Privacy policy
Who we are
dhivi POS is billing, stock and customer software for shops in India, a Dhivi iTechnologies product. Dhivi iTechnologies is a proprietorship registered in India ("we", "us"). This policy covers the dhivi iONE website at ione.dhivi.app (and dhivi.app, which sends visitors there), dhivi iONE sign-in and account, the POS on phones, tablets and computers (including the Android apps), the back office and every other dhivi POS application.
Questions, or a request about your data: [email protected]. This address also reaches our grievance officer. We answer within 7 working days.
Two kinds of data
A business's own account. When a shop owner signs up, we decide how the account's data is used. This policy is our promise about it.
A shop's customers. When a shop records its own customers in dhivi POS (a name and phone on a bill, a credit account, loyalty points), the shop decides what to collect and why. We keep that data only to run dhivi POS for the shop, and never use it for anything of our own. A customer of a shop who wants their data seen, corrected or erased should ask the shop first; we help the shop do it.
What we collect
| What | Examples | Why |
|---|---|---|
| Business details | Business and legal name, GSTIN, address, the owner's name, email and phone | To create the account, issue GST invoices and contact the owner |
| Staff | Names, mobile numbers or emails, roles; passwords and PINs stored only as one-way hashes; for phone unlock, a public key, never a fingerprint or face | To sign people in and control what each may do |
| Shop records | Products, stock, bills, returns, expenses, suppliers, the shop's customers and their dues and points | This is the service: the shop's own records |
| Billing with us | Our invoices to the business, payments and payment references; for autopay, the mandate's reference at our payment provider, never a card or bank number | To bill for dhivi POS and keep the tax records the law requires |
| Support | Requests, replies and attached files | To answer them |
| Security and reliability | The network address and device type at sign-in, sign-in history, error records, a record of important actions | To keep accounts safe, stop abuse and fix faults |
We do not sell data, show advertising, or use data to build advertising profiles. dhivi POS sets no advertising or analytics cookies. The applications keep the sign-in and the device's own settings in the browser's storage on that device.
Signing in with Google
If you choose Continue with Google, Google tells us your name, your email address and that Google has verified that address. We use them only to sign you in to dhivi POS, or to create your account when you ask us to. We do not receive your Google password, and we do not ask for or read your Gmail, contacts, calendar, files or any other Google data.
We do not sell this information, use it for advertising, or share it with anyone except as this policy describes. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. You can unlink Google at any time in your account, and remove our access from your Google Account's security settings.
What the app asks your device for
- Camera, only when you tap to scan a barcode. The picture is read on the device and is not sent to us.
- Bluetooth and USB, only when you connect a receipt printer or barcode scanner.
- Notifications, only if a manager turns on approvals on their phone.
- Fingerprint or face unlock, which your phone handles. We receive a confirmation, never the fingerprint or face.
The app does not use your location, contacts or microphone, or any of your files beyond those you choose to attach.
Who helps us run dhivi POS
| Service | What for |
|---|---|
| Cloud hosting | The servers and databases that run dhivi POS, and encrypted backups, all in India |
| Network and security | Delivering the apps securely, the "verify you are human" check on sign-up and password reset, and uptime checks |
| Signing in with Google, when you choose it | |
| Payments | Payments to us and autopay, and, if a shop connects its own payment account, UPI payments to that shop |
| Messaging | SMS and WhatsApp messages, only when a shop turns messages on |
Each provider sees only what its job needs. Your data is stored in India. We may share data when the law requires it, for example on a valid request from a government authority.
How long we keep it
- While an account is open, we keep its data so the business can use it.
- Backups are encrypted, kept for 30 days, and then deleted.
- When a business closes its account and asks for deletion, we erase its records, as described on Delete my data. We keep our invoices to it and their payments for as long as Indian tax law requires, and a record that the account was erased.
Your rights
Under India's Digital Personal Data Protection Act, 2023, you may ask to see, correct or erase your personal data, to name someone to act for you, and to complain. An owner or admin can download a full copy of the business's data at any time from the account console.
To raise a concern, write to [email protected]. If you are not satisfied with our answer, you may complain to the Data Protection Board of India.
Security
Connections are encrypted. Each business's records are kept apart, so one business cannot read another's. Passwords and PINs are stored as one-way hashes, and payment secrets are sealed before they are saved. Backups are encrypted. Staff of dhivi POS see a business's records only to give support the business asks for.
Children
dhivi POS is for businesses and is not meant for anyone under 18.
Changes
If we change this policy, we update the date at the top, and tell account owners by email or in the app when a change matters to them.