Privacy policy

This policy says what DukanData ("DukanData", "we") keeps about the people who use DukanData and about the shops' data in it, what we do with it, and what we never do.

Two kinds of data

• About the people who use DukanData — a shop's owner and its staff with a login: name, mobile number, email if given, the password (kept only as a one-way hash, never readable), the shops each belongs to and as what, and a record of sign-ins. When a shop pays us: the plan, the amount, the UPI reference and the receipts. When somebody asks on this website: the name, number, shop, town and message, and the internet address it came from. For this data, we decide what is kept and why.
• A shop's own data — its items, stock, bills, purchases and accounts, the customers, suppliers and staff it enters, and the files it uploads. This is kept and worked on for the shop, on its instructions: the shop decides what goes in, and answers for it to its own customers.

What we use it for

• Running DukanData: signing people in, keeping each shop's books, stock and bills, and keeping its counter PCs in step with them.
• Confirming mobile numbers with a code on WhatsApp, and sending from DukanData's own number the messages the service needs: codes, receipts, reminders before a plan ends, and invitations to join a shop.
• Support, when a shop asks for it or when something has gone wrong.
• Billing, and keeping the records the law requires of us.
• Keeping DukanData secure, and finding misuse.

We do not sell data, we show no advertising, and we use a shop's data for nothing but running DukanData for that shop.

Walls between shops

Every shop's data is kept apart from every other shop's, down to the database, which refuses to give one shop's records to another. Logos, photos and signatures are private to their shop and never at a public address.

When DukanData looks at a shop

To help a shop, or to look into a problem, a member of DukanData's support staff may open the shop to look at it — without asking first. A look:

• is read only: nothing can be changed, and the database itself refuses to write;
• needs a written reason, and ends after 60 minutes at most;
• is recorded, with every page opened, in a record DukanData keeps.

DukanData support never changes anything in a shop's records.

WhatsApp

• The shop's own number. A shop that links its WhatsApp by scanning a QR code has the link kept on our server, in a place only the WhatsApp service can read, and DukanData sends from it the bills and messages the shop asks it to. The shop can unlink it at any time, from DukanData or from the phone. We do not read or keep the messages its customers send it.
• DukanData's own number sends codes, receipts, reminders and invitations.
• Messages on WhatsApp travel through WhatsApp (Meta), under its own terms and privacy policy.

The counter app

A counter PC keeps the part of its shop's data it needs to bill without internet — items, prices, customers, and the logins and roles of the staff, passwords only as one-way hashes — and sends what it records back to the shop. Keep the PC in the shop and its Windows login to yourselves.

Who else sees it

Nobody, except:

• the companies that run parts of DukanData for us — the servers it runs on, and where its backups are kept — which may use it only for that;
• WhatsApp, which carries the messages;
• a government authority, when the law requires it — and we tell the shop unless the law forbids it.

Where and how it is kept

On servers in India. Passwords are kept only as one-way hashes, DukanData's own staff sign in with a second step on an authenticator app, and backups are taken so that data survives a failure.

How long it is kept

• A shop's data: while its account is open, and for 90 days after it ends, so that the shop can come back or take a copy. After that it may be deleted for good.
• What a shop paid us, and our receipts: for as long as tax law requires.
• Questions sent from this website: for as long as it takes to answer them and follow up.

Your rights

You can see and correct your own details inside DukanData, ask DukanData support for a complete copy of your shop's data — we send it to you — and ask us to close your account. For anything else about your data, or to complain, write to our grievance officer. Under the Digital Personal Data Protection Act, 2023 you may also complain to the Data Protection Board of India once our own grievance process is done.

Cookies

DukanData uses only the cookies it needs to work: one that keeps you signed in, and one that stops another website sending forms in your name. No advertising or tracking cookies.

Children

DukanData is for businesses. It is not meant for anybody under 18.

When this policy changes

The date at the top changes, and we tell account holders inside DukanData or on WhatsApp before the change takes effect.

Contact

DukanData. Or send us a message.