Privacy Policy

Last updated: 5 September 2026

1. What we hold

Your account

Email address, shop name, owner name and phone number, and the date you joined. If you add staff, their name and the phone number they sign in with.

Your books

Whatever you enter — customers and their contact numbers, deals, weights, rates, balances, bills, stock and notes. We treat all of it as confidential business information.

Payments

Which plan and modules you bought, the amount, and the reference number of the payment. We never see or store your card number, UPI ID, CVV or bank login. Those go straight to Razorpay, our payment provider, and never pass through us.

Technical records

Ordinary server logs kept by our hosting provider, such as the time of a request and error messages. These help us find faults.

2. Why we hold it

• To run the service — to show you your own accounts on every device.
• To take payment and activate what you bought.
• To answer you when you write in with a problem.
• To keep the service secure and to fix faults.
• To meet legal and tax obligations.

We do not use your data to advertise, we do not sell or rent it, and we do not share it with anyone for their own purposes.

3. Where it is kept

Your data is stored with Google Firebase (Google Cloud), which we use for hosting, sign-in and the database. Payments are processed by Razorpay. Both are established providers with their own security and privacy commitments. We use no other third party with access to your records.

4. Who can see it

• You, through your login.
• Your staff — but only the screens you have ticked for each of them.
• Us, only when you ask us to look into a problem, or where the law requires it.

One shop cannot read another shop’s records. That is enforced on our servers, not just hidden in the app — the rules reject the request itself.

5. Keeping it safe

• All traffic is encrypted (HTTPS), and the site is served over HTTPS only.
• Your mobile number is verified by OTP when the account is created. Email verification is optional and can be completed later.
• Sign-in is handled by Google Firebase Authentication. We never store your password — not even in a form we could read.
• Access rules are checked on the server for every single read and write.
• Deleted entries are kept as a permanent record, so a deletion can always be traced. This protects you against mistakes and against staff error.

No system is perfect. If a breach ever affects your data, we will tell you without delay and tell you what to do.

6. How long we keep it

We keep your records for as long as your account exists, and for a reasonable period afterwards in case you come back or a legal or tax obligation applies. You can ask us to delete your account and its data at any time — see below.

7. Your choices

Take your data out

The app makes a full backup of everything as a single file, at any time, from Settings. This works even after a plan has expired.

Correct it

You can edit your records yourself. Write to us for anything you cannot change.

Delete it

Email support@sarafaai.com from your registered address and we will delete your account and its records. Take your backup first — deletion cannot be undone.

8. Cookies and similar

We use only what is needed to keep you signed in and to remember your language and settings on your own device. We use no advertising cookies and no third-party tracking.

9. Children

This is business software and is not intended for anyone under 18.

10. Changes

If this policy changes, the date at the top changes with it. If a change materially affects you, we will tell you by email.

11. Contact

Questions, or to have your data removed: support@sarafaai.com. Full details on the Contact Us page.