Privacy Policy

ANANDA ERP is business software (billing, stock, purchases, accounts, staff, GST and the Sarathi AI assistant) provided by Ananda 360 Technologies, a proprietorship firm registered in Delhi, India (GSTIN 07FFJPD4073M1Z4) ("we", "us"). This policy explains what data the website ananda360.com, the ANANDA ERP software and the ANANDA ERP Android app handle, why, and what choices you have. It is written to meet the Information Technology Act, 2000 and rules under it, and the Digital Personal Data Protection Act, 2023.

1. Who is responsible for which data

Business records. A business (our customer) uses ANANDA ERP to run its own work. That business decides what it enters about its customers, suppliers, agents and staff, and is responsible for that data (it is the "data fiduciary"). We store and process it only to provide the software to that business, on its instructions.

Account and website data. For data about your own ANANDA account (sign-up, login, billing) and visits to our website, Ananda 360 Technologies is responsible.

2. What data we handle

When you sign up for a free trial

• Your name and email (typed in, or from your Google account if you choose "Login with Google").
• Your mobile number, verified with a one-time password (OTP).
• Business details you give: business name, trade, wholesale/retail, number of shops and staff, GST registration and GSTIN, current software, address, city, state, PIN code and how you heard about us.

Login details

• Name, phone number or user ID, and password — stored only as a one-way hash, never in plain text.
• If you use "Login with Google": your Google account email and a Google sign-in identifier.

Business records the business enters

• Products and designs, stock, barcodes, estimates and bills, GST invoices, purchases, payments, expenses, ledgers.
• Names, phone numbers, addresses and GSTINs of the business’s customers, suppliers and agents.
• Staff names, phone numbers, roles, permissions, incentives and sales figures.
• Design/product photos uploaded by the business or its staff, and photo links the business chooses to share.

Sarathi AI questions

• The questions a user asks Sarathi, the answers, and a usage count (to apply the plan’s monthly limit and show the cost to the owner).

Technical and usage data

• Login time and device/browser type, kept in a login history the business owner can see.
• Your IP address, used briefly to block repeated wrong passwords and to limit demo and sign-up requests; it is not added to business records.
• For trial and paying accounts: which days the software was used and simple counts (number of products, customers, users, bills), so we can support customers and understand trial use.

We do not collect location, contacts, SMS, call logs, or other data from your phone. The Android app only opens the ANANDA ERP website; it does not read anything else on the device. A business may choose to use the device camera to scan barcodes or take product photos; images are used only for that purpose.

3. Why we use it

• To provide the software: save and show records, make bills and reports, apply each user’s permissions, run offline billing and sync.
• To create and verify accounts and keep them secure (OTP, login history, limiting repeated wrong passwords).
• To answer Sarathi questions from the business’s own data.
• To give support, send service messages (for example, trial ending, plan renewal or AMC due) and handle billing.
• To meet legal duties (for example, tax records and lawful requests).

We do not sell data, show ads inside the software, or use a business’s records for any other purpose.

4. Service providers (who processes data for us)

We use these providers only to run ANANDA ERP. They process data on our behalf and not for their own use.

Because of these providers, data is processed outside India (mainly Singapore, and the USA for Sarathi). For Sarathi, only the question and the specific report results needed for that answer are sent — never the whole database — and Sarathi can only read data, not change it.

Data may also be disclosed when Indian law requires it, for example to a court or government authority.

When a business chooses to send something itself — for example a bill or photo link on WhatsApp — it is sent from that business’s own device and account.

5. Security

• Each business’s data is kept in its own separate database area with its own access role; one business cannot read another’s data.
• All connections use HTTPS encryption. Passwords are stored as one-way hashes.
• Inside a business, the owner controls what each staff login can see. Sensitive owner screens can need a second password.
• Our database provider keeps restorable history of the data, so it can be recovered after a fault.

No system is perfectly secure. If a personal data breach happens, we will inform affected customers and the authorities as Indian law requires.

6. How long we keep data

• Paying accounts: while the business uses ANANDA ERP. After it stops, it can export its data and ask us to delete it; we delete within 30 days of the request, except records the law requires us to keep.
• Free trials: when a trial ends without a plan, the account becomes view-only; the whole trial business (records, logins and photos) is deleted automatically 30 days after the trial ended.
• "Try now" demo copies: a temporary copy of sample data, deleted automatically after about 3 hours.
• Photo links: a shared "Photos" link stops working after 30 days.
• Backups: overwritten within 30 days.
• Our own billing records (invoices we issue to customers) are kept for the period required by GST and tax law.

7. Your rights and choices

• Customers, suppliers and staff of a business: ask that business to access, correct or delete your details. You may also write to us and we will pass it on.
• Business owners: export your data any time (Backup / Export), correct it in the software, and ask us to delete your account and data — see Delete account.
• Everyone: under the Digital Personal Data Protection Act, 2023 you can ask for a summary of your personal data we process, correction or erasure, withdraw consent, nominate someone to act for you, and raise a grievance (section 10).

8. Cookies and local storage

The software keeps your login session and a few settings (such as business name, shop names and language) in your browser’s local storage so it works, including offline billing. The website remembers your language choice the same way. We do not use advertising cookies inside the software. Only on the public website pages (ananda360.com, not inside the software at ananda360.com/app) we use visitor analytics:

• Google Analytics: which pages are visited, where visitors come from (for example search, YouTube or an ad), the city/region and device type.
• Microsoft Clarity: how visitors use a page (clicks, scrolling, heatmaps and session replays). Text typed into forms is masked and not recorded.
• Meta pixel: whether a visit came from our Facebook / Instagram ad, so we can measure our ads and show them to people who visited the site.

These services set their own cookies and receive your IP address and browser details. We use them only to improve the website and our ads; we do not sell this data. You can block them with your browser’s privacy or ad-blocking settings, and the website will still work.

9. Children

ANANDA ERP is for businesses and is not meant for anyone under 18. We do not knowingly collect data about children.

10. Contact and Grievance Officer

We acknowledge grievances within 48 hours and resolve them within 30 days. If you are not satisfied, you may approach the Data Protection Board of India.

11. Changes

If this policy changes, the new version will be posted here with a new date. For important changes we will also tell business owners inside the software or on WhatsApp.