Privacy Policy

Updated: 31 October 2026

Samaan-Bol ("we", "our", or "the App") is a voice-first collaborative inventory management application designed for Indian retail businesses. This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding your data.

By using Samaan-Bol, you agree to the collection and use of information as described in this policy.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

  • Full name — provided during sign-up
  • Email address — used for authentication and account recovery
  • Password — encrypted and managed by our authentication provider (Clerk)

If you sign in with Google or Apple, we receive your name and email from the OAuth provider. We do not access your Google or Apple account password.

1.2 Voice Recordings

Voice recording is optional. Our API processes raw audio in memory and does not save it in our database. Sarvam AI also receives audio and text for speech recognition, language processing and speech output. Sarvam may retain API inputs and responses under its workspace settings and terms; immediate deletion at that provider is not promised. Model training is disabled for our organisation. Text transcripts and related actions remain in shop audit history and may appear in operational logs.

1.3 Inventory & Business Data

We store business data you create or upload: shop contact details, address and GST identity; customer and supplier contacts; products and stock; imported files and branding images; bills, purchases, orders, balances, expenses, cashbook, payments and audit history. Payment records can include shop UPI IDs and limited payment metadata. Complete card details are handled by the payment provider.

1.4 User Preferences

  • App language and voice language selection
  • Voice feedback preference (on/off)
  • Display settings (high contrast mode, text size)
  • Default measurement unit
  • Notification preferences

1.5 Shop Membership Data

  • Your role in each shop (Owner, Manager, or Helper)
  • Invite codes generated for team collaboration
  • Last active timestamps within shops

1.6 Device & Diagnostic Data

Production diagnostics include device and app identifiers, errors, navigation events and sampled performance data. These records can be linked to your account or device. Authentication providers also process IP addresses and approximate session location for security. We do not request precise GPS location or access to the device address book.

2. How We Use Your Information

We use data to operate inventory, billing, purchases, orders, payments and account features; verify identity and protect sessions; retain necessary business records; send essential verification and account messages; and diagnose reliability and performance problems. We do not sell personal data or use it for advertising.

3. Third-Party Services

Hosting and delivery providers, including Render, Expo and Brevo, process application data, connection metadata, app-update requests or verification-email details as needed for their functions. The services listed below process data under their applicable terms, privacy policies and retention settings.

We use the following third-party services to operate the App:

Service Purpose Data Shared Privacy Policy
Clerk Authentication & session management Email, name, OAuth tokens, session data clerk.com/legal/privacy
Sarvam AI Voice processing (Speech-to-Text, Natural Language Processing, Text-to-Speech) Audio recordings, transcript text, language code sarvam.ai/privacy-policy
Neon Database hosting (PostgreSQL) All persisted application data neon.tech/privacy-policy
Razorpay Subscription payments, UPI Autopay mandates, invoices, refunds, and payment status updates Name, email, phone, billing address, payment metadata, invoice metadata, UPI handle or card last 4 where made available by Razorpay. Razorpay handles full sensitive payment credentials. razorpay.com/privacy
Sentry Error tracking & crash reporting Crash reports, device information (production only) sentry.io/privacy

Each third-party service processes data according to their own privacy policy. We encourage you to review their policies.

4. Data Storage & Security

  • Application data is stored in a Neon PostgreSQL database with SSL/TLS encryption in transit
  • Authentication tokens are stored on your device using secure storage (iOS Keychain / Android Keystore)
  • API communication uses HTTPS encryption
  • Sensitive endpoints are rate-limited to prevent abuse
  • Passwords are hashed and managed by Clerk — we never store plaintext passwords

5. Data Retention

Business records may need to be kept for tax, accounting, disputes and legal obligations. These can include bills, reserved invoice numbers, purchases, payments, cashbook and expense records, orders, related audit history and identity links. Required records are not erased automatically by an account-deletion request. We retain them for the applicable obligations and review requests for data that can be removed.

6. Account Deletion

Use Settings → Delete Account on mobile or web. We check record retention before deletion.

If retention is required, self-service deletion is blocked and your account, shop records and sign-in identity remain. Contact support to request a closure review and removal of data that does not need to be retained.

Where deletion is allowed, eligible account and owned-shop data and shared-shop memberships are removed, then your Clerk sign-in identity is deleted. Deleting only a shop leaves your account active.

Allowed deletion is permanent; export needed data first. If a step fails or its result is uncertain, deletion is not confirmed—stay signed in and retry or contact support.

Account Deletion

meetslimshady07@gmail.com

7. Data Sharing Within Shops

Shop data is available to authorised staff according to their roles. Public catalogue details and listed products become visible when the owner publishes the store. Customer order contact details are shared with the shop and holders of the private order tracking link. Sharing a document or link can disclose its contents to the recipient. Unpublishing hides the catalogue but does not delete retained orders or fiscal records.

8. Children's Privacy

Samaan-Bol is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

9. Your Rights

You have the right to:

  • Access your data: View your inventory, audit logs, and preferences within the App
  • Request deletion or a retention review through Settings or by email. Required records may have to be kept.
  • Correct your data: Update inaccurate account, shop, or billing information where supported, or contact us for help
  • Request portability: Ask for a copy of your account and shop data in a reasonable portable format where required by applicable law
  • Control preferences: Modify your language, display, and voice settings at any time
  • Withdraw from shops: Leave any shop you are a member of

You can email support to request removal of data that is not required, without deleting the whole account. We review the request against fiscal, accounting, dispute and legal retention obligations. Required records and their necessary identity links may remain; this is not an automatic deletion promise.

meetslimshady07@gmail.com

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Effective Date" at the top of this page. We encourage you to review this policy periodically. Continued use of the App after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or your data, please contact us at:

Email: meetslimshady07@gmail.com