कायदेशीर मजकूर इंग्रजीत आहे. प्रत्येक भागाचे शीर्षक मराठीत दिले आहे.
NiviStack हे Quantox Technologies Pvt. Ltd. (कराड, जि. सातारा) यांचे कृषी निविष्ठा दुकानांसाठीचे सॉफ्टवेअर आहे. हे धोरण आम्ही कोणती माहिती घेतो, का घेतो आणि ती कुठे जाते हे सांगते.
NiviStack is software for agri-input retail shops, made by Quantox Technologies Pvt. Ltd., Karad, Dist. Satara, Maharashtra. This policy describes what we collect, why, and where it goes. It covers the Android app and the web portal, which share one account and one database.
NiviStack is used by the shopkeeper. The farmer and customer records inside it are entered by the shop, about its own customers. For that data the shop is the controller and we are only the processor — we store and serve it on the shop's behalf and do not decide what goes in it.
१. आम्ही कोणती माहिती घेतो1. What we collect
Shop account — the person who signs up
- Shop name, owner name, mobile number, email address
- Shop address: village, taluka, district, state, pincode
- GSTIN, PAN, and the licence numbers a shop must display — fertiliser, pesticide, seed and drug licence
- UPI ID, payment QR and bank details, when the shop enters them to print on its bills
- Dealer signature and shop seal images, when uploaded, because the statutory registers are signed documents
- Staff accounts the owner creates: name, mobile, email, role and permissions
Business records the shop enters
- Customers and suppliers: name, village, mobile, GSTIN, licence number, and the opening and running balance
- Customer Aadhaar and PAN, where the shop records them — subsidised fertiliser sales require identification under the Fertiliser (Control) Order
- Products, batch numbers, manufacturing and expiry dates
- Sales, purchases, returns, receipts, payments and expenses
- Photographs the shop takes of a product label or a supplier bill, and documents it uploads — licences, certificates, invoices
Technical information
- Device model, Android version and app version, so a crash can be traced to a build
- IP address and timestamp on login and on actions that change money or statutory records
- Error logs when something fails
२. फोनच्या परवानग्या2. Device permissions
| Permission | Why | Optional? |
|---|---|---|
| Camera | To photograph a product label, a supplier bill or a document so the app can read the details off it instead of you typing them. | Yes. Declared required="false" — the app installs
and runs on a device with no camera. |
| Photos / files | To pick an existing photo instead of taking a new one, and to save a bill or register PDF you want to share. | Yes. Only the file you choose is read. |
| Internet | To sync with your shop's data on our server. | No. The app caches for offline use but needs a connection to sync. |
A photograph you take is uploaded to our server to be read and is then stored against the record it belongs to. It is not used to train any model and is not shared with anyone outside the processors named below.
३. माहिती का वापरतो3. Why we use it
- To run the service: bills, stock, balances, registers and reports
- To produce the documents the law requires of an agri-input dealer — Form M, Form N, Appendix A and B, Form D, and the GST returns
- To authenticate you and keep one shop's data separate from another's
- To support you when you report a problem
- To bill you for your subscription
We do not sell your data. We do not share it with advertisers. We do not use your shop's business records for any purpose of our own beyond running and supporting the service.
४. माहिती कोणाकडे जाते4. Who else sees it
| Who | What | Why |
|---|---|---|
| Hostinger International Ltd. | All data, at rest | Our hosting provider. Servers in India. |
| Razorpay Software Pvt. Ltd. | Name, mobile, email, amount | Subscription payments. We never see or store your card number. |
| An AI reading service | Only the photograph you submit for scanning | To read a product label or a supplier bill. Sent for that one request and not retained by them for training. |
| Your own accountant or CA | Only what you choose to share | When you generate a share link or export a return. You control this and can stop it. |
| Government officers | The statutory registers | When an inspector asks you for them. You produce them; we do not send anything to anyone on our own. |
We will disclose data if a court or a lawful authority compels us to. Where we are permitted to tell you, we will.
५. माहिती किती काळ ठेवतो5. How long we keep it
While your subscription is active, and after it ends as set out below.
| Record | Kept for | Because |
|---|---|---|
| Your account and contact details | Deleted on request | — |
| Customer and supplier records, balances | Deleted on request | — |
| Sales, purchase and stock registers | Retained for the statutory period even after account deletion | The Fertiliser (Control) Order 1985, the Insecticides Rules 1971 and the Seeds (Control) Order 1983 each require a dealer's records to be preserved and producible on inspection. We cannot destroy them on request, and neither can you. |
| GST records | Retained as the GST Act requires | Statutory. |
| Error and activity logs | Up to 12 months | Security and fault-finding. |
Deleting your account removes your personal and customer data. It does not remove the statutory registers, because the law requires them to exist for a set period and makes their destruction an offence. This is the one part of a deletion request we cannot carry out, and we would rather say so plainly here than surprise you later.
६. खाते व माहिती हटवणे6. Deleting your account
Two ways, and they do the same thing:
- In the app: Settings → Account & Privacy → Delete account
- On the web, without the app: nivistack.in/delete-account.php
We confirm the request with you on your registered mobile, then delete within 30 days, keeping only what the table above says we must. Nothing is deleted without that confirmation, because a shop's whole ledger is not something to lose to a mistyped form.
७. सुरक्षा7. Security
- HTTPS on every connection between the app, the portal and the server
- Passwords stored as bcrypt hashes — we cannot read yours
- App sessions use a bearer token, revoked when you log out
- Each shop's data is separated by shop, enforced on every query
- Staff see only what their permissions allow
- Changes to balances and statutory records are logged with the user and the time
No system is perfect. If we discover a breach affecting your data we will tell you and the relevant authority as the law requires.
८. तुमचे अधिकार8. Your rights
- Ask what we hold about you
- Get a copy — Settings → Data export, or ask us
- Correct anything wrong
- Delete your account, subject to section 5
- Complain to us first, and to the authority under India's Digital Personal Data Protection Act 2023 if we do not resolve it
Write to contact@qmipl.com and we will answer within 30 days.
९. लहान मुले9. Children
This is business software for licensed dealers. It is not directed at children and we do not knowingly collect data from anyone under 18. An agri-input licence cannot be held by a minor.
१०. बदल10. Changes
If we change this policy we will update the date at the top and notify shops in the app. Continuing to use NiviStack after a change means you accept it.