Privacy Policy

We collect three categories of information to operate the Service:

a) Account & tenant data

• Company name, owner name, email, phone, billing address
• Subdomain, branding assets, payment method tokens (held by our PCI-compliant payment processors, never stored on our servers)

b) Subscriber data (end-users of your ISP)

You, the tenant, are the data controller for your subscribers' data. We process it on your behalf. This may include names, addresses, contact details, KYC documents, plan history, RADIUS attributes and connection logs.

c) Service & technical data

• IP addresses, browser type, device information, access logs
• Aggregated usage analytics to improve the Service

• To provide, maintain and improve the Service
• To process subscription payments and prevent fraud
• To send transactional emails (invoices, security alerts, policy updates)
• To respond to support requests
• To comply with legal obligations and enforce our Terms
• To send product updates and tips (you can opt out any time)

We use a minimal set of cookies and similar technologies:

• Strictly necessary: session, CSRF token, authentication
• Analytics: anonymized usage via self-hosted Plausible (no cross-site tracking)
• Marketing: none, by default. We don't run third-party advertising trackers

You can clear cookies in your browser at any time; doing so will sign you out.

We share data with carefully selected processors, only as needed to provide the Service:

• Payment processors (Razorpay, Stripe, PayPal) — for billing transactions
• Email & SMS providers (Postmark, MSG91) — for transactional notifications
• Cloud infrastructure (AWS Mumbai / Singapore) — for hosting
• Support & analytics (Plausible, Sentry) — for debugging and product improvement

All processors are contractually bound to protect your data and use it only for the services they provide to us.

• Active tenant data is retained for the lifetime of your subscription
• After cancellation, tenant data is retained for 30 days, then permanently deleted
• Financial records (invoices, GST filings) are retained for 7 years per Indian tax law
• Backups are retained for 30 days

You have the right to:

• Access a copy of your personal data
• Correct inaccurate or incomplete data
• Delete your data (subject to legal retention requirements)
• Export your data in a machine-readable format
• Restrict or object to certain processing activities
• Withdraw consent at any time (where processing is consent-based)

To exercise any of these rights, contact privacy@radiuscrm.io. We respond within 30 days.

We protect your data with industry-standard safeguards:

• AES-256 encryption at rest; TLS 1.3 in transit
• Tenant data isolation at the database layer
• SOC 2-aligned controls, quarterly third-party penetration tests
• Daily encrypted backups stored in geographically separate regions

For full details, see our Security Policy.

For privacy questions or to exercise your rights, contact our Data Protection Officer: