Privacy Policy

MSG Technologies is the Data Fiduciary for personal data processed through this website and our products, unless a customer organisation is the Data Fiduciary for data they put into a subscribed product (for example, plant records in FileFree QMS).

Contact: support@msgtechnologies.com. Remote-first, operating from India.

This policy applies to personal data we process when you:

• Visit msgtechnologies.com or related product sites
• Submit a contact, enquiry, or demo request
• Create an account or use FileFree QMS, Apla Bazaar, or custom software we host
• Write to us by email or other support channels

For customer-hosted or customer-controlled records (quality registers, employee names entered by a plant, billing data in a customer’s tenant), the customer is typically the Data Fiduciary and we act as a Data Processor / on their instructions.

Depending on how you interact with us, we may collect:

• Identity & contact: name, company, email, phone, website, role
• Enquiry content: project description and service interest
• Account data: login identifiers, organisation name, and usage needed to provide the product
• Technical data: IP address, browser type, device, pages viewed, and similar logs where needed for security and site operation

We do not seek to collect sensitive personal data or children’s data through this website. Please do not send such information unless we specifically ask and you have a lawful basis to share it.

Under the DPDP Act, we process personal data for a specified purpose and only as much as is needed for that purpose. Typical purposes:

• Respond to enquiries and discuss a project or product demo
• Provide, operate, and support our products and services
• Send service, billing, and security notices
• Improve the website and protect against misuse or fraud
• Comply with law, contracts, and dispute resolution

Where required, we rely on your consent (for example, submitting the contact form). You may withdraw consent at any time by emailing us. Withdrawal does not affect processing already done lawfully, or processing we must continue for a legitimate use permitted under the DPDP Act (such as complying with law or performing a contract you asked for).

We do not sell personal data. We may share it with trusted processors who help us run email, hosting, analytics, or payments — only as needed, under contracts that require confidentiality and DPDP-aligned safeguards. We may disclose data if required by law, court order, or to protect rights and safety.

Our tools and hosting may process data outside India. Under the DPDP Act, personal data may be transferred outside India except to countries or territories restricted by the Central Government. We take reasonable steps so that any transfer remains consistent with this policy and applicable law.

We keep personal data only as long as needed for the purpose for which it was collected, or as required by law (for example, tax or contract records). When the purpose is served and no legal retention applies, we erase or anonymise the data.

We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. No method of transmission or storage is completely secure; we work to reduce risk and to notify as required if a personal data breach occurs.

Subject to the DPDP Act and its rules, you may:

• Seek a summary of personal data we hold about you and the processing activities
• Request correction, completion, or updating of inaccurate or incomplete data
• Request erasure of personal data that is no longer needed for the stated purpose, subject to legal exceptions
• Withdraw consent where processing is based on consent
• Raise a grievance with us and, if unresolved, approach the Data Protection Board of India as provided under the Act
• Nominate another person to exercise your rights in case of death or incapacity, where applicable

To exercise these rights, email support@msgtechnologies.com with enough detail for us to identify you and the request. We may ask for information to verify identity. We will respond within the timelines prescribed under the DPDP Act and rules.

Our website and products are intended for businesses and adults. We do not knowingly process personal data of children (under 18) for this site. If you believe a child has provided data to us, contact us and we will take appropriate steps, including deletion where required.

We may use essential cookies or similar technologies to operate the site (session, security). If we use optional analytics or marketing cookies, we will do so in a manner consistent with applicable law and, where required, your consent. You can control cookies through your browser settings.

For privacy or DPDP-related complaints, write to our Grievance Officer:

• MSG Technologies — Grievance Officer
• Email: support@msgtechnologies.com
• Subject line: Privacy / DPDP grievance

We will acknowledge and address grievances in line with the DPDP Act and rules. If you are not satisfied, you may pursue remedies available under the Act, including approaching the Data Protection Board of India.

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change. Continued use of the website or services after an update means you should review the revised policy. Material changes will be highlighted on this page where reasonably practicable.

See also our Terms & Conditions.