Corporate Privacy Policy

1.0Corporate Entity & Scope of this Policy

This Privacy Policy governs all data collected by Migobucks Technologies Private Limited ("Migobucks", "Company", "we", "us") across our corporate website (migobuckstech.com), specialized product platforms (such as Quifl, Zemwa, Woqme, Heumiq), mobile applications distributed via the Apple App Store and Google Play Store, PC desktop software packages, and dedicated enterprise cloud deployments.

Depending on your relationship with us, Migobucks acts as:

• Data Controller: For direct visitors to our websites, direct individual software purchasers, job applicants, and primary business account holders.
• Data Processor: For enterprise and institutional clients who deploy our software to store, organize, and manage end-user or patient records. In such cases, the enterprise client remains the Data Controller and Migobucks acts strictly under their instructions.

2.0Information We Collect Across Modalities

Because we build multi-platform software, our data collection practices are strictly compartmentalized based on the form factor you utilize:

3.0Multi-Tenant Architecture & Sovereign Data Isolation

For enterprise customers utilizing our multi-tenant SaaS platforms, all customer databases implement strict Row-Level Security (RLS) and cryptographic tenant keys. No enterprise tenant can access or view another tenant's operational records.

For customers requiring physical or sovereign isolation, Migobucks provides Dedicated VPS and Sovereign Cloud Deployments where computing resources, memory partitions, and database storage are hosted in isolated virtual servers without shared runtime environments.

4.0Legal Grounds for Processing

We process your information under lawful, recognized legal bases:

• Contractual Necessity: Processing necessary to provision software, activate accounts, process payments, and honor our Master Services Agreement.
• Legitimate Business Interests: Monitoring system health, mitigating cyber threats, preventing software piracy, and enhancing software UX.
• Statutory Compliance: Adhering to tax laws, company audit guidelines, and legal mandates under the laws of India.
• Explicit Consent: Where you have opted in to receive non-transactional marketing communications or enabled optional device hardware permissions.

5.0Third-Party Sub-processors & Gateways

We partner exclusively with enterprise-grade sub-processors bound by stringent confidentiality and data protection agreements:

6.0Cookies, Tokens & Local Storage

Our web platforms utilize strictly essential and functional cookies:

• Essential Session Tokens: Secure HTTP-only cookies and JSON Web Tokens (JWT) required to authenticate user sessions and prevent CSRF attacks.
• Functional Preferences: Local storage values saving UI themes (dark/light), sidebar collapse state, and active tenant workspace IDs.
• Zero Intrusive Ad Trackers: We do not deploy third-party advertising cookies, cross-site profiling trackers, or invasive social pixel trackers.

7.0Data Retention, Archival & Secure Sanitization

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or satisfy legal requirements:

• Active SaaS Accounts: Retained during the active subscription period plus a 30-day graceful data export window post-termination.
• Financial & Invoicing Records: Retained for a mandatory period of 7 years in compliance with the Indian Companies Act and statutory tax laws.
• Sanitization: Upon verified deletion requests or end-of-life de-provisioning, data is cryptographically wiped using standard DoD-compliant sanitization standards.

8.0Data Subject Rights

In accordance with applicable data privacy laws, you possess the right to:

• Access & Review: Request a copy of the personal information we hold regarding your account.
• Correction & Rectification: Request correction of inaccurate, incomplete, or outdated personal records.
• Erasure ("Right to be Forgotten"): Request the permanent deletion of your personal data, subject to statutory retention obligations.
• Data Portability: Export your operational business data in machine-readable structured formats (JSON / CSV).
• Revocation of Consent: Withdraw previously granted consent at any time without affecting the lawfulness of prior processing.

9.0Children's Privacy

Our software platforms, mobile applications, and enterprise services are engineered strictly for business operations, working professionals, and individuals aged 18 and older. We do not knowingly solicit or collect personal information from individuals under the age of 18.

10.0Statutory Grievance Redressal Officer

In accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023, the contact details of the designated Grievance Officer are: