Privacy Policy

1. Introduction

SRC Software ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our billing and inventory management software, website, and related services (collectively, the "Service").

By accessing or using our Service, you agree to the terms of this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

This Privacy Policy is designed to comply with the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, applicable in India.

2. Information We Collect

2.1 Information You Provide

• Account Information: Full name, email address, phone number, business name, and address when you register.
• Business Data: Product catalogs, customer details, supplier information, invoices, purchase records, and inventory data.
• Payment Information: Billing address and payment method details (processed securely through our payment partners).
• Communication Data: Messages, feedback, and support requests you send to us.

2.2 Information Collected Automatically

• Usage Data: Features accessed, pages visited, time spent, and actions performed within the Service.
• Device Information: IP address, browser type, operating system, device type, and unique device identifiers.
• Log Data: Access times, error logs, and performance data for troubleshooting and improvement.
• Cookies: Small data files stored on your device to enhance user experience and remember preferences.

2.3 Information We Do NOT Collect

We do not collect sensitive personal data such as Aadhaar numbers, biometric data, genetic data, or financial passwords. Your business transaction data belongs to you and is never accessed by our team without your explicit permission.

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To provide, maintain, and improve our billing and inventory management software.
• Account Management: To manage your account, process payments, and provide customer support.
• Communication: To send service updates, security alerts, invoices, and respond to your inquiries.
• Improvement: To analyze usage patterns and improve our features, UI/UX, and overall performance.
• Security: To detect and prevent fraud, unauthorized access, and abuse of our Service.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.
• Marketing: To send promotional content about new features or offers (only with your consent).

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party vendors who help us deliver our Service (cloud hosting, payment processing, email delivery). These providers are bound by confidentiality agreements.
• Legal Requirements: If required by law, court order, or government regulation in India.
• Business Transfer: In connection with a merger, acquisition, or sale of company assets.
• With Your Consent: When you explicitly authorize us to share your information.

5. Data Security

We implement industry-standard security measures to protect your data:

• Encryption: All data is encrypted in transit using SSL/TLS (256-bit) and at rest using AES-256 encryption.
• Secure Servers: Data is stored on secure cloud servers located in India, compliant with Indian data localization requirements.
• Access Controls: Role-based access control ensures only authorized personnel can access specific data.
• Regular Audits: Security audits and vulnerability assessments are conducted regularly.
• Backups: Automated daily backups ensure data recovery in case of any incident.
• Two-Factor Authentication: Available for all user accounts for enhanced security.

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but follow best practices to minimize risks.

6. Data Retention

We retain your personal information and business data for as long as your account is active or as needed to provide you with our Service. If you cancel your account:

• Your business data will be retained for 30 days after cancellation, during which you can export your data.
• After 30 days, all your data is permanently deleted from our active servers.
• Backup copies may be retained for up to 90 days for disaster recovery purposes.
• Certain information may be retained as required by Indian tax laws (e.g., invoice records for 8 years).

7. Your Rights

Under Indian data protection laws, you have the following rights:

• Right to Access: You can request a copy of your personal data we hold.
• Right to Correction: You can update or correct inaccurate information through your account settings.
• Right to Erasure: You can request deletion of your personal data (subject to legal retention requirements).
• Right to Data Portability: You can export your data in standard formats (CSV, Excel, PDF) anytime.
• Right to Withdraw Consent: You can withdraw marketing consent at any time.
• Right to Grievance: You can file a complaint with our Grievance Officer (details in Section 11).

8. Cookies Policy

We use cookies and similar tracking technologies to enhance your experience. Cookies are small text files stored on your device.

Types of Cookies We Use:

• Essential Cookies: Required for the Service to function (authentication, security).
• Preference Cookies: Remember your settings, language, and display preferences.
• Analytics Cookies: Help us understand how you use the Service to improve it.

You can disable cookies in your browser settings, but this may affect certain features of the Service.

9. Third-Party Services

Our Service may integrate with third-party services (payment gateways, SMS providers, email services). These services have their own privacy policies:

• Payment Processing: Razorpay / Stripe (PCI-DSS compliant)
• Cloud Hosting: Amazon Web Services (India region)
• SMS Notifications: Twilio / MSG91
• Email Delivery: SendGrid / AWS SES

We recommend reviewing the privacy policies of these third-party services. We are not responsible for their practices.

10. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we discover that a child has provided us with personal data, we will promptly delete it.

11. Grievance Officer

In accordance with the Information Technology Act, 2000, and the rules made thereunder, the name and contact details of our Grievance Officer are provided below:

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page with an updated "Last updated" date.
• Sending an email notification to registered users for material changes.
• Displaying an in-app notification upon login.

Your continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

Questions About This Policy?

If you have any questions, concerns, or complaints regarding this Privacy Policy, please contact us.