Privacy Policy

The short version

We hold two kinds of information: enough about you to run your account, and the business records you enter yourself. We use them to provide the service and for nothing else. We do not sell them. You can download everything, at any time.

1. What we collect

To run your account

• Name and mobile number
• Email address, if you give one
• Your mill or business name
• Which staff you have given access to, and what each may do

The records you enter

Everything you record in the service — vehicles, weights, samples, payments, parties, employees, stock and so on. This is your business data, and section 4 explains how we treat it.

Automatically

• Basic technical information needed to serve pages, such as the time of a

request and the type of device

• Error reports when something goes wrong, so that it can be fixed

We do not collect payment card details. Where online payment is offered, it is handled by a licensed payment provider and card details never reach us.

2. Why we hold it

• To provide the service and keep your account working
• To let you sign in, and to keep other people out
• To warn you before a subscription ends
• To answer you when you call, message or email
• To fix faults and improve the service
• To meet legal obligations where they apply

We do not use your information to advertise to you, and we do not profile you.

3. Who else sees it

Nobody, except as follows:

Amazon Web Services — the service runs on AWS, in their Mumbai region. Your records are stored on their infrastructure. They act on our instructions and do not use your data for their own purposes.

A payment provider — if you pay online, that provider handles the payment. They see what is needed to process it. They do not see your business records.

Where the law requires it — if we are lawfully compelled to disclose information, we will comply. Where we are permitted to tell you, we will.

We do not sell your information. We do not share it with advertisers. We do not give it to other customers.

4. Your business records are yours

The records you enter belong to you, not to us.

• We hold them so that we can provide the service, and for no other purpose
• We do not read them except when you ask us to help with a problem
• Each business's records are kept separate from every other business's
• You can download all of them at any time, in one file, from inside the

service

5. Where it is stored

On Amazon Web Services infrastructure in the Mumbai (ap-south-1) region — that is, within India.

Backups are held in the same region.

6. How long we keep it

While your account is active — for as long as you use the service.

After a subscription ends — the account becomes read-only and your records are kept for one calendar year. You may download them throughout that period. We will warn you by email and WhatsApp 30 days, 7 days and 1 day before that year ends.

After that year — the account and its records may be deleted permanently. Deletion cannot be undone.

If you ask us to delete sooner — we will, subject to anything the law requires us to keep.

7. Security

• Passwords are handled by Amazon Cognito. We never see or store your password.
• All traffic between your browser and the service is encrypted.
• Access is checked on every single request, against the specific business you

are signed in to.

• Only an admin of your business can add or remove staff access.

No system is perfectly secure, and we do not claim otherwise. If we become aware of a breach affecting your information, we will tell you promptly.

8. Your rights

You may:

• See what we hold about you
• Correct anything inaccurate
• Download all of your records, at any time, from inside the service
• Ask us to delete your account and its records
• Withdraw consent by closing your account

To exercise any of these, call or write to us using the details above. We will respond within a reasonable time, and normally within 30 days.

9. Cookies and similar

The service stores a small amount of information in your browser so that you stay signed in and it remembers your language and last-used screen. This is needed for the service to work.

We do not use advertising cookies, and we do not track you across other websites.

10. Children

The service is for businesses. It is not intended for anyone under 18, and we do not knowingly collect information from children.

11. Changes to this policy

We may update this policy. The current version will always be at www.lekhakaar.com/privacy.html, with the date it was last changed. Where a change is significant, we will tell you directly.