Privacy policy
Mawle is a showroom app for Godrej Interio dealers, made and run by Lengliim LLP. This page says what Mawle keeps about the people who use it, about the customers a showroom records in it or sends a link to, about anyone they name to call at delivery or who signs for an order, and about the people a showroom names to get its reports, who can see it, how long it is kept, and how to have it removed. It covers mawle.lengliim.com and the Mawle app for Android.
Who looks after it
Lengliim runs Mawle and the server it runs on, and looks after the accounts it gives showrooms and their staff.
A showroom decides what it records about its customers, and why. Lengliim keeps those records in Mawle for the showroom, and uses them only to run Mawle for that showroom, to fix faults it reports, and for the counts below.
Lengliim also counts, per showroom and never by person, some of what Mawle keeps, to see whether what it adds to Mawle or changes is used and works: orders, quotations, walk-ins and the products staff showed, customer links made, the people named to get a showroom's reports, whether a showroom has set a sale, messages sent from Help & feedback, and unsubscribes from New in Mawle's notes. No total is read over so few accounts that one person's could be told, since a showroom's few people are known.
Lengliim emails its own news and offers to the people in showrooms; My Account turns them off. Lengliim never sells personal data, and never uses a showroom's records, or anything it counts, for advertising.
Mawle's screens for Lengliim show no showroom's walk-ins, follow-ups, quotations, orders, customer links or stock. A Lengliim administrator could see them only by adding an account to the showroom, or resetting the password of one, and signing in with it, and the showroom's owner would see that on My Showroom. Lengliim also runs the server, so the people who look after it can reach what is stored there.
Questions about this page, or about your data: mail@lengliim.com.
If you have a Mawle account
Nobody signs up to Mawle. Lengliim makes a showroom's first account, and the showroom's owner adds the rest of the team. Mawle keeps:
- your name and email address, as the person who made the account typed them or Lengliim corrected them, and your showroom and role;
- your password, only as a hash, which nobody can turn back into the password, Lengliim included. The first one is chosen for you and shown once to whoever made the account; Mawle also emails you a link to choose your own, and asks you to choose one if you sign in with the first;
- when the account was switched off or on, when its password was changed or reset, and when Lengliim changed its role or corrected its name or email, and by whom, with any note Lengliim wrote of why;
- which emails Mawle sent you, when, and whether Google's mail server took each one, with its words when it refused, and which of New in Mawle's notes each of its emails carried, but no copy of the email; and whether you have unsubscribed from Lengliim's news or from New in Mawle's notes, and when;
- when you accepted Mawle's terms of use, and which version;
- when you went past the welcome Mawle shows after your first password, which of its first steps you did or passed over and when, and whether you put them away. Only you see them: nobody at your showroom does, and Lengliim counts them only as totals across showrooms;
- which of New in Mawle's notes, on what changed in Mawle, you were shown, on the Catalogue or on its page, and when, when you closed a note's hint beside a button that changed, by using the button or with Got it, and since when your showroom's plan and your role have been as they are, which tells what is new to you. Only you see them, and Lengliim counts them only as totals across showrooms, as First steps;
- your name on what you do in Mawle: the walk-ins you record or serve, follow-up calls, quotations, orders booked, payments taken, collected, refunded and reversed, delivery and installation days agreed or moved, orders moved to a new quotation, orders cancelled, who installs an order, as the one picked or the one who picked them, an order's dispatch, delivery, installation and handover, the checkpoints answered before its installation, holds on an order opened and closed, tax invoices' numbers recorded and replaced, wardrobe and sofa designs, customer links you make, stock you count or take off the list, shipments you save or undo, bills you add or remove, reports on installation guides, flags on a product's details, messages to Lengliim from Help & feedback, requests for more seats or another plan, changes to who gets the showroom's reports, and each time you erase a customer's details.
Mawle asks staff for no phone number or photo of their own, and sends no text message or notification. It emails you about your own account: a link to choose your password when the account is made or its password reset, or when you ask for one with “Forgot password?” on the sign-in page, and a note when your password is changed, when the account is switched off or on, when your role, name or email is changed, and when the account is erased. A showroom's owners are emailed the name and role of anyone who joins or leaves the team, and, on Insights or Complete, the showroom's reports (below), which My Account turns off and on again for each owner. Lengliim may also email its news, offers and notices to the showrooms, or to its own administrators and staff alone, each with a link to unsubscribe; My Account turns them off and on again. When Lengliim publishes New in Mawle's notes on what changed, everyone in a showroom who has signed in is emailed those for them, each note once, with a link that stops those alone, and a switch of their own on My Account. Whoever had unsubscribed from Lengliim's news before New in Mawle's notes had their own switch has them off too. A showroom can name one person, usually its owner or a manager, for anyone whose details it records to call about them: Mawle keeps that person's name and mobile number with the showroom's details, and puts them in the notices below.
Those details are the showroom's address and numbers, and any GSTIN, Shop & Establishment registration, trade licence or Udyam registration that its owner, a manager or Lengliim types in. A proprietor's GSTIN holds their PAN. Everyone at the showroom sees them, and its quotations print its GSTIN. Mawle also keeps what the showroom has paid Lengliim: each payment's plan, period and amount, Lengliim's note of it, and the invoice, when Lengliim attaches one. The showroom's owner and Lengliim's administrators see them. A registration stays until someone who can type it in clears it. What the showroom has paid stays with Lengliim as its record, with no end date, even once an account is deleted.
Mawle also keeps the showroom's stock, when its owner or a manager records it: how many of each product the showroom holds, in quantities only, never a price. Each figure is kept with who counted it, or who saved the shipment that changed it, and when. Everyone at the showroom sees the figures; its owner and managers also see each shipment, with what came and who saved it, and each figure's history. A shipment can also keep its bill: its number as printed, and up to 5 photos or PDFs of it, each with who added it and when. A photo is made smaller and saved again without what the camera wrote into it, such as where and when it was taken and on which phone; a PDF is kept as it came. When asked, Mawle reads a Godrej bill's PDF for its number and date, the GSTINs that show it is the showroom's, and each line's LN code, quantity and packages, to fill in the shipment. It keeps only what the shipment saves, and never reads an amount: a shipment filled in this way also keeps the bill's date and the packages each line came in. A bill's picture shows what the showroom paid, so only the showroom's owners and managers add, open or remove one, and Lengliim's screens never show it. Removing a picture changes no figure. They are the showroom's records, and stay with it as its walk-ins do.
An owner or manager can also put figures in from a stock sheet, such as the showroom's billing software's stock report. Mawle reads the sheet for its LN codes and quantities, in memory, and keeps none of it: the file is never saved, shown back whole or emailed. What stays is each figure it set, with who put the sheet in and when, the day its figures were from, and the name of the sheet inside the file.
Your showroom's owner sees the team: each name, email address and role, and the account's record without Lengliim's notes. The owner, managers and showroom staff see who recorded or served each walk-in, who made each follow-up call, who prepared each quotation, who drew each design and who made each customer link, and on an order who booked it, took, collected, refunded or reversed each payment, agreed or moved its delivery or installation day, moved it to a new quotation, recorded a delivery's dispatch or delivery, or a try at one that did not deliver, its installation, handover or tax invoice's number, or replaced that number, answered a checkpoint before its installation, opened or closed a hold on it, or cancelled it, and who installs it and who picked them; a printed quotation shows the customer your name. Whoever takes a payment on an order sees the names of the showroom's people switched on, to say which of them collected it. The owner and managers also see how many walk-ins each person recorded, who changed the list of people the showroom's reports go to, and, for 12 months, who erased a customer's details, when, and how many records. Lengliim's administrators see every account's name, email address, showroom and record, notes included, and can switch an account off, reset its password, correct its name or email, and erase it. They also read the flags you send on a product's details and the messages you send from Help & feedback, with your name and showroom; nobody at your showroom sees them, and Lengliim's reply to a message is shown only to you. A message carries the page you sent it from, without what was searched, and whether it came from the app; nothing is sent unless you send it.
Mawle keeps an account, switched on or off, and your name on what you did with it, until the account is deleted: then its name, email address and password are erased, its first steps and what New in Mawle showed it deleted, and what you did shows as “former staff”. To have yours deleted, see Deleting your Mawle account.
If a showroom recorded your details
A showroom can record your visit without knowing who you are. It writes down your name and mobile number only after reading you this notice and hearing you agree:
“We'll keep your name and mobile number to call or message you about the products we discussed. Nothing else, and not after 4 months. Tell us any time and we'll delete it.”
When the showroom has given one, the notice ends with someone there to call, or the showroom's own number. Mawle then keeps:
- your name and mobile number, when you agreed, and the words you agreed to;
- calls made to follow up your visit: when, how, and a note of what was said;
- quotations made out to you, and wardrobe and sofa designs drawn for your visit;
- when you book an order: the quotation it was booked from, and each it was moved to before dispatch, with why; each of its deliveries, with what it carries and in how many packages, and its day, and its installation day, each with the part of the day, whether you agreed it, and when you want it, or that you will tell us; each payment, with how much, when, how it was paid and the receipt's number, and whether it was collected at one of its deliveries or its installation, and by whom, never naming a driver or helper; when its balance is to be collected, before unloading, at installation or not at the door; each refund, with how much, when, how it was paid back and its payment voucher's number; any payment or refund reversed as recorded wrong, with when and why; each time one of those days moved, whether you or the showroom asked, and why; when each delivery was dispatched and delivered, and whether Godrej delivered it, each time one came back undelivered and why, with any note, and how each item arrived, as ordered, damaged or missing, with the packages that came; when it was installed and handed over to you; once you agree a delivery's day, a four-digit code for that delivery, until it is delivered, and whether you gave it at the door, or why not; what was checked before it was installed (the goods on arrival, fixing to the wall, and level and joined), or why a check was skipped; whether its handover was signed, and whether by you, the person to call or someone else, never by name, or why it was not; anything that held it up, such as damage or a missing part, the item and the delivery it was on, any replacement sent for it, and what was done about it; the number of its tax invoice, and any number it replaced, with when and why; and, if the order is cancelled, when and why.
Whether or not you give your details, the visit itself is recorded: what you came in for and the products staff showed you, how soon you mean to buy and any date you named, who came with you, whether you had been in before, what was done and what happens next, roughly what you want to spend, and a short note by the staff.
A quotation can also be made out to your company, with the company's GSTIN if you give it, whether or not you agree to the notice: they are given for the quotation, which prints them, and are in the message it is sent with. A proprietor's GSTIN holds their PAN.
When you book an order, the showroom can also write down your name, mobile number and address for delivering it, only after reading you this notice and hearing you agree:
“We'll keep your name, mobile number and address to deliver and fit your order, and to call or message you about it. Nothing else, and not after a year from when it's handed over to you, or cancelled. Tell us any time and we'll delete them.”
It ends as the notice above does. Mawle keeps them with the order, with when you agreed and the words you agreed to, and the state the address is in. Your order is booked whether or not you give them. If part of your order goes to another address you give, Mawle keeps that address and its state with them, and erases it when they are erased.
If someone booking an order names you as the person to call when it is delivered and fitted, the showroom writes down your name and mobile number only after reading you this notice, at the showroom or on the phone, and hearing you agree:
“We'll keep your name and mobile number to call or message you about delivering and fitting this order, and anything to put right after. Nothing else, and not after a year from when the order is handed over, or cancelled. Tell us any time and we'll delete them.”
It ends as the notices above do. Mawle keeps them with the order, with when you agreed and the words you agreed to.
When an order is handed over, whoever accepts it, you, the person to call or someone else, can sign for it with a finger on the phone of whoever hands it over, under the words “I have received this order fitted and in good condition.”, only after hearing this notice and agreeing:
“We'll keep your signature to show that you received this order. Nothing else, and not after a year from today. Tell us any time and we'll delete it.”
It ends as the notices above do. Mawle keeps the signature with the order, with when it was given and the words agreed to, and no copy of it on that phone. Nobody has to sign: the order is handed over either way.
Your details are kept so that the showroom can call or message you about the products you discussed with its staff, and any quotation for them, and are used for nothing else. Your details for delivery are kept so that it can deliver and fit your order, and call or message you about it, and are used for nothing else either. Given as the person to call, your name and number are kept so that it can call or message you about delivering and fitting that order, and anything to put right after, and are used for nothing else. A signature at handover is kept as the record that the order was received, fitted and in good condition, and is used for nothing else. At the showroom, the owner, managers and showroom staff see them, the signature on the order's page. Service staff see a signature only as it is given, on a job given to them. Where an order's balance is collected at installation, Service staff see on that job how much to collect, and nothing else of what you pay. Service staff see the name or company an order was booked under, your details for delivery, and yours as the person to call, only while the order is a job given to them to install, until it is handed over or cancelled, and Mawle keeps no copy of them on their phone. Otherwise, Service staff see only what erasing them needs: the names kept under a number they type in, with whether any holds details for delivering an order and whether that order is still to be delivered or fitted, and whether any is an order's person to call at delivery; or, under a name they type in, the date of each visit or quotation kept under it with no number, and a quotation's reference. On the day of a delivery, the driver carries a printed day sheet with your name, mobile number and address, what is delivered, with a box for the packages that came, and what to collect for it, and hands it back to the showroom at the end of the day; it never names the person to call. Nobody at another showroom sees them. When staff send you a quotation, call you back, or tell you of your order's booking, a new day for it, the day it comes, with its delivery code, or its handover on WhatsApp, the message goes from their own WhatsApp, with your number in it. Mawle itself sends nothing.
Given at a visit or for a quotation, your name and number are erased 4 months after you agree, and with them the visit's budget and note, the products staff showed you, and what was written about each call. A visit that waited on a phone or computer, as below, is counted from when it was recorded, not from when it is sent. The visit stays in the showroom's counts, without you in it. A quotation keeps the name, company and GSTIN it was made out to, as the showroom's record of what it offered, until you ask for it to be removed: with your details, or at any time after. A quotation booked as an order is not removed: it stays with the order, as the showroom's record of what you booked, and so does one the order was moved from. Your details for delivery are erased a year after the order is handed over to you, or a year after it is cancelled, and stay with it until then. The order itself stays, with its number and each quotation it was on. So does what staff wrote on it, which no erasure reaches: why it was cancelled or a day or its quotation moved, what was noted when a delivery came back undelivered, what held it up and what was done about it, why a check was skipped, and why a payment was reversed or its tax invoice's number replaced. Given as the person to call at an order's delivery, your name and number are erased a year after it is handed over, or a year after it is cancelled, too. A signature given at an order's handover is erased a year after the handover, whatever details are kept, or sooner with the details it goes with: the person to call's, if they signed, otherwise the customer's details for delivery. Where those were not kept, it goes when the customer's own details are erased at their request. The order still says whether it was signed, and by whom, never by name.
To have your details erased sooner, tell anyone at the showroom, or the person the notice named. Its staff can find them in Mawle by the mobile number you gave, or by your name if you gave none, and erase them at once, with your quotations if you ask, but for one booked as an order. Found by the mobile number you gave with them, your details for delivery are erased too, and the order stays; if it is still to be delivered or fitted, they are told first that it then cannot be, until you give them again. Given as the person to call at an order's delivery, yours are found by your own mobile number and erased at once the same way, and the order stays. Each person's details are their own: erasing the customer's does not erase yours, nor yours theirs. Your details for delivery can also be erased on their own, on the order's page, and your other details then stay; staff are told first, the same way, if it is still to be delivered or fitted. So can yours as the person to call, and so can a signature given at its handover, whatever details are kept. A signature goes with the details erased by number, or on the order's page, as above. A quotation whose details are already erased, or that was made out to your company without them, is found by your name or your company's too, and removed when you ask. The showroom's owner and managers then see who erased a customer's details and how many records, never whose. A visit still waiting on a phone or computer to be sent, as below, is reached only when the erasing is done there, in the same app or browser: your details are then taken out of it before it is sent. One waiting anywhere else is not reached until it has been sent. If you cannot reach the showroom, write to mail@lengliim.com.
Customer links
A showroom on Complete can send a customer a link to its catalogue, or to a range or a few products from it, at its own prices. The link opens in the customer's browser, with no account, for up to 7 days, or until the showroom ends it sooner.
For the showroom, Mawle keeps which showroom made the link and which of its staff, what it holds, when it was made and when it ends or was ended, how many times it was opened and when first and last, and which products were looked at through it, how many times each and when first and last.
Mawle keeps no name, phone number, address, internet address or browser details of the person who opens the link, apart from the web server's notes of every request and of any script or frame a page refused, below. Its pages set no cookie and keep nothing on the phone or computer they are opened on; the browser keeps only what it keeps of any website, such as the pictures it showed and the addresses in its history. Staff send the link from their own WhatsApp, or another app their phone offers, so Mawle never learns the customer's number.
At the showroom, the owner, managers and showroom staff see its links, with what each was opened for. Mawle's screens for Lengliim show none of them. Ending a link stops it opening and counting. A link is erased, with everything kept about it, 30 days after it ends, and not sooner.
If a showroom emails you its reports
A showroom on Insights or Complete can name up to 5 people, with a Mawle account or not, such as Godrej's Regional Sales Manager, to be emailed its report for each week, month or quarter. Its owner and managers name them, and Lengliim's administrators can when setting the showroom up. Mawle keeps each one's name, what they are to the showroom, their email address and which reports they get, with who added, changed or removed them and when. The showroom's owner and managers see them, and Lengliim's administrators.
A report holds the showroom's totals for the period: its walk-ins, follow-ups, quotations, orders and the money taken for them, deliveries and installations. It names no customer and nobody on the showroom's team. The email gives the main figures and attaches the whole report as a PDF. The showroom's owners get each one too. It goes the morning after the week, month or quarter ends, an email to each person on their own, so nobody sees whom else it went to.
Each email has a link that stops that showroom's reports to that address, and asks first. Mawle then keeps when they were stopped and a fingerprint of the address, from which the address cannot be read back, so that naming it again does not start them again: only the showroom can, and an owner, in My Account. A person's name and address are kept until the showroom or Lengliim removes them. The list of changes then keeps only what they were, such as “RSM”. To have yours removed, ask the showroom, or write to mail@lengliim.com.
For each report emailed, Mawle keeps its figures as they were sent, so that the showroom can open the PDF again as it went, but no copy of the email or the file; and for each email, whom it went to, when, and whether Google's mail server took it, with its words when it refused. The showroom's owner and managers see these on Reports, and Lengliim's administrators see the emails but not the figures. Once the showroom removes someone, or changes their address, the emails they were sent keep only what they were, and none of the mail server's words.
The reports are sent from Lengliim's own mailbox, through Google, which keeps a copy of each there, as it does of every email Mawle sends. Lengliim can read them in that mailbox.
On your phone or computer
- Opening Mawle sets two cookies that signing in needs, and signing in sets a third, which keeps you signed in for up to 7 days, until it goes 8 hours unused or you sign out. Mawle sets no advertising or tracking cookies of its own.
- So that it works without a connection, Mawle keeps copies of the catalogue, with its prices, photos and documents, and of pages you opened. The pages go when you sign out, or when the next person signs in on the same phone or browser.
- A customer link's pages are never kept, on a customer's phone or on a showroom's own, so they open only with a connection, and not once the link has ended.
- A walk-in that cannot be sent at once, with no connection, no answer from Mawle in time or a sign-in that has ended, waits on the phone or computer, with any name and number in it, until Mawle is next open there with a connection and the person who recorded it signed in, and it is sent. Signing out does not remove it. While it waits, Mawle takes the name and number out of it, with the budget, note and products shown, 4 months after it was recorded, and removes the visit unsent after 12 months. It does so when it is next opened on that phone or computer, whoever is signed in; where it is never opened again, the walk-in stays until the app's or the browser's data is cleared.
- A report on an installation guide waits there too, until the person who wrote it opens the catalogue or a guide with a connection. Mawle removes it unsent 12 months after it was written, in the same way as a walk-in.
- So does a flag on a product's details, until the person who wrote it opens the catalogue with a connection. Mawle removes it unsent 12 months after it was written, in the same way.
- The Android app needs no permission but to use the internet: not your camera, location, contacts, microphone or files. Android's own backup can copy the catalogue's photos and documents, but never your sign-in, the pages it keeps or anything waiting to be sent, and, in any version of the app after 1.0, never its prices.
- Mawle contains no analytics, advertising or crash-reporting software.
Other companies
- Hostinger provides the server Mawle runs on.
- Google runs Lengliim's email, which sends Mawle's, and keeps Mawle's backups for Lengliim in Google Drive, encrypted before they leave the server.
- A product with a video shows it from YouTube, so opening its page lets YouTube, which is Google's, see your device's internet address and which video the page shows, and set its own cookies, under Google's privacy policy.
- WhatsApp, your phone's dialler, Google Maps, your phone's printing, YouTube for an installation guide's clip, and interio.com for Godrej's spec sheets, open only when you tap a link or button for them, and receive what it carries, such as a customer's number, the message to them, a quotation or a day sheet to print, which clip to play, or a picture: of a product with its price and the showroom's name, or of a quotation's drawings with the showroom's name and the quotation's number. Where the phone has no WhatsApp, that picture and its message go to the app you pick.
- If you report a problem with an installation guide, Lengliim may take what you wrote to Godrej.
- On My Showroom, a showroom's rating and reviews come from Google Maps, read from Google each time the page opens and kept by Mawle nowhere: Mawle's server tells Google only which listing to read. Showing the reviews, on a tap, loads each reviewer's picture from Google, which then sees your device's internet address. Google Maps is used under Google Maps' terms and Google's privacy policy.
Mawle sends personal data to nobody else.
On the server
Everything between your device and Mawle is encrypted (HTTPS), and the database cannot be reached from the internet.
The web server notes each request: your device's internet address, the time, the address of the page or file asked for and of the page that linked to it, either of which can hold what was searched for, and the user agent your browser or the app sends with every request. A user agent names the browser and the system it runs on, with their versions. It can also name the phone's model, and from the Mawle app for Android it does, with Android's build number. Mawle puts no name, email address or phone number in the notes, and newer ones replace them as they fill.
Mawle's pages tell your browser which scripts they may run, and which frames: what they may show inside them, such as a YouTube video, and that no other site may show them inside its own. When a page meets a script or a frame it does not allow, such as one a browser extension adds, your browser tells the server, which notes the page, where the script or the frame came from, a script's first few characters, and the user agent. Lengliim reads them to keep the pages safe, and to find a page of Mawle's own that its rules broke. Newer notes replace these too as they fill. To keep one device from sending too many, the server counts the reports from each internet address, in its memory alone, until it next restarts.
To stop password guessing, failed sign-ins are counted over 15 minutes, by email address and by internet address. So that nobody can fill an inbox with them, the links asked for with “Forgot password?” are counted the same two ways, by the email address typed, whether or not it has an account, over 60 minutes and over 24 hours. The counts are kept only in the server's memory, until it next restarts.
So that nobody can read through a showroom's customers one number at a time, each account can look up 10 customers to erase in any 24 hours. Only how many and when are counted, never who was looked up, and the counts are kept in the server's memory alone, as above.
So that no account can swamp the server with pictures of bills, bills to read or stock sheets, each account can add 50 pictures of bills, read 100 bills to fill in a shipment and read 100 stock sheets in any 24 hours. Only how many and when are counted, and the counts are kept in the server's memory alone, as above.
Lengliim keeps backup copies of Mawle's database, which holds everything above but the invoices and the bills' pictures, and of those files in copies of their own, so that Mawle can be brought back after a fault. Something erased in Mawle stays in the database's copies for up to 60 days. A bill's picture removed in Mawle stays in the files' copies for up to 15 weeks.
Asking about your data
If you have an account, write to mail@lengliim.com to ask what Mawle holds about you, or to have it corrected or deleted. A customer, someone a customer named to call at delivery, or someone who signed for an order at its handover, asks the showroom, which can see what Mawle holds about them and erase it, but for what a customer link kept, which goes when Customer links, above, says; details given wrongly are put right by erasing them and giving them again. Someone a showroom named to get its reports asks the showroom, or writes to mail@lengliim.com.
Mawle is made for people at work in a showroom, not for children.