This policy explains what personal data Sandhaan India Packaging (Proprietor: Shikhar Rastogi) ("we") collects through our app and website, why, and your choices. We follow the Digital Personal Data Protection Act, 2023.
What we collect
- Account details: your name, mobile number and business or shop name, and — only if you choose to give them — your GSTIN and email.
- Delivery addresses and contact person details you save.
- Orders and invoices: products, quantities, amounts and payment status.
- Payment information: handled by Razorpay. We receive the payment status and reference, never your UPI PIN or bank details.
- Device data: a notification token so we can send order updates, and technical error reports (without your personal details) to fix crashes.
We do not collect your location, contacts, photos or other data from your phone.
Why we use it
- To process and deliver orders and issue GST invoices, and — if you give a GSTIN — to verify it.
- To send one-time passwords (OTP) for login and notifications about your account and orders.
- To meet legal duties such as tax and accounting record keeping.
We do not sell your data and do not use it for advertising.
Who we share it with
Only service providers who help us run the service:
- Razorpay (payments) and MSG91 (OTP by SMS), in India.
- Our server provider in India, where the app's data is stored.
- Google Firebase (app notifications) and Sentry (crash and error reports, without your personal details), whose servers may be outside India.
- Backblaze, which stores an encrypted backup copy of our data outside India so it can be restored after a failure.
Our delivery staff see the delivery address and contact number for their orders. We may share data when required by law.
How long we keep it
- Account data is kept while your account is active.
- Invoices and order records are kept for the period required by GST and tax law (currently at least 6 years), even if you delete your account.
- When you delete your account, your details are removed at once from the live system; backup copies are deleted automatically within 30 days.
Security
Data is sent over encrypted connections, backups are encrypted, access is limited to authorised staff, and logins use one-time passwords.
Children
Our app and website are meant for business buyers aged 18 or above. We do not knowingly collect data of children.
Your rights
You can see and correct your details in the app or by contacting us, withdraw your consent, and delete your account (see Delete account). For any privacy request or complaint, contact our grievance officer, Shikhar Rastogi (Proprietor), at packpitara@gmail.com or +91 99844 74927; we respond within 30 days. If you are not satisfied, you may approach the Data Protection Board of India.
Changes
We will post any changes on this page with a new effective date.