1.About this policy
GetMeSales is a sales CRM and a product of My Analytics School. It is operated by Unique Mindcrafted Tenxx Pvt. Ltd., a company incorporated in India with its registered office at the address in section 16 ("we", "us", "our").
This policy explains what personal data we handle, why, who we share it with, how long we keep it and the rights you have. It applies to:
- our website at maslabs.info;
- the GetMeSales application at app.maslabs.info and each organisation's workspace at <your-workspace>.org.maslabs.info (together, the "Service"); and
- emails, calls, demos, support and billing connected with the Service.
Words such as "personal data", "Data Principal", "Data Fiduciary" and "Data Processor" have the meaning given to them in the Digital Personal Data Protection Act, 2023 (the "DPDP Act"). Please read this policy together with our Terms of Service and Cookie Policy.
2.Our two roles: Data Fiduciary and Data Processor
GetMeSales is used by businesses (our "customers") to manage their sales leads. That means we handle personal data in two different capacities:
We are the Data Fiduciary for data about our own website visitors, demo requesters, account users and billing contacts. We decide why and how that data is used, and this policy describes it in full.
We are a Data Processor for the data our customers put into their workspaces, such as their leads, call recordings and messages ("Customer Data"). The customer organisation is the Data Fiduciary for that data. We process it only to provide the Service, on the customer's instructions and under our Terms of Service.
If a business contacted you using GetMeSales (for example, you received a call, a WhatsApp message or an email from a company that uses our CRM), that business decides what happens to your data. Please send requests about it to that business first. If you contact us instead, we will pass your request to the business concerned and help it respond, where we can identify it.
3.Personal data we collect as Data Fiduciary
When you visit our website
- Demo and contact requests: your name, WhatsApp or phone number, work email, company, sales team size, the demo slot you prefer and your confirmation that you want to be contacted.
- Technical data: IP address, browser and device type, pages requested, referring page and timestamps, recorded in our server logs to run and secure the site.
- Analytics data, only if you allow analytics cookies: pseudonymous identifiers and usage events collected by Google Analytics 4. See our Cookie Policy.
When you or your organisation use the Service
- Account data: name, work email, phone number, role, the workspace you belong to and your password (stored only as a one-way hash).
- Google sign-in: if you choose "Continue with Google", the basic profile Google shares with us: your name, email address and Google account identifier. We do not receive your Google password.
- Workspace and usage data: organisation name, workspace address, logo and settings; actions you take in the app (such as sign-ins, changes and exports), recorded in activity and audit logs for security and support.
- Billing data: billing contact, company legal name, billing address, GSTIN, plan, number of seats, invoices and payment history. Card, UPI and bank details are collected directly by our payment gateway, Razorpay. We receive only payment and mandate references, the payment method type and status. We never receive or store full card numbers, CVV or UPI PINs.
- Support and communications: what you tell us in helpdesk tickets, emails, calls and demos.
We do not ask for, and you should not send us, sensitive personal data such as health information, biometric data or financial account passwords.
4.Customer Data we process for our customers
Depending on the features a customer uses, its workspace can contain:
- Leads and contacts: names, phone numbers, email addresses, company and enquiry details, and source information, imported from Meta and Google Ads lead forms, CSV files, vendor and partner APIs, or added by hand.
- Calls: call logs for manual calls and click-to-call through telephony providers, and for AI voice calls made by our AI caller Aarya, including call recordings, transcripts and AI-generated summaries.
- Messages: WhatsApp and email conversations sent and received through the Service.
- Work records: notes, tasks, pipeline stages, workflows, Sheets, analytics, helpdesk tickets and uploaded files.
- Arya Assist: the questions users ask our AI assistant and the answers it gives, which are drawn from the workspace's own data.
As a Data Processor we:
- use Customer Data only to provide, secure, support and improve the Service for that customer, or as the law requires;
- never sell Customer Data, and never use one customer's data for another customer;
- keep each organisation's data separated, and limit our staff's access to what is needed for support, security and maintenance;
- help customers respond to requests from their Data Principals and to personal data breaches; and
- delete Customer Data when the customer's subscription ends, as set out in section 10.
Customers are responsible for having a lawful basis for the data they bring into GetMeSales, for giving their leads any notice the law requires, and for following telemarketing, call-recording and messaging rules. These duties are set out in our Terms of Service.
5.How we use personal data and on what basis
Under the DPDP Act we process personal data either with your consent or for a legitimate use the Act permits, such as a purpose for which you voluntarily gave us the data, or compliance with law.
| Purpose | Data used | Ground |
|---|---|---|
| Answer demo and contact requests | Name, phone, email, company, team size, preferred slot | Consent you give on the form; you may withdraw it at any time |
| Create and run your account and workspace | Account, Google sign-in, workspace and usage data | Legitimate use: you provided the data to use the Service |
| Bill you, collect payments and issue GST invoices | Billing data, payment references | Legitimate use and compliance with tax law |
| Keep the Service secure, prevent fraud and abuse, and fix faults | Technical, usage and audit-log data | Legitimate use and compliance with law |
| Provide support | Account data and what you tell us | Legitimate use: you asked for help |
| Send service emails (sign-in links, receipts, trial and renewal notices) | Name, email | Legitimate use: needed to run your account |
| Send product news and offers | Name, email | Consent; unsubscribe from any such email |
| Understand how our website is used | Analytics data | Consent through cookie settings |
| Meet legal obligations and respond to lawful requests | Any data the law requires | Compliance with law |
Where we rely on consent, you can withdraw it as easily as you gave it, by writing to admin@myanalyticsschool.com or, for cookies, through Cookie settings in the website footer. Withdrawal does not affect processing that already took place.
6.AI features
Several features of the Service use artificial intelligence:
- Aarya AI voice calls place calls to a customer's leads, speak with them, and produce recordings, transcripts and summaries.
- Call summaries and insights turn recordings and transcripts of calls into notes and next steps.
- Arya Assist answers users' questions about their own workspace data.
To do this, the relevant content (for example, call audio, transcripts or the workspace records needed to answer a question) is sent to third-party AI providers for speech recognition, speech generation and large language model processing. They process it to return a result to us under contract. Arya Assist only uses data the asking user is allowed to see under their role.
AI data controls
Each customer organisation's administrators choose what lead data Arya Assist may share with AI models, category by category: lead names, contact details, notes and free-text reasons, call content and location can each be set to allow, ask each time (the user is asked before the data is sent, for one answer or one chat) or never (the values are withheld and replaced by a placeholder before anything reaches a model). Counts and other business figures are always used to answer. ID and financial numbers, such as PAN, Aadhaar, bank account and card numbers, are never shared with AI models. Tables and reports shown to users come straight from the workspace and are not affected. Each "ask each time" decision and each change to these settings is recorded.
To check the quality of AI answers and fix faults, we record traces of AI requests (the question, the steps taken, and the data the AI model was allowed to see under the settings above, with timings and costs) in our LLM observability service, Langfuse. Users are identified there only by internal identifiers, not by name or email.
We do not use Customer Data to build or train AI models that are offered to other customers. AI output can be wrong or incomplete. It is a draft for people to check, and it is not used by us to make decisions that produce legal or similarly significant effects on anyone.
9.Where your data is stored and cross-border transfers
The Service is hosted in India, on Amazon Web Services in Mumbai (ap-south-1). Our main database, uploaded files and backups are stored there.
Some providers listed in section 8, in particular AI providers, Langfuse (United States) and Google, may process personal data on servers outside India. Section 16 of the DPDP Act allows such transfers except to countries the Central Government has restricted by notification. We do not transfer personal data to any restricted country, and we bind providers by contract to protect the data and use it only to serve us.
10.How long we keep personal data
We keep personal data only as long as we need it for the purposes above or as the law requires, and then delete or anonymise it.
| Data | How long |
|---|---|
| Account and workspace data | While the account is active, then as for Customer Data below |
| Customer Data | While the customer's subscription is active. When it ends, the customer has 30 days to export its data; we then delete it from live systems |
| Encrypted backups | Taken nightly and kept for 30 days, after which they are overwritten. Deleted data disappears from backups within this cycle |
| Invoices, payment and tax records | At least 8 years, as required by Indian company and tax law |
| Demo and contact requests | Until the request is handled and any follow-up ends, and no longer than 24 months after our last contact with you |
| Server, security and audit logs | As long as needed for security investigations and legal requirements, generally 180 days |
| Analytics data (Google Analytics) | Up to 14 months in Google Analytics; the cookie itself expires as listed in the Cookie Policy |
Under the DPDP Act we also erase personal data once you withdraw consent or the purpose is no longer being served, unless the law requires us to keep it longer.
11.How we protect personal data
We follow reasonable security practices and procedures as required by section 43A of the IT Act, 2000 and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the safeguards required of Data Fiduciaries under the DPDP Act. They include:
- encryption of data in transit (HTTPS/TLS), and AES-256 encryption of the nightly database backups we keep off the server;
- passwords stored only as salted one-way hashes, and optional sign-in with Google;
- role-based access inside each workspace, and database-level separation of each organisation's data;
- access to production systems restricted to authorised staff on a need-to-know basis;
- hosting in a professionally managed cloud data centre in India, with network firewalls; and
- contracts that require our service providers to protect personal data.
No system is completely secure. Please keep your password private, use Google sign-in or a strong unique password, and tell us at once at admin@myanalyticsschool.com if you suspect misuse of your account.
12.Personal data breaches
If a personal data breach affects data for which we are the Data Fiduciary, we will:
- contain it and investigate it promptly;
- inform the Data Protection Board of India and each affected person, as the DPDP Act and its rules require; and
- report cyber security incidents to CERT-In within the time its directions require.
If a breach affects Customer Data, we will notify the affected customer without undue delay and give it the information it needs to meet its own obligations.
13.Your rights
Subject to the DPDP Act, you have the right to:
- access a summary of the personal data we process about you, the processing activities, and the identities of those we have shared it with;
- correct, complete or update inaccurate or incomplete personal data;
- erase personal data that is no longer needed, unless the law requires us to keep it;
- withdraw consent you have given, at any time;
- grievance redressal through our Grievance Officer (section 16); and
- nominate another person to exercise these rights on your behalf in the event of your death or incapacity.
Users can correct much of their profile data themselves in the app. For anything else, write to admin@myanalyticsschool.com from the email address linked to your account, or tell us how we can verify your identity. We may ask for proof of identity before acting on a request, to protect your data.
If your request concerns Customer Data (for example, a business called you through GetMeSales), we will forward it to that business, which is responsible for answering it.
If you are not satisfied with our response to a grievance, you may complain to the Data Protection Board of India after using our grievance process.
14.Children
The Service is for businesses and is not directed at anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it. Customers must not use GetMeSales to process children's personal data unless they have obtained verifiable parental consent and meet every other requirement of the DPDP Act.
15.Changes to this policy
We may update this policy when our Service, providers or the law change. The "Last updated" date at the top shows the current version. If a change materially affects how we use your personal data, we will tell account holders by email or in the app before it takes effect and, where the law requires, ask for fresh consent.
16.Grievance Officer and contact
In line with the IT Act, 2000, the rules made under it and the DPDP Act, our Grievance Officer handles questions, requests and complaints about personal data and the Service:
Grievance Officer, Unique Mindcrafted Tenxx Pvt. Ltd.55, 3rd Floor, Saidulajaib
Near Saket Metro
New Delhi, Delhi 110030
India
Email: admin@myanalyticsschool.com
We acknowledge grievances within 24 hours and resolve them within 15 days of receipt, or within any shorter period the law sets for a particular kind of complaint. More ways to reach us are on our Contact page.