Privacy Policy
What ghumSign collects when your organization signs up, where that data is stored, who it is shared with, and how to request an export or deletion.
Last updated: 25 June 2026
1. What we collect
We collect the information you provide when registering an organization (organization name, contact email, phone, address), account credentials, and the content your organization stores while using the products. We also collect basic usage and device data needed to operate and secure the services.
2. How we use it
To provide and maintain the services, authenticate users, process billing, send service and account notices, provide support, and meet legal obligations. We do not sell your personal data.
3. Data storage & tenancy
Each organization's data is isolated in its own tenant database (shared or dedicated per your plan). Data is hosted on managed infrastructure with access restricted to authorized personnel and processes.
4. Sharing
We share data only with service providers that help us run the platform (e.g. email and hosting), under confidentiality obligations, or where required by law.
5. Retention & your rights
We retain your data while your account is active and for a limited period afterward to meet legal and operational needs. Your organization may request export or deletion of its data, subject to applicable law.
6. Security
Passwords are stored hashed, access is gated by authentication and per-product authorization, and transport is encrypted. No system is perfectly secure, but we work to protect your data.
7. Contact
For privacy questions or data requests, contact hello@ghumcloud.com. The data controller is Ghum Nepal Pvt. Ltd..