This policy explains how Dairy Sutra ("we", "us") handles personal data when you visit dairysutra.in, register for early access, or use the Dairy Sutra Android app. We follow India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the rules made under it.
1. Who is responsible
For data you give us directly (for example the early-access form, or your own account), Dairy Sutra is the data fiduciary. For the business data a dairy keeps in the app about its own customers, staff and suppliers, the dairy decides why that data is processed and is responsible for it; we process it on the dairy's behalf.
2. What we collect
| Where | Data | Why |
|---|---|---|
| Early-access form | Name, mobile number, dairy name, city, role, approximate size, current tools, optional email | To contact you about early access and plan testing |
| Sign-in | Mobile number, one-time code verification result, device identifier | To verify it's you and keep your account secure |
| App (entered by the dairy) | Customer, staff and supplier names, mobile numbers, addresses; deliveries, sales, invoices, payments, expenses, attendance; receipt photos | To provide the service the dairy uses |
| Technical | App version, crash reports, basic usage events (never amounts or names) | To fix problems and improve the app |
We do not collect passwords, payment card details, precise location or contacts.
3. How we use it
- To provide, secure and support the app and website.
- To contact early-access applicants by phone, SMS or email about testing.
- To meet legal, tax and accounting obligations.
We do not sell personal data, use it for advertising, or send marketing SMS or WhatsApp messages. SMS is used only for sign-in codes.
4. Consent and your choices
We rely on your consent for the early-access form and for your account. You can withdraw consent at any time by writing to us; withdrawal does not affect processing already done. Dairies are responsible for having a lawful basis for the data they enter about their customers and staff.
5. Who we share it with
Only with service providers who help us run Dairy Sutra, under contracts that require them to protect it: cloud hosting and storage, sign-in code (OTP) delivery, push notifications and crash reporting. We may disclose data if the law requires it.
6. Where and how long we keep it
Data is stored on our servers and, for app users, encrypted on the phone so the app works offline. Early-access details are kept until launch plus 12 months, or until you ask us to delete them. Business records are kept while the dairy's account is active and then for the period accounting and tax laws require, after which they are deleted or anonymised.
7. Security
Encryption in transit and on device, separation of each dairy's data, role-based access inside every dairy, audit trails for financial changes, and regular backups.
8. Your rights
- Access a summary of your personal data and how it's processed.
- Correct, complete, update or erase your data.
- Nominate another person to exercise your rights.
- Raise a grievance with us, and then with the Data Protection Board of India.
If you are a customer or staff member of a dairy, you can also ask that dairy directly; we will help them respond.
9. Children
Dairy Sutra is not meant for anyone under 18, and we do not knowingly collect their data.
10. Contact and grievances
Write to privacy@dairysutra.in. We will acknowledge within 7 days and respond within the time the law allows.
11. Changes
We'll post updates here and change the date above. Significant changes will be shown in the app.