Privacy Policy

1. Introduction

ShineDesk ("we", "our" or "the App") is a GST billing and business management application for shops, service centres and restaurants, made by 360 Vision, a sister concern of ConnectingPoint. It works on Android, iPhone and the web (bill.360vision.in). This Privacy Policy explains what information we collect, how it is stored and used, and your responsibilities.

By using ShineDesk, you agree to the practices described in this policy.

2. Information we collect

We store the information you and your staff enter into ShineDesk:

• Business information: company name, address, GST number, UPI ID, email address, logo, Google Review link
• Customer information: name, mobile number, address, GST number
• Vehicle information: vehicle type, registration number, model
• Billing data: invoices, quotations, purchases, payments, stock, serial numbers and appointments
• Photos you take or upload (service photos, item images, logo)
• Staff accounts and the devices they sign in from (device name and IP address), for security

3. How we store your data

Your business data is stored on our secure servers in India, with a second backup server that keeps a live copy so the service keeps working if one server fails. Photos are stored on the same servers.

Bills made without internet are kept in the app's private storage on your device (or in the browser) only until they are sent to the server. The web app also keeps your sign-in in your browser's storage.

All communication with our servers uses encrypted HTTPS.

4. How we use your data

• To make invoices, reports and records for your business
• To keep customer, vehicle and service history
• To send notifications you turned on (for example new bills or stock transfers) and OTPs to your email
• To provide support when you ask for it

We do not use your data for advertising or profiling, and we do not sell it.

5. Data sharing

We do not sell, rent or share your data or your customers' data with anyone for their own use. We use these services only to run ShineDesk:

• Cloudflare: secure network connection to our servers
• Email and push notification services: to deliver OTPs and the notifications you turned on
• Google Fonts: the website loads its fonts from Google
• Google Drive: only when you connect your own Google account for backup; the backup goes to your Drive and we cannot see it
• Your payment gateway (Razorpay, Cashfree, PhonePe, PayU or Paytm): only when you connect your own account. To take a payment, the gateway receives the amount and the customer's name, mobile number and email. Card, UPI and bank details are entered on the gateway's own page — ShineDesk never sees or stores them. Your gateway keys and email password are stored encrypted.
• Anthropic (Claude AI): only when you switch on AI replies in the WhatsApp Assistant. To compose a reply, the customer's WhatsApp message and that customer's own details needed for the answer (name, bill numbers, amounts, appointment times) are sent to Anthropic's API. Anthropic does not use API data to train its models and keeps it for a limited time under its own policy. With AI replies off, the assistant answers from a menu and nothing is sent outside our servers.

WhatsApp messages and PDFs you share are sent from your device through the app you choose — we do not receive copies.

WhatsApp Assistant: when a business switches it on, its customers can message the business's linked WhatsApp number (starting with "hi") to book appointments or get their own balance, bills and account statement. These go only to the WhatsApp number saved on that customer's account. By default the text of these chats is not stored on our servers — only the time and count of messages, for spam limits, deleted after 3 days. If a business asks us to enable its Chat screen, the messages after a customer asks to talk to the business are kept for 90 days so that business can read and answer them (chats with the assistant itself are never kept); switching it off deletes the kept text. When a customer pays by UPI without a payment gateway and sends the payment message, that message (amount, UPI reference, date) is stored so the business can verify the payment and record the receipt. A customer can ask to talk to the business at any time.

6. Backups and data loss — your responsibility

Every customer must regularly take a backup of their data to their own Google Drive using the backup option in the app.

We take care to protect your data, but data can be lost due to device loss, wrong deletion, network problems, server failure or other reasons, from our side or from the customer's side. To the maximum extent permitted by law, 360 Vision and ConnectingPoint are not responsible for any loss of data or any loss caused by it. Your own Google Drive backup is your protection.

7. App permissions

• Camera: to take service photos and scan barcodes and serial numbers
• Photos / storage: to choose images and save PDFs you create
• Internet: to work with the ShineDesk server
• Notifications: to show the alerts you turned on

8. Data retention and deletion

Your data is kept while your account is active. You can ask us to delete your account and its data by email. Before asking, take a Google Drive backup — deleted data cannot be recovered.

9. Security

Access is protected by mobile number and password, with optional fingerprint or Face ID on phones. The business administrator manages staff accounts and can sign out any device. Production mode asks for an OTP before sensitive changes.

10. Children's privacy

ShineDesk is a business application intended for adults running or working in a business. We do not knowingly collect information from children under 13.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app. Continued use of ShineDesk after changes means you accept the updated policy.

12. Contact us

Questions about this policy or your data: [email protected] · 360 Vision, a sister concern of ConnectingPoint.