Privacy Policy

1. Who we are

This policy is issued by [Company legal name] ("ThinkVexa", "we"), with its registered office at [Registered office address]. It covers this website, the DairySarthi and LoadSarthi web applications and their Android apps (DairySarthi, DairySarthi Kisan, LoadSarthi and LoadSarthi Ops).

2. Our role under the DPDP Act, 2023

We follow India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and its rules. When a dairy cooperative or a transport company uses our products, that organisation decides why and how its members', farmers', drivers' and customers' data is processed: it is the Data Fiduciary and we process the data on its behalf as a Data Processor. For this website and for our own customer relationships, we are the Data Fiduciary.

3. Data we collect

• Identity and contact: name (in Hindi and/or English), phone number, e-mail, role and organisation.
• Phone numbers, PIN and OTP: we use your mobile number to sign you in — DairySarthi farmers with a PIN first given by their society office (which they can change), and, where SMS is set up, with a one-time password (OTP) — and, where your organisation enables it, to send short SMS updates. PINs are stored only in a protected form; OTPs expire after a short time.
• Operational records: for DairySarthi — milk collections (quantity, FAT, SNF, rate, amount), ledgers, settlements and payments, and bank or UPI details needed to pay farmers; for LoadSarthi — bookings, lorry receipts, trips, delivery proof, invoices and payments.
• Device data: device identifier, app version and sync status, used to register devices, keep them secure and let an organisation revoke a lost device.
• Location: collection devices may record their location with collections so the cooperative can verify where entries were made; LoadSarthi driver and partner apps share live location for trip tracking while in use. Location is collected only with Android permission, which you can withdraw in phone settings (some features then stop working).
• Voice and AI questions: when you ask the AI assistant (Dudh Mitra or Rathi) something, by text or voice, your question is processed to produce an answer from your organisation's data.
• This website: no cookies, no analytics and no trackers. Your language choice is stored only in your own browser.

4. How we use data

• To provide the products: record collections and trips, calculate prices, settle and pay, print receipts and invoices.
• To sign you in, secure accounts and devices, and prevent fraud and duplicate payments.
• To answer your questions, including through the AI assistant (Dudh Mitra or Rathi).
• To meet legal duties, such as tax and accounting record-keeping.
• To reply when you contact us or ask for a demo.

5. Legal basis

We process personal data on the basis of consent given through a clear notice, or for the legitimate uses permitted by Section 7 of the DPDP Act — for example, where you have voluntarily provided data for a specific purpose, or where processing is needed to comply with law. Where you have consented, you may withdraw consent at any time; this does not affect processing already done.

6. We do not sell your data

We do not sell personal data, rent it or use it for advertising. We share it only: with the organisation you belong to (your cooperative or transport company); with service providers who help us run the products — hosting, SMS delivery, payment and payout partners and AI model providers — under contract and only for that purpose; and where the law requires it.

7. Storage and security

Data is encrypted in transit, access is limited by role, sensitive actions need approval, financial changes are audited, bank account numbers are masked, and backups are taken regularly. Each cooperative's DairySarthi data is kept in its own database. No system is perfectly secure; if a personal data breach occurs we will inform the Data Protection Board of India and affected people as the DPDP Act requires.

8. Retention

We keep personal data for as long as the account or contract is active and as needed for the purpose it was collected, and afterwards only as long as the law requires (for example, financial and tax records). Then it is deleted or anonymised.

9. Your rights

• Get a summary of your personal data and how it is processed.
• Have it corrected, completed, updated or erased.
• Withdraw consent.
• Have your grievance addressed.
• Nominate a person to exercise your rights in case of death or incapacity.

If your data is held for a cooperative or a transport company, you can also go to them directly; we will help them respond.

10. Children

Our products are meant for adults and businesses. We do not knowingly process data of children under 18 without verifiable consent of a parent or lawful guardian.

11. Grievance Officer

Grievance Officer: [Grievance Officer name], e-mail [Grievance e-mail], [Registered office address]. We will acknowledge and resolve grievances within the time set by the DPDP rules. If you are not satisfied, you may complain to the Data Protection Board of India.

12. Changes

We may update this policy. The date at the top shows the latest version; for significant changes we will give notice in the products.