The short version
- We collect only what we need to run AgroKhata for you.
- We do not sell your data or your farmers' / customers' data, and we do not use it for advertising.
- We never see or store your card, bank or UPI details; payment gateways handle them.
- You can ask to see, correct or delete your data at any time.
1. Who we are
AgroKhata is a SaaS product of DMSync Infotech ("we", "us"). This policy explains how we handle personal data when you visit this website or use AgroKhata, in line with the Information Technology Act, 2000 and the rules under it, and the Digital Personal Data Protection Act, 2023 as it applies to us. It should be read with our Terms & Conditions.
2. Two kinds of data
- Your account data - information about you and your shop that you give us to create and pay for an account. For this, we decide how and why it is used.
- Your Data about others - the details of your farmers, customers and suppliers, and your bills and stock, that you enter into AgroKhata. Here you decide what is entered and why, and we process it on your behalf only to provide the Service. You are responsible for having the right to use that information and for telling your customers and getting their consent where the law requires. If a farmer or customer contacts us about their data, we will help them reach you.
3. What we collect
| Type | Examples |
|---|---|
| Account & sign-in | Your name, mobile number, optional email, a password (stored only in scrambled/hashed form), the time you accepted our terms, and one-time passwords (kept only as a hash for a short time) |
| Shop & business information | Shop name, address, GSTIN, licence numbers, UPI ID and the invoice preferences you enter |
| Your Data about others | Farmers' / customers' / suppliers' names, mobile numbers, village, crop, balances; products, batches, bills, payments, expenses |
| Plan & payment records | Plan chosen, amount, order and payment reference from the gateway, invoice number and GST details. We do not receive or store card numbers, bank details or UPI PINs |
| Messages | A log of WhatsApp messages sent from your account (recipient number, text, status) so you can see what was sent; and service messages we send you |
| Technical data | IP address, browser and device type, pages used, error logs, and the session and security cookies described below |
| When you write to us | What you put in the Contact form (name, mobile, email, message, reference) and our reply |
4. Why we use it
- To create your account, verify your mobile, sign you in and run AgroKhata for you (billing, stock, ledgers, reports, reminders).
- To take payment, issue GST invoices and keep the records the law requires.
- To send service messages: OTPs, purchase confirmations, plan-ending reminders, security notices and important changes. These are part of the Service.
- To keep the Service secure, prevent fraud and abuse, fix problems and improve it.
- To answer your questions, refund requests and complaints.
- To meet legal obligations and to protect our rights.
We rely on your consent, on the need to perform our contract with you, and on legal obligations. You can withdraw consent at any time (section 10); this may mean we can no longer provide the Service. We do not use your data for advertising and we do not sell it.
5. Who we share it with
Only with those who help us run the Service, and only what they need:
- Payment gateways (such as Razorpay, Cashfree, PayU) to process your payment. They have their own privacy policies.
- WhatsApp messaging - the connection that sends your OTPs and service messages, and the WhatsApp service used to send your messages from your own number.
- Hosting and infrastructure providers that store and run the Service.
- Authorities and advisers when the law requires it, to enforce our terms or to protect rights and safety, and our professional advisers (for example accountants and lawyers) under confidentiality.
- A buyer or successor if the business is ever transferred, with the same protection for your data.
Other shops using AgroKhata can never see your data: every shop's records are kept separate. If any of our providers process data outside India, we make sure it is done in line with applicable law.
6. WhatsApp
When you link your own WhatsApp number by scanning a QR code, the connection details needed to send messages for you are stored on our servers. We use them only to send messages that you (or your reminder settings) ask for. You can unlink your number at any time from the WhatsApp page in AgroKhata. You are responsible for the content you send and for permission to message your customers (see the Terms).
7. Cookies
We use only essential cookies: a session cookie that keeps you signed in and security tokens that protect forms from forgery. We do not use advertising or cross-site tracking cookies. If you block cookies, you will not be able to sign in.
8. Security
We use reasonable security practices suited to the data we hold, including: passwords stored only as hashes; payment gateway keys and similar secrets stored encrypted; strict separation of each shop's data; sign-in protection and limits on repeated attempts; and role-based access so that staff only see what the owner allows. No system is completely secure, so please use a strong password and do not share it. If a breach affects your personal data, we will tell you and the authorities as the law requires.
9. How long we keep it
- We keep your account and Your Data while your account is active, and in read-only form after a plan ends, so you can renew or export it.
- You can ask us to delete your account and data at any time (section 10). We then delete or anonymise it within 30 days, except what we must keep by law.
- Records of payments and invoices are kept for as long as Indian tax and accounting laws require. OTPs are removed shortly after they expire. Contact-form messages are kept as long as needed to deal with your request and afterwards for our records.
10. Your rights
Under the law you can ask us to: tell you what personal data we hold and how it is used; correct or complete it; delete it; withdraw your consent; and send your complaint to us (section 13) and, if you are not satisfied, to the Data Protection Board of India once it is functional. You can correct most information yourself in the app. For anything else, use the Contact page and choose Privacy or data request; we may need to confirm it is really you. We aim to respond within 30 days.
11. Children
AgroKhata is for businesses and for people aged 18 or over. We do not knowingly collect data from children. If you think a child has given us personal data, please tell us and we will delete it.
12. Changes
We may update this policy as the Service or the law changes. We will change the "Last updated" date and, for important changes, tell you in the app or on WhatsApp.
13. Grievance & contact
For privacy questions, data requests or complaints, contact our Grievance Officer. We acknowledge a complaint within 48 hours and aim to resolve it within 30 days.
Grievance Officer - DMSync Infotech
You can always reach the Grievance Officer through our Contact page by choosing Grievance / complaint.