PaisaMaps for businessSecurity
Your data stays yours.
What we protect, how, and what we never hold in the first place.
Account and data
How each part is protected
- Sign-in
- With your Google account. We never see or store a password.
- Your store data
- Encrypted at rest with its own key, visible only to people in your company, and deletable by you at any time.
- Connected analytics
- Google Analytics and Search Console connect with read-only access; the tokens are encrypted at rest.
- API keys
- Shown once when created and stored only as a one-way hash. Company admins see every key and can revoke any of them.
- Payments
- Handled by Razorpay. Card and UPI details go to Razorpay, not to us.
- In transit
- HTTPS on every page and request, with HSTS.
Hardening
Built in, not bolted on
- Per IP
- rate limitson public and signed-in endpoints
- Headers
- on every responseno content sniffing, framing restricted
- Limits
- on uploadssize and format checked before processing
- Roles
- in every companyowners, admins, members and read-only viewers
Scope
What we hold, and what we don't
We hold
- Your name and email from Google sign-in
- The projects, locations and files you create
- Billing records and GST invoices
We don't hold
- Passwords
- Card or UPI details
- Your customers' personal data, unless you upload it, and then only in your company
Keep exploring
Where to go next
Methodology
How 15,341 pincode scores are built from public data, anchored to national household spending, checked every week and…
Read more →FAQ
Answers about PaisaMaps' data, signals, map, workspace, pricing, security and accounts.
Read more →Data API & exports
Export purchasing power, income, spend and signals by pincode as CSV, Excel or JSON, or pull them with an API key. Higher…
Explore →Have a security questionnaire?
Send it to us. We'll answer it, and tell you plainly where something isn't in place yet.