Privacy policy — Radhava Tech

This policy explains how Radhava Tech (sole proprietorship) ("Radhava Tech", "we", "us") handles personal data when you use www.radhavatech.com and our software products and services. We follow the Digital Personal Data Protection Act, 2023 (DPDP Act), the DPDP Rules, 2025, the Information Technology Act, 2000 and other applicable Indian laws.

Who decides how your data is used

Our own customers and website visitors: for the details of businesses that buy from us and people who contact us, we are the "data fiduciary" and this policy applies directly.
Your customers, staff and students: when a shop, restaurant, salon, clinic or school uses our products to keep records about its own customers, staff, guests, parents or students, that business is the data fiduciary and decides why and how the data is used. We are its "data processor": we store and process the data only to run the product for it, under its instructions. Questions about such records should first go to that business; we will help it answer.

What we collect

Details you give us: name, phone number, email, business name, address and GSTIN, and anything you write to us (for example through our contact form).
Account and usage data: sign-in records, settings, and the records you create in our products — for example bills, orders, bookings, stock, staff attendance and pay, customer lists, fees or student records.
Payment data: payments are handled by our payment partners (such as Razorpay or Cashfree). We receive the payment status and reference numbers, never your full card details, PINs or bank login details.
Technical data: IP address, device and browser type, and logs needed to keep the service secure and working.

How we use it

To provide, set up and support the products you use.
To process payments and issue GST invoices.
To send service messages (login codes, receipts, bills, booking and fee reminders) by WhatsApp, SMS or email.
To keep our services secure, prevent fraud and misuse, and meet legal and tax requirements.
To send offers or news — only if you have agreed. You can stop them at any time by replying STOP or telling us.

We never sell personal data, and we never use your customers', staff's or students' data for our own marketing.

Messages your business sends through our products

Some products let a business send WhatsApp or SMS offers to its own customers. The business must have each customer's agreement before sending promotional messages, and every such message includes a way to stop receiving them. Customers who opt out are not messaged again.

Children's data

Our school software stores data about students, many of whom are under 18, on behalf of their school. The school obtains the consent of parents or guardians as the law requires and decides what is stored. We use children's data only to run the school's services: we do not track children's behaviour, show them advertising, or build profiles of them. Our other products are meant for adults.

Where data is stored

Our cloud: data is stored on our servers in India (Mumbai). Our website and products are reached through Cloudflare, a security and speed network that may handle traffic in other countries while passing it to our servers.
On your own device or shop computer: counter and staff apps (for example for restaurants and shops) keep a working copy of the business's data on its own tablet, phone, laptop or shop computer so they keep working without internet, and sync it to our cloud when online. Keep those devices locked and protected.
On your own server: if a business runs our software on its own computer or server (an "install"), that copy of the data stays with the business and it is responsible for protecting it.
Service providers outside India: a few features use providers that may process data outside India — for example WhatsApp (Meta), Google sign-in and reviews, and the optional AI writing assistant, which sends the text you ask it to improve to an AI provider. These features are optional, and we send only what the feature needs. We do not transfer data to any country the Government of India has restricted.

Who we share it with

Only with service providers that help us run our products, under confidentiality and data-protection terms: hosting and network (our server provider and Cloudflare), payments (Razorpay, Cashfree), messages (Meta WhatsApp, SMS providers such as MSG91, email), sign-in (such as Google or Firebase) and, when you use it, the AI writing assistant. We also share data when the law requires it, for example with tax authorities or on a lawful order.

How long we keep it

Account and product data: while your account is active. When a business stops using a product, it can export its data for 90 days; after that we delete it, except what the law requires us to keep.
Invoices and payment records: as long as tax laws require (currently up to 8 years).
Security and access logs: at least one year, as the DPDP Rules require.
Contact-form enquiries: up to 2 years, unless you become a customer or ask us to delete them sooner.
Demo and test copies of our products contain only made-up sample data and are reset every week.

How we protect it

Encrypted connections (HTTPS) everywhere, passwords stored only in scrambled (hashed) form, staff PINs for counter apps, role-based access so each person sees only what their job needs, separate databases for real and demo data, and access logs. Payment card details never touch our servers.

If something goes wrong

If a personal data breach happens, we will tell the affected people and businesses without delay, in plain language — what happened, what it may mean for them, what we are doing about it and whom to contact — and we will report it to the Data Protection Board of India as the law requires.

Your rights

See a summary of your personal data and how it is used.
Correct, complete, update or delete your data.
Withdraw consent you gave earlier (this does not affect what was done before you withdrew it).
Nominate someone to use these rights for you if you die or cannot act.
Raise a complaint with us, and if you are not satisfied, with the Data Protection Board of India.

Ask through our Contact page or the grievance officer below. We reply as soon as we can and always within 90 days, as the DPDP Rules require. If your data is held for a business that uses our products, we pass your request to that business and help it answer.

Cookies

Our products use only essential cookies, to keep you signed in and secure. This website does not use advertising or tracking cookies.

Grievance officer and contact

Grievance officer: Vatish Sharma, Proprietor
Email: [email protected]
Online: our Contact page — choose "Help with something I already use".

We acknowledge complaints within 24 hours on working days and aim to resolve them within 15 days.

Changes

We may update this policy as our products or the law change. The latest version is always on this page with its date; for important changes we will also tell customers by email or WhatsApp.