Privacy Policy

This Privacy Policy describes how eCART SOFT LABS PRIVATE LIMITED ("Company", "we", "us", or "our"), a company incorporated under the laws of India (CIN: U74900TG2016PTC103371), collects, uses, stores, and protects information when you use the AgroNexus mobile application ("App") and associated web services (collectively, the "Platform").

By using the Platform, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use the Platform.

1. Information We Collect

1.1 Information You Provide

• Account Registration: Full name, email address, phone number, password, and role (Farmer, Contractor, Investor, Delivery Agent, or Administrator)
• Profile Information: State, district, pincode, address, preferred language, WhatsApp number
• KYC Verification: Aadhaar number, PAN number, bank account details (account number, IFSC, bank name), UPI ID
• Farm Information: Farm name, location (village, district, state, GPS coordinates), farm area in acres, soil type, crop details
• Order Information: Orders placed for agricultural inputs (seeds, fertilizers, equipment), payment details, delivery addresses
• AI Advisory Inputs: Soil test parameters (pH, nitrogen, phosphorus, potassium, organic carbon), irrigation availability, season, and environmental data submitted for crop recommendations
• Financial Data: Wallet transactions, payment history, settlement records
• Communication Data: Messages, feedback, and support requests

1.2 Information Collected Automatically

• Device Information: Device model, operating system version, unique device identifiers
• Usage Data: Features accessed, pages viewed, actions performed, timestamps
• Network Information: IP address, connection type, mobile carrier
• Location Data: Approximate location based on IP address (precise GPS only when explicitly provided for farm registration)
• Error and Crash Reports: Technical logs for app stability improvement

1.3 Information from Third Parties

• Supabase Authentication: Authentication tokens and session data via Supabase Auth service
• AI Services: Crop recommendation responses from Anthropic Claude AI (no personal data is sent to AI services — only anonymized soil and environmental parameters)

2. How We Use Your Information

We use the information collected for the following purposes:

• Account Management: To create, maintain, and secure your account
• Platform Services: To provide farm management, order processing, KYC verification, wallet services, and delivery tracking
• AI Crop Advisory: To generate personalized crop recommendations based on soil parameters and location (using anonymized data)
• Analytics and Insights: To generate aggregated analytics dashboards for platform administrators and stakeholders
• Communication: To send order updates, advisory notifications, and important platform announcements
• Security: To detect and prevent fraud, unauthorized access, and other security threats
• Compliance: To comply with applicable laws, regulations, and legal processes
• Improvement: To improve the Platform, develop new features, and enhance user experience

3. Data Storage and Security

3.1 Storage

• Cloud Infrastructure: Your data is stored on Microsoft Azure (App Service) and Supabase (PostgreSQL database) with servers located in secure data centers
• Encryption: All data in transit is encrypted using TLS/SSL (HTTPS). Passwords are hashed using bcrypt with salt
• Authentication: JWT (JSON Web Token) based authentication with secure token management
• Mobile Storage: Session tokens are stored in platform-specific secure storage (Android Keystore / iOS Keychain)

3.2 Security Measures

• Role-based access control (RBAC) with 6 distinct user roles
• API authentication on all endpoints
• Regular security audits and vulnerability assessments
• Encrypted database connections with row-level security
• Automated backup and disaster recovery procedures

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

• With Your Consent: When you explicitly authorize sharing with specific parties
• Service Providers: With trusted third-party services (Microsoft Azure, Supabase, Anthropic) that help us operate the Platform, subject to confidentiality agreements
• Within the Platform: Farmer data may be visible to assigned Contractors and Platform Administrators as required for farm management operations
• Legal Requirements: When required by law, court order, or government regulation
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity
• Safety: To protect the rights, property, or safety of our users, the Company, or the public

5. Data Retention

• Active Accounts: We retain your data for as long as your account is active and as needed to provide services
• Deleted Accounts: Upon account deletion request, we will delete or anonymize your personal data within 90 days, except where retention is required by law
• Financial Records: Transaction and payment records are retained for a minimum of 8 years as required by Indian tax and financial regulations
• Anonymized Data: Aggregated, anonymized data may be retained indefinitely for analytics and research purposes

6. Your Rights

Under applicable data protection laws, including the Digital Personal Data Protection Act, 2023 (DPDPA), you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Correction: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (subject to legal retention requirements)
• Right to Withdraw Consent: Withdraw your consent for data processing at any time
• Right to Grievance Redressal: File a complaint with our Data Protection Officer or the Data Protection Board of India

To exercise any of these rights, contact us at the details provided in Section 11.

7. Children's Privacy

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected data from a child under 18 without parental consent, we will take steps to delete such information promptly.

8. Cookies and Tracking

The AgroNexus mobile application does not use cookies. The web admin portal may use essential cookies for session management and authentication. No third-party advertising or tracking cookies are used.

9. Third-Party Services

The Platform integrates with the following third-party services:

• Microsoft Azure: Cloud hosting and compute services (Microsoft Privacy Policy applies)
• Supabase: Database and authentication services (Supabase Privacy Policy applies)
• Anthropic Claude AI: AI-powered crop recommendation engine (only anonymized soil/environmental data is shared; no personal information is transmitted to AI services)

We encourage you to review the privacy policies of these third-party services.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on the Platform with a new "Last Updated" date
• Sending a notification through the App
• Requiring acknowledgment of the updated policy on next login

Your continued use of the Platform after changes are posted constitutes acceptance of the revised policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

12. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of India, including the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDPA).

Any disputes arising out of or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the courts in Hyderabad, Telangana, India.

13. Consent

By downloading, installing, or using the AgroNexus application, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. You consent to the collection, use, storage, and disclosure of your information as described herein.