Privacy and your choices
We explain what information is used, who handles it and how to ask for help. This notice does not claim that every legal or vendor review has been completed.
Who handles your information
Samran Associates handles account setup, subscription administration and demo enquiries for Samran One. Your business decides how customer, supplier and employee information is used in its workspace. Contact us to identify the responsible business if you do not have an account.
Information and purposes
- Account details: name, email address and identity references for sign-in and access.
- Business contacts: customer, supplier and employee details for the business records and workflows you use.
- Financial records: invoice lines, recorded payments and balances for billing, collections and reporting.
- Files and imports: uploaded documents and imported records for the task you select.
- Attendance and location: attendance entries and foreground location samples for requested attendance and field visits.
- Demo enquiries: name, business name, email, phone, business type and optional message to arrange the requested demo. This permission excludes unrelated marketing.
- AI requests: your question and selected context to produce an optional AI answer.
- Device and service records: offline bills, drafts, access records and processing logs to support synchronization, service operation and security.
- Privacy requests: your name, reply email, business name, request type, message and review history to record, verify, route and respond to your request.
- Website storage: a locally saved plan selection and a session-only offer-dismissal preference to remember your choices. The request APIs use an IP-derived hash for short-lived abuse prevention.
Service providers and AI
Clerk supports identity, Convex supports records and files, and Cloudflare supports application hosting. The marketing site uses Vercel hosting. Resend handles configured email delivery and Razorpay handles configured subscription payments. Optional external AI can use Gemini, Groq or Cloudflare when enabled. Custom questions can contain personal data; only send information you are authorized to share. Provider availability, locations and contractual safeguards require review before enabling a provider.
Retention and deletion
Archiving hides a record but does not erase it. Required financial records, security evidence and records subject to a legal hold may need to remain. We review requests against applicable retention rules and explain what can be erased and what must remain. An erasure review must account for backups and any later restore before it is treated as complete. Downloaded files and disconnected devices require separate handling.
Your choices and rights
You can ask about your personal data and sharing, request correction or eligible erasure, withdraw consent, or raise a grievance. You can nominate one or more individuals to exercise applicable rights if you die or become unable to exercise those rights because of unsoundness of mind or infirmity of body. Contact us without an account; we verify identity and authority before disclosing or changing records. We respond to grievances within 90 days of receipt. This is not a waiting period for withdrawal or every other request. Board escalation depends on the applicable law and use of the grievance process.
Withdrawing permission
Withdraw optional AI permission in the same control where you granted it. For demo contact, use the public request form or email our contact with your reply email and business name. Withdrawal does not undo earlier lawful processing. We review processing that must continue under applicable law and explain the outcome. Avoid sending identity documents with your initial request.
Devices and location
Offline billing stores bills and drafts on the device. Sync pending bills before removing device data. Sign-out locks prepared billing profiles but does not guarantee removal from a disconnected device. Attendance and manual visit actions capture a location sample. If you turn on position recording during an active field visit, the app saves repeated location samples while the screen is visible. Hiding or closing the screen stops that recording. Browser location permission is separate from the business's privacy notice and processing ground.
Children and lawful guardians
Accounts are intended for people aged 18 or over. This statement is not age verification. Do not upload data about children under 18, or a person with disability who has a lawful guardian, until the business has established the applicable requirements and a verified parent or lawful-guardian process. Contact us for guardian requests.
Contact and privacy requests
Use our existing business contact for a privacy request or demo-contact withdrawal. Include the business name and the kind of request. Do not send passwords, identity-document copies or complete financial records.