Legal
Short version: We only collect what's necessary to run your audit. Your settlement data is encrypted, never shared with any other party, and deleted within 7 days of your request. We do not sell data. We do not use your data for training models. We do not share findings with other brands.
MustLayer is operated by Indiasay Global Distribution Pvt. Ltd., a company incorporated in India. This policy describes how we collect, use, store, and protect information when you use our settlement reconciliation service at mustlayer.com and app.mustlayer.com.
For privacy questions, contact: akbar@mustlayer.com
Information you provide directly:
Information collected automatically:
We do not use third-party analytics trackers, advertising cookies, or behavioral profiling tools.
We do not use your data to train machine learning models, build benchmarks, or compare your findings against other brands' data.
Settlement files and order data are stored encrypted at rest. Each brand's data is isolated in a separate logical environment — your data is never co-mingled with another brand's data, even within our infrastructure.
Access to your data is limited to the individuals running your audit. No third-party contractors, freelancers, or sub-processors have access to customer settlement data.
We use industry-standard TLS for data in transit. Our infrastructure is hosted on providers with SOC 2 Type II certification.
We do not sell, rent, or share your personal information or settlement data with any third party, except:
Settlement files and order-level data are retained for the duration of your engagement and for up to 12 months after your last audit to support follow-up disputes.
Deletion on request: Request deletion at akbar@mustlayer.com and all your files, order data, and reconciliation results will be permanently deleted within 7 days. This includes all backups and copies. Deleted means deleted.
Contact information (name, email) may be retained for up to 3 years for legal and record-keeping purposes, unless you request earlier deletion.
The marketing site (mustlayer.com) uses only essential cookies for form functionality. No advertising or tracking cookies are placed. The app (app.mustlayer.com) uses session cookies required for authentication.
You can disable cookies in your browser settings. Disabling cookies may affect app authentication.
You have the right to:
To exercise any of these rights, contact akbar@mustlayer.com. We will respond within 30 days.
In the event of a data breach that affects your personal information, we will notify you within 72 hours of becoming aware of it, as required by applicable law. The notification will describe the nature of the incident, the data affected, and the steps we have taken or will take.
We may update this policy from time to time. When we make material changes, we will update the effective date at the top and notify active users by email at least 14 days before the changes take effect. Continued use of the service after that date constitutes acceptance.
This policy is governed by the laws of India. Disputes are subject to the jurisdiction of the courts of India. This policy is intended to comply with India's applicable data protection framework.
For any privacy-related question, concern, or request:
We aim to respond within 2 business days.