Privacy Notice

GWU Software and Solutions (“GWU”, “we”), a sole proprietorship of Kornalies J at Madipakkam, Chennai, Tamil Nadu 600091, India, provides GWU WMS. This notice is given under section 5 of the Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and explains how we handle personal data about the people who sign up for and use GWU WMS, for which we are the Data Fiduciary.

It does not cover the warehouse data our customers put into GWU WMS, such as their staff, drivers, consignees and their own clients. For that data the warehouse company is the Data Fiduciary and GWU only processes it on their behalf (section 6 of the Terms of Service). If your details are in a warehouse company’s records, contact that company first.

• Sign-up and account details: your name, email address, mobile number, company name, city and state, the company’s PAN or GSTIN, and your password (stored only as a one-way hash).
• Billing details: the company’s legal name, billing address and GSTIN, invoices, and payment references such as UTR numbers. When you pay online, Razorpay's order and payment identifiers, the amount and the payment method type; card, UPI and bank details are entered on Razorpay's checkout and never reach us.
• Usage and security data: sign-ins and sessions, the IP address and browser or app they came from, the mobile app version and device identifier, and an audit log of significant actions.
• Support messages you send us, by email, WhatsApp or phone.

• to create and run your account and provide the Service you signed up for;
• to verify sign-ups, keep accounts secure, and detect and prevent abuse and fraud;
• to bill you, issue GST invoices and meet our tax and legal obligations;
• to send service emails: verification codes, renewals and invoices, security and policy notices;
• to answer support requests and improve the Service using aggregated statistics.

We process this data with your consent, given at sign-up, and for the legitimate uses in section 7 of the DPDP Act, such as complying with law. We do not sell personal data, use it for advertising, or send marketing emails without your consent.

Only with the service providers that help us run GWU WMS, listed in the Sub-processor list (hosting, backups, email and payments), under contracts that limit their use of it; with tax and other authorities when the law requires; and with a successor to our business under section 18.1 of the Terms. Some of these providers may process data outside India, never in a country the Central Government has restricted.

GWU WMS uses a session cookie to keep you signed in, and your browser’s storage for conveniences such as a remembered company code and training progress. We use no advertising or third-party tracking cookies.

Account, usage and security data are kept while your account is open, and deleted under section 11.3 of the Terms after it closes. Invoices and billing records are kept for as long as tax law requires, at least 72 months under section 36 of the CGST Act, 2017. Data needed to defend or pursue a legal claim may be kept until it is resolved.

We protect personal data with reasonable security safeguards, including encryption in transit, hashed passwords, role-based access, audit logs and encrypted backups. If a breach affects your personal data, we will tell you and the Data Protection Board as the DPDP Act requires.

Under the DPDP Act you may:

• ask for a summary of the personal data we hold about you and how we use it;
• ask us to correct, complete, update or erase it, unless we must keep it by law;
• withdraw your consent, which ends the processing that relies on it, though not our tax records;
• nominate someone to exercise these rights if you die or become unable to;
• complain to us, and then to the Data Protection Board of India.

Many details can be changed directly in GWU WMS. For anything else, write to us at the contact below; we will acknowledge it within 7 days and respond within 30 days.

GWU WMS is a business service and is not meant for anyone under 18.

Kornalies J, Proprietor, GWU Software and Solutions, Madipakkam, Chennai, Tamil Nadu 600091, India. Email: kornalies.jasupathem@gwutech.com.

We will notify changes to this notice by email or in GWU WMS, and the effective date at the top of this page will change.