Privacy Policy

1. Overview

PaniHisab (“we,” “our,” or “us”) provides a web platform for water delivery businesses to manage customers, daily entries, monthly bills, and payment records. This Privacy Policy explains what data we collect, how we use it, and the choices you have.

2. Information We Collect

Depending on how you use PaniHisab, we may collect the following categories of data.

• Account Data: Name, mobile number, email, password (stored as encrypted hash), business name, and optional logo.
• Customer and Delivery Records: Customer name, mobile, address, price per can, opening balance, daily delivery entries, and monthly bill details.
• Billing and Subscription Data: Plan status (trial, extra period, active, expired, canceled), trial/subscription dates, and payment reference IDs such as order/payment IDs.
• Contact Form Data: Name, email, subject, and message submitted from the Contact page. For abuse prevention and diagnostics, we may also store IP address and user-agent.
• Technical Data: Auth token-based request metadata, API usage patterns, and error logs.
• Language Preference: Language selection data (for example translation preference cookies used by the language switcher).

3. How We Use Information

• To create and secure your vendor/admin account.
• To provide core product features such as customer management, daily entries, bill generation, and payment tracking.
• To run subscription logic (trial, extra period reminders, active/expired checks) and plan enforcement.
• To process or verify subscription payments through payment providers.
• To help you share bill messages through WhatsApp integrations initiated by you.
• To respond to support and sales inquiries submitted via the contact form.
• To protect the service with rate limiting, abuse prevention, and security monitoring.

4. Third-Party Services

PaniHisab uses third-party tools where required for product functionality.

• Payment Gateway: Subscription payments may be processed through Razorpay (or configured payment provider). We do not store your full card credentials on our servers.
• WhatsApp Sharing: Bill sharing opens WhatsApp links initiated by you. Message delivery, platform availability, and third-party policies are governed by WhatsApp.
• Translation Services: When you use on-page language translation, translated page content may be processed by the translation provider (for example Google Translate).

5. Data Sharing

We do not sell your personal data or your customer database. We only share limited data when necessary to provide services, comply with law, enforce terms, investigate fraud, or protect users and platform security.

6. Data Retention

We retain account and business records for as long as your account remains active, and for a reasonable period afterward where needed for legal, billing, dispute, fraud prevention, or operational purposes. Contact messages may be retained for support workflow and audit trail.

7. Data Security

We use reasonable technical and organizational safeguards, including password hashing, protected API routes, and request controls such as rate limiting. However, no method of internet transmission or storage is completely secure.

8. Your Rights and Choices

You can request updates or deletion of your information, subject to legal and operational limitations.

• Access and review account information.
• Correct inaccurate profile or business details.
• Request account closure.
• Manage communication preferences by contacting support.

9. Children's Privacy

PaniHisab is intended for business users and is not directed to children under 18. We do not knowingly collect personal data from children.

10. Changes to this Policy

We may update this Privacy Policy to reflect product, legal, or operational changes. The updated version will be posted on this page with a revised “Last Updated” date.

11. Contact Us

For privacy-related questions, contact us at panihisab@gmail.com or via WhatsApp at +91 95746 43445.

12. DPDP Act 2023 — Overview

PaniHisab complies with the Digital Personal Data Protection Act, 2023 (DPDP Act) passed by the Government of India. This Act governs how digital personal data of individuals (Data Principals) is collected, processed, and stored by entities (Data Fiduciaries) operating digital platforms in India.

• Data Fiduciary: PaniHisab (operated by its founders) is the Data Fiduciary for vendor/admin accounts registered on the platform.
• Data Principal: You (the vendor/admin) are the Data Principal for your own personal data stored on PaniHisab.
• Consent: By registering on PaniHisab and accepting our Privacy Policy and Terms of Service, you provide consent for the collection and processing of your data as described in this policy.
• Purpose Limitation: Your data is collected only for the purposes described in this policy. It is not used for any other purpose without your consent.

13. Your Rights Under the DPDP Act 2023

As a Data Principal under the DPDP Act, 2023, you have the following rights:

• Right to Access Information: You have the right to know what personal data we hold about you and how it is being processed. You can view your profile and data in your account Settings page.
• Right to Correction and Erasure:You have the right to correct inaccurate or incomplete personal data, and to have your data erased. You can update your profile directly in Settings, or use the “Delete My Account” feature to permanently erase all your data.
• Right to Data Portability:You have the right to obtain a copy of your personal data in a structured, commonly used format. Use the “Export My Data” feature in Settings to download all your data as a JSON file.
• Right to Grievance Redressal: If you have any complaint about how your personal data is being processed, you have the right to raise a grievance with our Grievance Officer. We will respond within 72 hours.
• Right to Nominate: You may nominate another person to exercise your rights on your behalf in case of your death or incapacity. To do so, please contact us at our grievance email.

14. Data Retention Policy (DPDP Act)

• Active Accounts: Your data is retained for as long as your account remains active.
• After Account Deletion: When you delete your account via Settings, all your personal data and business records (customers, orders, bills, payments, expenses) will be permanently purged within 30 days. A minimal log record (without personal data) may be retained for security and fraud prevention purposes for up to 1 year.
• Contact Form Data: Messages submitted through the contact form are retained for up to 1 year for support workflow and audit purposes.
• Legal Hold: In exceptional circumstances where retention is required by law, court order, or to prevent fraud, certain data may be retained beyond the above periods.

15. Grievance Officer (DPDP Act 2023)

As required by the Digital Personal Data Protection Act, 2023, we have designated a Grievance Officer to address data privacy complaints and requests.

You may also escalate unresolved complaints to the Data Protection Board of India once it is constituted by the Government of India as provided under the DPDP Act, 2023.