy Policy

This is the most important distinction in this policy. EITRI holds data about you, the business owner, and data about your members — the people you collect fees from.

You are our customer. Your members are not. They never sign in, never receive a message from us, and have no relationship with us. Their data is yours; we hold it on your behalf and act on your instructions.

• Your name and email address, from the account you create or from Google if you sign in that way.
• Your organisation: its name, type, address, city, area and contact number.
• Your locations, if you run more than one site.
• A password, stored only as a one-way hash. We cannot read it and cannot tell you what it is.
• Payment records for your own subscription, held by our payment provider — we never see or store your card or bank details.

You choose what to enter. Typically that is:

• Name, phone number, and optionally email and address.
• The fee they pay, how often, and when they joined.
• Payments you record, and notes you write.
• Documents you upload — for example an ID scan or a signed contract.

Uploaded documents are sensitive. They are stored in private object storage with no public address, and can only be retrieved through an authenticated request that verifies the file belongs to your organisation. Our own platform administrator account is technically barred from reading them.

• We never contact your members. No SMS, no WhatsApp, no email to them. The daily report tells you who to call; you call them.
• We never sell, rent or share your data or your members’ data with anyone for marketing.
• We never process payments between you and your members. Money never moves through us.
• We never use your data to train anything.

Data is stored on Cloudflare infrastructure with its primary database located in Singapore, chosen for proximity to India. Files are held in Cloudflare R2. Backups and replicas may exist in other regions operated by Cloudflare.

By using EITRI you consent to this storage and processing outside India.

Every organisation's data is isolated. Queries are rewritten so they can only ever return rows belonging to the requesting organisation, and any query that cannot be proven to be scoped is refused rather than run. One business cannot read, modify or download another's records.

• Anyone you give access to your account. There is one login per organisation, so treat it as you would a bank login.
• Our platform administrator, who can see organisation names, sizes and billing status in order to run the service — but is blocked from reading member documents.
• Our infrastructure and email providers, acting only as processors: Cloudflare (hosting and storage), Razorpay (subscription payments), and our transactional email provider for the daily report.
• Authorities, where we are legally compelled.

One daily report, to you, at the address you nominate. It lists who owes what. You can change the address or switch the report off in Settings. We also send account emails such as password resets. We do not send marketing email.

Only what is needed to keep you signed in and remember your light or dark preference. No advertising cookies, no third-party analytics, no cross-site tracking.

For as long as your account exists. Delete a member and their record goes; close your account and we delete your organisation's data within 30 days, except where we must retain invoice records to meet tax obligations.

You can export your member data as CSV at any time from the dashboard, without asking us. You can also ask us to correct or delete your data by writing to support@eitricreatives.com. We respond within 2 working days.

If you are acting on a member's request about their own data, you are the one who decides — the data is yours to correct or remove.

Passwords are hashed, never stored in readable form. Sessions are short-lived and refresh silently. All traffic is encrypted in transit. Documents are private by default. No system is perfectly secure, and we do not claim otherwise; if we discover a breach affecting your data we will tell you.

EITRI is a business tool and is not directed at children. If you record data about people under 18 — a tuition centre recording students, for example — you are responsible for having the right to do so.

We will update the date at the top of this page when this policy changes, and notify you by email if the change is significant.

EITRI Creatives
Hyderabad, Telangana, India
support@eitricreatives.com