Privacy policy

Facto Lite is business software. Almost all of the data in it is data your company puts there about its own work and its own people — we hold it on your behalf and your company decides what goes in. This policy covers both that and the small amount we collect directly, such as when you fill in the contact form on this website.

• Account details: the company name, your name, the email address or mobile number you sign in with, and a password we store only as a hash.
• What your company puts in: tasks, checklists, customers, deals, attendance, leave, salary and the documents attached to them. We do not decide what this contains.
• Technical records needed to run the service: sign-in times, IP addresses, and an audit log of actions taken inside your account.
• What you send us: anything typed into the contact form on this website, or into a support request.

We do not run advertising, we do not sell data to anybody, and there is no analytics or tracking script on this website.

• Providing the service — which is to say, showing your company its own data back.
• Support: answering a question you asked, and diagnosing a fault you reported.
• Service messages, such as telling you when a free trial is ending. These are not marketing and cannot be turned off while the account is open.
• Keeping the service secure, and meeting a legal obligation where one applies.

Every record carries the company it belongs to, and the database enforces that separation itself through row-level security rather than relying on application code to remember. One company cannot read another company’s rows.

Uploaded files are never on a public address. Each one is fetched through a link that expires and that is issued only to somebody entitled to open that record.

• People in your company, according to the role and permissions your administrator gives them.
• Facto support staff, when reaching into an account is necessary to answer a question or fix a fault. Access of this kind is itself written to an audit log.
• Service providers we use to run the software — hosting, file storage, and email delivery — which process data on our instructions and for no purpose of their own.

We do not disclose your data to anybody else unless the law requires it of us.

The application and its database run with a cloud hosting provider, and uploaded files are stored with a cloud object-storage provider. Both operate infrastructure in more than one country, so your data may be stored or processed outside India. If you need a specific location for a contractual or regulatory reason, ask us before you sign up and we will tell you plainly whether we can meet it.

For as long as your account exists. A free trial ending does not delete anything: the modules switch off and the data stays exactly as you left it, so that switching one back on later returns you to it.

If you ask us to close your account, it is marked for deletion and the data is removed after 90 days. That window exists so that a deletion asked for by mistake can be undone; tell us if you want it shortened.

• Export: every list in the product exports to a spreadsheet, at any time, by anybody with permission to see it — including during the read-only week after a trial ends.
• Correction and deletion: an administrator of your company can edit or remove records directly. For anything they cannot reach, write to us.
• If you are an employee rather than the account holder, ask your own administrator first — the data is your company’s to correct, and they can do it faster than we can.

One cookie, to keep you signed in. It is set when you sign in and cleared when you sign out. There are no advertising, analytics or third-party cookies on this website or in the product.

If this policy changes materially we will say so in the product rather than quietly editing this page. The date at the top is the date the current text was published.

Write to [email protected]. We answer privacy questions from customers and from their employees alike.