Privacy Policy

1. Information We Collect

We collect information that you provide directly to us when you register on our ERP System, enter into a contract farming agreement, or communicate with us. This includes personal identification information such as your full name, father's name, date of birth, Aadhaar number, PAN number, and photographs. We also collect contact information including your postal address, phone numbers, email address, and bank account details for settlement processing. Business-related data such as farm location, shed details, batch records, daily entries, feed consumption, vaccination records, bird mortality data, and settlement calculations are also collected as part of our contract farming operations. Additionally, we collect technical information automatically when you access our ERP System, including IP address, browser type, device information, access times, and pages viewed.

2. How We Use Your Information

We use the information we collect for several important purposes. The primary use is to operate and manage the contract farming ERP System, including batch tracking, settlement calculations, and report generation. We use your identity information for verification, KYC compliance, and to fulfill our contractual obligations under the Contract Farming Agreement. Your bank account details are used exclusively for processing settlement payments and financial transactions. Contact information enables us to communicate important updates, alerts, and notifications related to your farming operations. We also use aggregated and anonymized data for business analytics, performance monitoring, and system improvement. Additionally, your information may be used to comply with legal and regulatory requirements, including tax reporting and statutory audits.

3. Data Storage and Security

Your data is stored on secure cloud servers located within the territory of India, with industry-standard encryption both in transit (using TLS 1.3) and at rest (using AES-256 encryption). We implement comprehensive security measures including role-based access control that ensures only authorized personnel can access specific data categories, regular security audits and vulnerability assessments to identify and address potential threats, secure authentication mechanisms including encrypted password storage and session management, automated backup systems with disaster recovery capabilities, and network security measures including firewalls, intrusion detection systems, and DDoS protection. While we strive to protect your personal information, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.

Cross-Border Data Transfer: Your personal data is stored and processed primarily on cloud infrastructure located within India. In the event that any data is processed outside India, such transfer shall occur only to countries explicitly notified by the Central Government under section 16 of the DPDP Act, or under the standard contractual clauses and safeguards prescribed by law. You will be notified of any material change in cross-border transfer practices via the ERP System notification panel.

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following limited circumstances: with your explicit consent for specific purposes, with authorized government agencies and regulatory bodies as required by law, with our authorized service providers who assist in operating the ERP System (subject to confidentiality agreements), in connection with any legal proceedings or disputes, and with business partners directly involved in your contract farming operations (such as feed suppliers and veterinary services). All third-party service providers are contractually bound to maintain the confidentiality and security of your data.

5. Sensitive Personal Data

We collect certain sensitive personal data as defined under the IT Rules, 2011, including Aadhaar numbers, bank account details, and financial records. This data is collected only where necessary for the performance of the Contract Farming Agreement and compliance with legal requirements. Sensitive data is stored with additional encryption layers and access restrictions. Only specifically authorized personnel with a legitimate business need can access sensitive data categories. We maintain detailed access logs for all sensitive data interactions.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by law. The retention periods are as follows:

• Contract farming records (batch data, daily entries, settlement details, feed/medicine issuances): 7 years from the end of the financial year in which the batch was settled, for tax and audit compliance under the Income Tax Act, 1961.
• Financial transaction records (payments, GST invoices, TDS certificates): 8 years per GST and TDS statutory requirements.
• KYC documents (Aadhaar, PAN, bank proof): 5 years after the end of the contract farming relationship.
• Account credentials & activity logs: duration of active engagement + 1 year for security audit purposes.
• Contact form submissions: 2 years from submission date for sales follow-up and dispute resolution.

You may request erasure of your personal data earlier, subject to our legal obligations to retain certain records. Erasure requests can be submitted via the DPDP request endpoint in the ERP System or by contacting the Data Protection Officer (see Section 11).

7. Your Rights under DPDP Act, 2023

As a Data Principal under the DPDP Act, 2023, you have the following rights regarding your personal data held by us:

• Right to Access: You may request a summary of the personal data we hold about you and the processing activities conducted on it.
• Right to Correction & Erasure: You may request correction of inaccurate or incomplete personal data, and the erasure of personal data that is no longer necessary for the purpose for which it was processed, subject to legal retention obligations.
• Right to Grievance Redressal: You have the right to file a grievance with our Grievance Officer (see Section 11) if you believe your data rights have been violated. The Grievance Officer will acknowledge your complaint within 24 hours and resolve it within 30 days, as mandated by the DPDP Act.
• Right to Nominate: You may nominate any individual to exercise your data rights in the event of your death or incapacity.
• Right to Withdraw Consent: You may withdraw consent for data processing at any time where processing was based on consent. Withdrawal will not affect the lawfulness of processing prior to withdrawal, but may limit your ability to use certain ERP features.

To exercise any of these rights, please use the in-ERP DPDP request feature (available under your Profile > Data Rights), or email the Grievance Officer directly. We will verify your identity before processing any request.

8. Cookies and Tracking

Our ERP System uses essential cookies to maintain session state, remember login credentials, and ensure secure authentication. We do not use advertising cookies or third-party tracking technologies. Analytics cookies, if used, are limited to understanding system performance and user experience for improvement purposes. You can manage cookie preferences through your browser settings, though disabling essential cookies may affect the functionality of the ERP System.

9. Children's Privacy

Our ERP System and contract farming services are not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected personal information from a person under 18, we will take steps to delete such information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We will notify users of significant changes through the ERP System notification panel and/or email communication. The updated policy will be effective immediately upon posting unless otherwise specified. Your continued use of the ERP System after any changes constitutes acceptance of the revised Privacy Policy.