Privacy Policy
Version 2026-10 · Gangotri Consumable Retails Pvt Ltd, gangotrisales@gmail.com
1. Who we are
Gangotri Consumable Retails Pvt Ltd operates Apnalekha. For the account information below we are the Data Fiduciary under the Digital Personal Data Protection Act, 2023. For the personal data inside your books (your customers, suppliers, employees) you are the Data Fiduciary and we are your Data Processor — see the Data Processing Agreement.
2. What we collect about account holders
- Name, e-mail, mobile, business name, state, city and GSTIN given at sign-up.
- Sign-in history (time, IP address, device) and security logs.
- Payment records (plan, amount, UTR / gateway reference). Card or bank details are handled by the payment gateway, not stored by us.
3. Why
To create and secure your account, provide support, bill for the Service, meet legal duties (such as tax records) and protect the Service from misuse. We do not sell personal data or use it for advertising.
4. Where it is kept
Data is stored on India. Encrypted backup copies are kept with our backup provider.
5. Service providers
Hosting, encrypted backup storage and payment processing providers, bound by confidentiality and security obligations.
6. How long
Account data is kept while your account is active and erased after it is closed, except what the law requires us to keep (for example tax and payment records, and security logs which are retained for at least one year).
7. Security
Each business's books are kept in a separate database; administrators must use two-step verification; backups are encrypted before leaving our server; access is logged.
8. Your rights
You may ask to access, correct or erase your personal data, withdraw consent, or nominate someone to act for you. Business administrators can download all their data and request erasure from Settings → Data & Privacy.
9. Grievances
Deepti Shahi — deepti.gangotri@gmail.com, 8859888812. We acknowledge grievances promptly and aim to resolve them within the time required by law. If you are not satisfied you may approach the Data Protection Board of India.
10. Breaches
If a personal-data breach affects you, we will inform you without delay and report it to the Data Protection Board as the law requires.