This Privacy Policy explains how Gowebkart Pvt. Ltd. (“Gowebkart”, “we”, “us”) collects, uses, shares and protects personal data when you visit gowebkart.in, contact us, use our services, or use the web applications we make and run ourselves, such as Gowebkart Campaigns (the “Applications”). By using our website, services or an Application, you agree to the practices described here. The sections “Data in Gowebkart Applications” and “If You Receive an Email Sent Through an Application” apply to the Applications.
1.Personal Data We Collect
We collect only the data we need to answer you and deliver our services:
Contact details you share with us, such as your name, phone number, email address, business name and address, through forms, email, phone calls or WhatsApp.
Project information, such as your requirements, content, images, logos and brand files.
Access details you choose to give us for your website, hosting, domain or other accounts, so that we can do the work you asked for.
Billing details, such as invoice and GST information, and records of payments made to us.
Website usage data collected through Google Analytics, such as pages visited, device, browser, approximate location and how you arrived on our site. See our Cookie Policy for details.
We do not ask for sensitive data such as bank passwords or card numbers. Online payments, where used, are handled by the payment gateway, not by us.
2.Data in Gowebkart Applications
When a company uses an Application such as Gowebkart Campaigns, two kinds of personal data are involved: the data of the company’s own people (its account), and the data the company puts in about its contacts and recipients. For the second kind, the company decides why and how that data is used (the data fiduciary under the DPDP Act, or “controller”), and Gowebkart processes it only on the company’s instructions to run the Application (the data processor). Questions about why you were added to a company’s list should go to that company first.
Account data we collect from the company and its users:
Company name, mobile number (with its country code, which also sets the currency the company pays in), country and GST details; each user’s name, email address, role, department, preferred language and password (stored only as a one-way hash).
Sign-in records: date and time, IP address, browser and device, Google / Microsoft sign-ins, two-step sign-in status and the sessions open on each device; the company’s Super Admins can see and end them.
Connected email accounts: the address, provider and the app password, SMTP login or OAuth token you enter, stored encrypted and used only to send your email.
Plan and payment records: the plan chosen, payment proof you upload (screenshot, transaction ID), invoices, the billing address and state used for GST, and for a company outside India its country and the reference of its international payment (PayPal, Wise or bank transfer).
The Activity Log: who did what in the Application and when, kept so the company can audit its own account.
Support messages and, on plans that include it, WhatsApp conversations with our team.
Data the company puts in about its contacts and recipients, processed on its behalf:
Contacts: name, email address and any fields the company adds (phone, company, city, tags, custom fields), with a record of how consent was obtained where the company enters it; sign-up form entries with the consent box, IP address and time of the sign-up.
Sending records: which email was sent to which address, when, and whether it was accepted, bounced or failed; the suppression list of addresses that unsubscribed, bounced or asked to be erased.
Engagement records, when the company has tracking on: whether an email was opened and which links were clicked, with the time, the device type and, only if the company turns it on, the approximate country worked out from the IP address. No exact location is stored. These records are kept for the number of months the company’s plan includes.
Transactional data the company’s website or shop sends through the API, such as order numbers, items and totals used to fill an order email.
What we do with Application data:
We use it only to run the Application for the company: to sign its people in, store and show its data, send its emails through its own email accounts, show its reports, bill it and support it. We do not use a company’s contacts for our own marketing, do not sell them, and never share one company’s data with another.
Each company has its own separate workspace, enforced in the database, so no company can see another’s data.
Content is checked automatically before sending for material that is not allowed (see our Terms). When a check needs a human look, a Gowebkart reviewer sees only the content being checked.
Gowebkart staff do not open a company’s data except to provide support it asked for, to review held content, to investigate abuse or a security problem, or where the law requires it. Such access is logged.
We keep daily backups of the service so data can be restored after a failure. Items a company deletes wait in its Recycle Bin for 30 days and are then removed; backups age out on their own schedule.
Transactional emails and system emails (invites, password resets, plan reminders, notices) are sent to the people they concern as part of running the Application.
Where Application data is processed: on servers Gowebkart uses for the Application, with the company’s own email provider (Gmail, Microsoft 365, Zoho, SendGrid, Amazon SES or an SMTP server the company connects) for sending, and in the image storage (database or storage bucket) Gowebkart uses for the Application. These providers may be inside or outside India and are covered by their own privacy policies.
Export and erasure: inside the Application a company can export all of its data, download a person’s data in a readable form, and erase a person for good; the erased person’s address stays on the suppression list only as a one-way code so they are never emailed again. When a company closes its account, its data is erased after a short export period, except what we must keep by law, such as invoices.
3.If You Receive an Email Sent Through an Application
If a business emails you using Gowebkart Campaigns, that business is the sender and is responsible for having your permission. The email comes from the business’s own email address, not from Gowebkart.
Every marketing email carries an unsubscribe link. Press it and you are removed from that business’s list; the Application makes sure you are not emailed again from that business’s accounts.
If the business has tracking on, a tiny image in the email records that it was opened, and links record that they were clicked, with the time, device type and, if the business turns it on, the approximate country. You can block images in your mail program to prevent open tracking.
To see, correct or erase the data a business holds about you, contact that business; the Application gives it tools to export or erase you. If you cannot reach the business, or you think an email broke the law or our sending rules, write to our Grievance Officer at contact@gowebkart.in with the email and we will act on it.
4.How We Use Your Data
To reply to your enquiries and share quotes and proposals.
To plan, design, build, host and maintain your website, application or designs.
To send invoices, collect payments and keep accounting records.
To provide support, send project updates and important service notices.
To understand how visitors use our website so we can improve it.
To meet our legal and tax obligations and to protect against fraud or misuse.
We do not sell your personal data. We send promotional messages only if you have agreed to receive them, and you can opt out at any time.
5.Sharing Your Data
We share personal data only when it is needed to provide our services or required by law:
Hosting, domain, SSL and email providers that we use to set up and run your website or application.
For the Applications: the hosting, backup and image storage providers that run them, the email provider each company connects to send its own email, any integration (API, webhooks, plugins) the company itself connects, and, for a company outside India, the international payment service it pays through (PayPal, Wise or its bank).
Google Analytics, which processes website usage data for us.
Payment gateways, accountants and similar service providers who help us run our business.
Government or legal authorities, when we are required to do so by law.
These providers may process data on their own servers, which can be located inside or outside India. Their use of data is also covered by their own privacy policies.
6.How Long We Keep Data
We keep personal data only as long as it is needed for the purpose it was collected, for providing ongoing services to you, or as required by law, for example tax and accounting records. When it is no longer needed, we delete it or make it anonymous.
In the Applications: a company’s data is kept while its account exists; deleted items stay in its Recycle Bin for 30 days; single open and click records are kept for the months its plan includes; the Activity Log keeps the last few months; sign-in records are kept for a limited time; and invoices are kept as tax law requires. Backups are kept for a limited period and then overwritten.
7.How We Protect Your Data
We use reasonable security measures to protect personal data, such as secure (https) connections, password-protected accounts and limited access for our team. Access details you share for your projects are used only for that work. No online system is completely secure, so we cannot guarantee absolute security, but we act quickly if a problem is found.
In the Applications: passwords are stored as one-way hashes; connected email credentials and API secrets are stored encrypted; each company’s data is separated in the database; sign-in is protected by rate limits, optional two-step sign-in, Sign in with Google / Microsoft and company rules for passwords and allowed networks; API requests are rate-limited and webhook deliveries are signed; and every change is written to the company’s Activity Log. If a security incident affects your data we inform the company’s Super Admins and, where the law requires, the authorities.
8.Your Rights
Under the Digital Personal Data Protection Act, 2023, you have the right to:
Ask for a summary of the personal data we hold about you and how it is used.
Ask us to correct, complete or update your personal data.
Ask us to erase your personal data when it is no longer needed, unless we must keep it by law.
Withdraw your consent at any time, for example to stop promotional messages.
Nominate another person to exercise these rights on your behalf in case of death or incapacity.
Raise a complaint with our Grievance Officer, and with the Data Protection Board of India if your complaint is not resolved.
To use any of these rights, email contact@gowebkart.in. We may ask you to confirm your identity first.
Users of an Application can change their own name, language and password inside it, and a company’s Super Admins can export the company’s data, export or erase any contact, and ask us to close the account. If you are a contact of a company that uses an Application, please ask that company first; it has the tools to export or erase you, and we help where needed.
9.Children’s Data
Our services are meant for businesses and adults. We do not knowingly collect personal data from children under 18. If you believe a child has shared data with us, please contact us and we will delete it.
10.Links to Other Websites
Our website may link to other websites, such as our social media pages or Google reviews. We are not responsible for their content or privacy practices, so please read their policies.
11.Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be on this page, with the date it was last updated shown at the top.
12.Grievance Officer and Contact
For any question, request or complaint about your personal data, please contact our Grievance Officer:
Grievance Officer, Gowebkart Pvt. Ltd.
Address: Rear Office, 151/28 F/F, Mandawali, Delhi – 110092, India
Email: contact@gowebkart.in
Phone: +91 99992 79077
We aim to respond to your request within a reasonable time and as required by law.
