Legal Document

Privacy Policy

Last Updated: June 12, 2026  |  Effective Date: June 12, 2026  |  Governing Law: India

OmniServe Intelligence Pvt Ltd ("OmniServe", "we", "our", "us") is committed to protecting the privacy and security of personal data collected through the JewelSoft platform. This Privacy Policy has been prepared in accordance with:

• The Information Technology Act, 2000 (IT Act)
• The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (IT Rules)
• The Digital Personal Data Protection Act, 2023 (DPDP Act)

1. Information We Collect

We collect the following categories of personal data when you register, use, or interact with JewelSoft:

• Identity Data: Full name, business name, GST number, PAN number
• Contact Data: Email address, phone number, registered address
• Business Data: Inventory items, billing records, customer invoices, gold loan details
• Technical Data: IP address, browser type, session tokens, access logs
• Customer Data: End-customer names, phone numbers, purchase history entered by the registered jeweller

2. Purpose of Data Collection

• Providing and maintaining the JewelSoft billing and inventory platform
• Processing invoices, gold loan ledgers, and customer transactions
• Sending transactional notifications (invoice PDFs, inquiry confirmations)
• Improving platform security, performance, and user experience
• Complying with applicable Indian laws, regulations, and court orders

3. Sensitive Personal Data (SPDI)

In accordance with IT Rules 2011, financial information is classified as Sensitive Personal Data or Information (SPDI). We do NOT store raw payment card data. All business financial records are stored in encrypted form.

4. Data Sharing & Third Parties

OmniServe Intelligence Pvt Ltd does NOT sell your Personal Data. We may share data with:

• Cloud Service Providers: Supabase Inc. (database hosting — data transfer governed by standard contractual clauses)
• Email Services: SMTP providers for transactional email delivery
• Government Authorities: When required by law, court order, or lawful authority under the IT Act or DPDP Act

5. Data Retention

We retain Personal Data for as long as your account is active or as required by applicable Indian law (e.g., GST records must be retained for 7 years under the CGST Act). You may request deletion of your account data subject to legal retention obligations.

6. Your Rights Under DPDP Act 2023

• Right to access your Personal Data held by OmniServe
• Right to correct inaccurate or outdated Personal Data
• Right to erasure of Personal Data (subject to legal retention requirements)
• Right to nominate another individual to exercise rights on your behalf
• Right to withdraw consent (where processing is based on consent)
• Right to file a grievance with our Grievance Officer or the Data Protection Board of India

7. Data Security

OmniServe implements reasonable security practices as mandated under IT Rules 2011, including password hashing (bcrypt), session token authentication, HTTPS/TLS encryption, role-based access controls, and regular automated database backups.

8. Cookies

We use session cookies strictly necessary for authentication. No third-party advertising or tracking cookies are deployed on this platform.

9. Grievance Officer

In accordance with IT Rules 2011 and DPDP Act 2023, OmniServe Intelligence Pvt Ltd has designated a Grievance Officer:

Email: support@omniserveai.com
Company: OmniServe Intelligence Pvt Ltd
Response Time: Acknowledgement within 24 hours; resolution within 30 days.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Registered users will be notified of material changes via email. Continued use constitutes acceptance of the updated policy.

11. Contact

For privacy-related queries: support@omniserveai.com