Privacy Policy

1. Who We Are

Crop Flow ("we", "us", "our") operates Crop Flow, a SaaS platform for commission agencies (ਆੜਤੀਆਂ) to manage farmers, transactions, and payments. Our service is available at cropflow.site and related domains.

For questions about this policy, contact us at gurdarshanschahal@gmail.com

2. Information We Collect

Information you provide directly:

• Account details: name, email address, password
• Firm details: firm name, address, phone, GST number
• Farmer records: names, phone numbers, village information
• Transaction data: crop details, amounts, payment dates, commission rates
• Payment information: billing cycle selection (processed via PayU — we do not store card or bank data)

Information collected automatically:

• Log data: IP address, browser type, pages visited, timestamps
• Usage data: features used, session duration
• Device information: operating system, screen resolution

3. How We Use Your Information

• To provide and operate the Crop Flow service
• To process payments and manage your subscription
• To send transactional emails (account confirmation, password reset, payment receipts)
• To respond to support requests
• To detect and prevent fraud or abuse
• To improve our product based on aggregate usage patterns

We do not sell your personal data to third parties. We do not use your farmer or transaction data for advertising purposes.

4. Data Storage and Security

Your data is stored on Supabase (PostgreSQL), hosted on AWS servers. Data is encrypted at rest and in transit using TLS. We use Row Level Security (RLS) to ensure each firm can only access its own data.

Passwords are hashed using bcrypt. We never store plain-text passwords.

While we implement industry-standard security measures, no system is 100% secure. In the event of a data breach, we will notify affected users within 72 hours as required by applicable law.

5. Third-Party Services

We use the following third-party services:

• Supabase — database and authentication
• Vercel — hosting and deployment
• PayU — payment processing (subject to PayU's Privacy Policy)

Each of these services has their own privacy policies governing how they handle data.

6. Data Retention

We retain your account data for as long as your account is active. If you cancel your subscription, your data is retained for 90 days before permanent deletion, giving you time to export your records.

You may request immediate deletion of your account and all associated data by emailing us at gurdarshanschahal@gmail.com

7. Your Rights

You have the right to:

• Access — request a copy of the data we hold about you
• Correction — update inaccurate or incomplete data
• Deletion — request deletion of your account and data
• Portability — export your farmer and transaction records as PDF or CSV

To exercise any of these rights, email us at gurdarshanschahal@gmail.com

8. Cookies

We use only essential cookies required for authentication (session tokens). We do not use advertising cookies or tracking pixels. You cannot opt out of session cookies as they are required for the service to function.

9. Children's Privacy

Crop Flow is intended for business use only and is not directed at children under 18. We do not knowingly collect data from minors.

10. Changes to This Policy

We may update this policy from time to time. We will notify you by email and post the updated policy on this page with a new effective date. Continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions or requests: