Privacy Policy

1. Whose data, and what

• People who ask for a demo on this website: name, business name, city, mobile number, rough business size and any message.
• Businesses that sign up: the owner's name and mobile number, business name, city and GSTIN; when they buy a plan, the billing name, GSTIN, address, state and email, and a record of each payment (amount, plan, Razorpay reference — never card or bank details).
• Our customers' staff who use ShubhOrder: name, mobile number, role, and a record of important actions in the account (the audit log).
• Everyone who visits: technical data our servers record for security — IP address, browser type, pages requested and times. When a code is sent, the requesting IP is kept with it for 7 days (to stop misuse); at sign-up we keep only a scrambled (hashed) form of the network address.

We don't collect more than these purposes need, and we don't knowingly collect data from anyone under 18.

2. Why we use it

• To call you back and show you the product when you ask for a demo.
• To provide the service: sign-in by one-time code, roles and permissions, support, billing and account messages.
• To keep the service secure, prevent misuse and fix problems.
• To meet legal duties, such as tax records and lawful requests from authorities.

We rely on your consent (for example, when you send the demo form) or on legitimate uses allowed by law (for example, providing the service you signed up for, and legal compliance). We don't sell personal data and don't use it for advertising.

3. Cookies

We use only the cookies the site needs: to keep you signed in and to remember your language. The ordering app also keeps the cart and unsent orders on the phone itself (browser storage). No advertising or tracking cookies. When you pay for a plan, Razorpay's checkout window opens on our page and may set its own cookies under Razorpay's privacy policy.

4. Who we share it with

Only service providers who help us run ShubhOrder, bound to protect the data and use it only for us:

• our hosting provider (servers and database);
• Message Central, to send one-time sign-in codes by SMS (mobile number only);
• Razorpay, to take payments for plans and, if you turn on automatic renewal, to hold the UPI AutoPay or card mandate (billing name, email, mobile number and the payment itself — card, UPI and bank details go to Razorpay, never to us; we keep only the mandate's reference and status);
• our email provider, to send receipts and renewal reminders (billing email and the message);
• an AI provider (Anthropic) — only for businesses that switch on reading typed or photographed order lists, and only that text or photo. This may be processed outside India, as permitted under Indian law.

We may also disclose data when the law requires it.

5. How long we keep it

• Demo requests: 12 months, then deleted automatically.
• Account and staff data: while the account is open — when the owner closes it (Settings or by asking us), deleted 30 days later, except tax and accounting records (including our own invoices to you), kept as long as Indian tax and company law requires (usually 6–8 years).
• A free trial never used (no real order, no payment): deleted 90 days after the trial ended.
• Security logs: about 1 year.

6. How we protect it

Encrypted connections (HTTPS), sign-in by one-time codes, sessions that expire, role-based access, an audit log of important actions, rate limits against misuse, and regular backups. No system is perfectly secure; if a breach affects your personal data, we will inform you and the Data Protection Board of India as the law requires.

7. Your rights

Under the DPDP Act you can ask us to:

• tell you what personal data we hold about you and how we use it;
• correct, complete or update it;
• erase it, where we don't need to keep it by law;
• withdraw consent you gave (for example, for a demo call) — as easily as you gave it;
• nominate someone to exercise these rights if you die or cannot act.

Write to our contact page. We reply within 30 days. If you are not satisfied, you can complain to the Data Protection Board of India.

8. Grievance Officer

Grievance Officer, Ubikon Technologies, Indore, Madhya Pradesh. Email: our contact page. We acknowledge complaints within 48 hours.

9. Changes

If we change this policy in a way that matters, we will update the date above and tell our customers before the change applies.