Privacy policy

This policy explains how AVIRATINFO SOFTWARE AND SERVICE (“Avirat”, “we”) handles personal data when you visit aviratsoftware.com, use the Avirat software (app.aviratsoftware.com) or the Avirat mobile app. We follow India’s Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules.

Two kinds of data, two roles

Your account and our website. For the details of the people who sign up and use Avirat, and of visitors to our website, we decide how the data is used — we are responsible for it.

Your company’s business records. The stock, parties (your customers and suppliers), documents, payments and files you keep in Avirat belong to your company. We store and process them only to run the software for you, on your instructions. Your company is responsible for having the right to keep its customers’ and suppliers’ details; we never use them for anything else, never sell them and never contact them.

What we collect

Account: name, email, password (stored only as a one-way hash), profile picture if you add one, two-factor sign-in settings, your roles and branch.
Sign-ins and activity: when and from which browser or phone you signed in (by device name and network address), and an audit log of what was created, changed or deleted, so your company can see who did what.
Billing: the company’s billing name, address, country and GST number, the plan, and payment records. Card and bank details are entered with Razorpay, never with us — we do not see or store them.
Business records: whatever your company enters — stock, parties, documents, payments — and files it uploads (stone photos and videos, certificates, purchase attachments, party documents).
Mobile app: your phone’s name (to list your signed-in devices) and, if you allow notifications, an address to send them to.
Website: the pages viewed, where the visit came from and the kind of device — counted without cookies, using a code that changes every day and cannot identify you. Details you send through the contact form.
Support: what you write to us and any files you attach.

How we use it

To run the software: signing you in, keeping your records, showing each person only what their role allows.
To send the emails the software needs: sign-up verification, password resets, security notices, billing reminders and receipts, and the morning notifications email if you switch it on.
To bill your company and keep the tax records the law requires.
To keep the service safe: limiting repeated attempts, keeping logs, and backing up your data.
To answer your questions and fix problems you report.

We do not sell personal data, we do not use it for advertising, and we do not send marketing emails from the software.

Who we share it with

Only the services that run Avirat, each bound to protect the data and use it only for that service:

DigitalOcean — our servers and encrypted backups (in the United States).
Razorpay — payments.
Zoho (ZeptoMail) — sending the software’s emails.
Google Firebase — delivering mobile app notifications, if you allow them.

Services your company chooses to connect — such as Shopify, RapNet or GIA — receive what that connection sends, under your company’s own account with them. A stone or catalogue you share as a public link shows the details your company chose (never cost) to anyone with the link, until you stop it.

We disclose data to authorities only when the law requires it.

Where it is stored

Avirat’s servers and backups are in the United States (DigitalOcean, New York). Your data is sent there over encrypted connections, kept with the safeguards below, and handled under this policy wherever it is.

How long we keep it

Account and business records: while your company uses Avirat.
Deleted documents: kept 90 days so they can be restored, then removed.
Backups: 14 days (30 days on plans with priority backup).
A sign-up that is never confirmed: removed after 7 days.
Website visit counts: 400 days.
When a company closes its account: its data is kept 30 days in case it wants it back, then deleted — and drops out of backups as they expire. Billing and tax records are kept as long as the law requires.

How we protect it

Encrypted connections (HTTPS) everywhere; passwords stored only as hashes; optional two-factor sign-in; sign-ins that expire and can be signed out from your profile; each company’s data in its own separate database; every person limited by their role and branch; encrypted backups kept off the main server; and a log of who changed what.

Cookies

The software uses one essential cookie to keep you signed in. Our website uses no tracking or advertising cookies; visits are counted without cookies.

Your rights

See and take your data: your company’s Owner can download all of it at any time (Settings → Your Data).
Correct it: change your details in your profile, or ask your company’s Owner.
Delete it: ask your company’s Owner to remove your user, or write to us to close the company’s account.
Withdraw consent for anything optional, such as notifications or the morning email, in your profile.
Complain to our Grievance Officer (below), and, if not satisfied, to the Data Protection Board of India.

If your data is held in Avirat by a company you deal with (as its customer or supplier), please ask that company first — it decides what it keeps.

Children

Avirat is business software for adults. We do not knowingly collect data from anyone under 18.

Grievance Officer

Hardik Koladiya
AVIRATINFO SOFTWARE AND SERVICE
B-502, Diamond World, Mini Bazar, Surat 395006, Gujarat, India
Email: info@aviratinfo.com

We acknowledge a complaint within 24 hours and resolve it within 15 days.

Changes

If we change this policy, we update the date above, and tell signed-in users in the software when the change matters to them. See also our terms of service.