1. Who we are
Smartdukan ("we", "us", "Smartdukan") is operated by Smartdukan Pvt. Ltd., Ahmedabad, Gujarat, India. We provide a point-of-sale and inventory platform that shopkeepers control through WhatsApp and a web dashboard.
2. What information we collect
a. Information you provide
- Shop owner details — name, mobile number, email, shop name, GSTIN.
- Staff member details added by the owner.
- Product catalogue, prices, stock levels, images you upload.
- Customer phone numbers when you record a sale or send a bill.
- Voice recordings used to add products via the mic feature.
b. Information collected automatically
- Device, browser and IP address when you visit our website or app.
- Usage events — pages viewed, features used — for product improvements.
- WhatsApp message metadata when our bot is invoked.
3. How we use your data
- Run the service — billing, inventory, reports, WhatsApp messaging.
- Send transactional emails / SMS / WhatsApp messages (bills, low-stock alerts, OTPs).
- Support and customer service.
- Improve the product and detect fraud or abuse.
- Comply with Indian tax law (GST invoices, audit trails).
We do not sell your data. We do not share customer phone numbers with third parties for marketing.
4. Where your data is stored
All data is stored on Amazon Web Services (AWS) servers in the Mumbai (ap-south-1) region inside India. The database is automatically backed up daily and retained for 35 days. Additional encrypted snapshots are kept for 6 months in S3 Glacier.
5. Security
- Passwords stored as bcrypt-12 hashes — we cannot read them.
- Sessions use rotating JWT tokens.
- All connections encrypted in transit (HTTPS / TLS 1.2+).
- Multi-tenant isolation on every database query.
- AES-256 encryption at rest on the database and backups.
6. Sharing with third parties
We share data only with the service providers strictly required to operate the platform:
- Meta WhatsApp Cloud API — to deliver messages on your behalf.
- Razorpay — to process online payments.
- Google Gemini / Whisper — to process voice and image AI features.
- Amazon Web Services — to host the service.
Each provider is bound by its own privacy commitments and processes the data only for the specific task we send to it.
7. Your rights
- Access — request a copy of all data we hold about your shop.
- Correction — fix any incorrect details in your dashboard, or email us.
- Export — download your products, sales, and customer list as CSV at any time from the owner dashboard.
- Deletion — close your account and we will delete personal data within 30 days, except records we must keep for tax (typically 8 years).
To exercise any right, email [email protected].
8. Cookies
We use only essential cookies — a session cookie to keep you logged in, and a CSRF token. No third-party tracking or advertising cookies.
9. Children
The service is not intended for users under 18 years of age. We do not knowingly collect data from children.
10. Changes to this policy
If we make material changes we will notify you on the dashboard and by email at least 7 days before they take effect.
11. Contact
Email [email protected] or write to: Smartdukan Pvt. Ltd., Ahmedabad, Gujarat — 380015, India.