Consign.Tech
Legal

Privacy Policy

How Consign IT Private Limited (“Consign.Tech”, “we”, “us”) handles personal data — what we collect, why, who we share it with, and the choices you have.

Last updated: 10 October 2026

1. Who we are

Consign IT Private Limited is a company incorporated in India (CIN U72900TN2007PTC062944) with its registered office at 10/258, Union Road, Keelapavoor, Tenkasi, Tamil Nadu 627806, India. This policy covers:

  • our website, consign.tech, and its contact, careers and quick-engagement forms and chat assistant;
  • our client portal at app.consign.tech;
  • our hosted products (such as Shamar, Engage, Paz, Dyo, Adagu, Datum and Nalam) and the managed services we run for clients; and
  • our internal tools that connect to Google services (for example Google Workspace administration and YouTube).

2. Two roles: our own data, and data we process for clients

For our own website, portal and business contacts, we decide why and how personal data is used, and we are responsible for it (a “Data Fiduciary” under India’s Digital Personal Data Protection Act, 2023).

For the data our clients put into our products and the systems we manage for them — for example a shop’s customer records in Adagu or Paz, or a client’s mailboxes — the client decides how that data is used and we process it only on their instructions, under our agreement with them. If you are one of our client’s customers, please contact that organisation first; their own privacy notice applies, and we will help them respond to you.

3. What we collect

  • Details you send us through our forms, chat assistant or email: name, email, phone, company, the service you are interested in, your message, and (for careers) the role and details you choose to share.
  • Account details for the client portal and our products: name, work email, role, login and security records (for example sign-in times, IP address and device used).
  • Billing details for clients: billing contact, address, GST number and payment records. We do not store card numbers; payments are handled by the payment provider or bank.
  • Usage data from our website through Google Analytics and Google Tag Manager: pages viewed, approximate location, device and browser type, and how forms are used. This relies on cookies (see section 8).
  • Support and service records: tickets, call notes and the technical information needed to run and fix the services we provide.

4. How we use it

  • to reply to enquiries, prepare proposals and deliver the services and products you have asked for;
  • to create and secure accounts, including login approvals and security alerts;
  • to invoice, collect payment and keep the accounting records the law requires;
  • to provide support, monitor reliability and keep our systems secure;
  • to understand how our website is used so we can improve it; and
  • to meet our legal obligations and protect our rights.

We do not sell personal data, and we do not use client data from our products for advertising or to train AI models.

5. Data from Google APIs

Some of our tools connect to Google services (such as Google Workspace administration and YouTube) when an authorised member of our team or a client signs in and grants access. We use that access only to provide the feature the user asked for — for example administering a Workspace domain we manage, or publishing our product how-to videos — and not for advertising.

Consign.Tech’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Access can be withdrawn at any time from your Google Account’s third-party connections page.

6. The Consign.Tech mobile app

Our Android and iOS app (tech.consign.app) opens our client portal for customers and our internal portal for our team. It shows the same account data as the website and adds a few things of its own:

  • Sign-in and device lock. When you sign in, the app registers your phone with your account: a random device ID, the phone’s name, model, platform and system version, the app version and when it was last used. The app can then ask for your fingerprint, face or screen lock. That check happens entirely on your phone; we never receive your biometric data.
  • Notifications. If you allow notifications, we store a push token from Google Firebase Cloud Messaging (or Apple Push Notification service) so we can alert you about tickets, approvals and account updates. Notification content passes through Google or Apple to reach your phone.
  • Usage analytics. The portals inside the app use the same product analytics as on the web (PostHog, which records which pages you use, with form inputs masked, so we can fix problems and improve the portal). The app itself has no advertising and no advertising ID, and it does not read your contacts, location, photos or files unless you choose a file to upload.

You can see and remove the phones linked to your account under Settings in the portal, and turn notifications off in your phone’s settings. Removing a phone signs it out and deletes its push token; after you uninstall the app, the token stops working and we delete it the next time we try to use it. Accounts are created by us or by your organisation’s administrator, not in the app; to have your account and its data deleted, write to [email protected].

Datum and the Datum Studio app: “Office only”

A studio using Datum can choose to allow going on duty and starting timers only from its office. While a studio has this switched on, each time one of its people goes on duty or starts a timer, Datum records the time, whether it was allowed, the internet (IP) address, the type of device and browser, which trusted office computer was used (if any) and, on a phone or in the Datum Studio app (tech.consign.datum), the phone’s location, its accuracy and its distance from the office. Location is read only at that moment, never in the background, and never from a computer. Datum also records the IP address and device type of each sign-in.

The studio is responsible for this data and decides to collect it; we process it on their behalf. Only the studio’s owner can see locations. Coordinates are deleted after 90 days; the distance from the office and the rest of the record are kept for the studio’s access-log period (180 days unless agreed otherwise). People are told what is recorded the first time they start work, and can ask their studio, or us at [email protected], for a copy or for its deletion.

Nalam and the Nalam app (patients and clinic staff)

Nalam is a clinic and hospital records system. Each clinic runs its own Nalam, and the clinic is responsible for its patients’ records (it is the data fiduciary); we host and run Nalam on the clinic’s behalf. The Nalam app (tech.consign.nalam) and the clinic’s patient pages show a patient their own token, visits, prescriptions, test results their doctor has reviewed, bills and appointments, and let them book and pay. They also show a doctor their queue and the results waiting for review.

  • Signing in. A patient signs in with the mobile number registered at the clinic and a one-time code sent through the clinic’s Telegram bot (or SMS, where the clinic uses it). Only records registered to that number, and seen in the last six months or confirmed with the patient number on the patient card, appear in the app.
  • On the phone. The app stores the list of clinics you added and a sign-in cookie for each. If you turn on notifications, the clinic stores your phone’s push token to tell you when it is your turn, when a result is ready or when a bill is due. The camera is used only to scan a clinic’s QR code, and the optional fingerprint / Face ID lock is checked by your phone, never sent to us. The app has no advertising, no advertising ID and no analytics, and it does not read your contacts, location, photos or files.
  • Payments in the app go to the clinic through Razorpay; we never see card or UPI details.

To see, correct or delete your records, ask your clinic (each clinic’s privacy notice, linked in the app, names its grievance officer) or write to us at [email protected]. See also Delete your Nalam app account or data.

7. Who we share it with

We share personal data only with service providers who help us run our business, and only as much as they need:

  • cloud hosting and backup providers, in India and abroad;
  • DNS, content-delivery and security providers;
  • email and productivity providers;
  • Google Analytics, for website usage statistics;
  • PostHog, for usage analytics in our client and team portals (including the mobile app);
  • an AI model provider for our website chat assistant (it receives the chat messages only);
  • email-delivery, messaging (such as Telegram notifications in our products), mobile push (Google Firebase Cloud Messaging, Apple Push Notification service) and payment providers; and
  • professional advisers, auditors and authorities, where the law requires it.

Some of these providers process data outside India. We use reputable providers with appropriate safeguards, and transfer data only to countries not restricted under Indian law.

8. How long we keep it

We keep personal data only as long as it serves the purpose it was collected for: enquiries and leads while they remain relevant to a possible business relationship, or until you ask us to delete them; client account and billing records for the duration of the relationship and for at least ten years after, which covers what Indian tax and company law requires; website analytics according to Google Analytics’ retention settings. Client data in our products is kept for as long as the client’s agreement requires, and returned or deleted when it ends.

9. Cookies

Our website uses cookies from Google Analytics and Google Tag Manager to measure visits and form usage. Our portal and products use essential cookies to keep you signed in and protect against misuse. You can block or delete cookies in your browser settings; the website will still work, though we will see less about how it is used.

10. How we protect it

We use encryption in transit (HTTPS), access controls and least-privilege access for staff, two-person approval for sensitive changes in products that offer it, audit logs, regular backups and monitoring. No system is perfectly secure, but we work to protect your data and will notify affected people and authorities of a personal data breach as the law requires.

11. Your rights

Subject to the law, you may ask us to:

  • tell you what personal data we hold about you and how we use it;
  • correct, complete or update it;
  • erase it where it is no longer needed or you withdraw consent;
  • withdraw any consent you have given (this does not affect what was done before); and
  • nominate someone to exercise these rights for you in case of death or incapacity.

Write to us at [email protected]. We may need to verify your identity before acting on a request.

12. Children

Our services are meant for businesses and organisations and are not directed at children. We do not knowingly collect personal data from anyone under 18 without verifiable consent from a parent or guardian.

13. Grievances

If you have a concern about how we handle personal data, contact our Grievance Officer at [email protected] or by post at 10/258, Union Road, Keelapavoor, Tenkasi, Tamil Nadu 627806, India. We will acknowledge your complaint within 7 days and aim to resolve it within 30 days. If you are not satisfied, you may approach the Data Protection Board of India.

14. Changes to this policy

We may update this policy as our services or the law change. The “last updated” date above shows the latest version, and we will tell clients about significant changes. See also our Terms of Service.