Privacy Policy

This Privacy Policy explains how KisaanJi ("we", "us", "our", the "Platform") collects, uses, discloses, and safeguards your personal data when you use KisaanJi — whether as a farmer/seller, buyer, or visitor. KisaanJi is owned and operated by Havteq Solutions Private Limited. This policy is drafted in line with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Information Technology Act, 2000 and rules made thereunder. By using the Platform, you consent to the practices described here.

1. Information we collect

a) Account & profile data — name, email, phone number, password (stored as a one-way bcrypt hash — we never see or store your plain-text password), business/farm name, city, state, and role (farmer/seller, buyer, or team member).

b) Verification data (only if you use these specific features) — GSTIN (for GST invoicing eligibility), bank account number and IFSC (only when you choose to link a bank account for Direct Benefit Transfer tracking), and Aadhaar-linked bank verification status where you explicitly opt in. We store only what is needed to run that feature and never request your Aadhaar number itself for anything beyond the DBT bank-linking flow you initiate.

c) Transaction data — orders, wallet top-ups, escrow status, invoices, RFQs, coupons, and loyalty points. Payments are processed by Razorpay (see §5); we store the transaction reference and status, not your card/UPI/bank credentials.

d) Content you create — product listings, quality grades, reviews, messages, connection requests, crop-calendar entries, farm accounting (Bahi-Khata) records, and photos you upload.

e) AI-feature inputs — questions/photos you submit to the AI Crop Advisor, Crop Doctor, chatbot, or voice assistant. These are sent to our AI processor (see §5) to generate a response and logged so we can enforce fair-use limits and improve accuracy.

f) Support data — any name, email, phone, or message you send us directly by email when you write to our support address.

g) Technical data — IP address, device/browser type, and usage logs, collected automatically for security, fraud prevention, and diagnosing issues.

h) Location — pincode/district you provide (for mandi prices, weather, and "Kisaans Near Me"), or precise device location only if you explicitly grant permission for the map feature.

2. How we use your data

To operate your account and dashboard; connect farmers with buyers; process orders, wallet top-ups, and escrow via Razorpay; generate GST invoices; show relevant mandi prices, weather, and government schemes; send transactional emails/SMS/WhatsApp/push notifications (OTPs, order updates, price alerts, scheme deadlines); run AI features you request; and detect fraud or abuse. We do not use your data for third-party advertising, and we never sell your personal data.

3. Data isolation between tenants

Each farm/business account is tenant-isolated in our database. Other users cannot see your private records — accounting entries, documents, team membership, or financial data — unless you make a listing public or send an inquiry yourself. Product/service listings, reviews, and public profile information are visible to other users by design.

4. Cookies

We use only essential cookies (session, authentication, CSRF protection, and your chosen language) — no third-party advertising or cross-site tracking cookies.

5. Third parties who process data on our behalf

• Razorpay Software Private Limited — an RBI-regulated payment aggregator that processes all payments (wallet top-ups, order payments). Your card, UPI, and net-banking credentials are captured directly by Razorpay's PCI-DSS certified systems — we never see or store them.
• DeepSeek (AI model provider) — processes the text/images you submit to AI features (Crop Advisor, Crop Doctor, chatbot, voice assistant, listing/letter drafting) solely to generate a response. We do not send your account credentials or payment data to this provider.
• ZeptoMail (Zoho) — sends transactional emails (OTP, verification, order/return updates, password reset) on our behalf.
• Government open-data sources — AGMARKNET/data.gov.in (mandi prices), myScheme.gov.in (schemes), Open-Meteo (weather), and CPCB (air quality). We only pull public data from these sources; we do not send them your personal data.

We require every processor we use to protect your data at least as strictly as this policy, and we only share what each service needs to do its job.

6. Data sharing & disclosure

We share data only: (a) with the processors listed in §5, (b) with another user when you take an action that requires it (e.g., sending a product inquiry, RFQ, or order — the counterparty sees what is needed to fulfil that transaction), (c) when required by law, court order, or a lawful request from a government authority, or (d) with your explicit consent. We do not sell or rent personal data to anyone.

7. Data retention

We retain account and transaction data for as long as your account is active and as required by applicable law (e.g., financial/GST records per statutory retention periods). AI-feature request logs are retained only as long as needed for fair-use enforcement and quality improvement. You may request deletion at any time (see §9); we will delete or anonymize data except where retention is legally required (e.g., completed financial transactions).

8. Data security

Data is encrypted in transit (TLS/SSL) and passwords are bcrypt-hashed. Access is role-based with audit logging. Two-factor authentication (TOTP) is available for all account types. No system is 100% secure, but we apply industry-standard safeguards and promptly investigate any suspected breach.

9. Your rights

Under the DPDP Act, 2023, you have the right to: access a copy of your personal data, correct inaccurate data, request erasure, withdraw consent for optional processing (e.g., AI features, marketing notifications), and file a grievance. To exercise any of these rights, email us at . We will respond within a reasonable time and in any event within the period prescribed by applicable law.

10. Children's privacy

The Platform is intended for users aged 18 and above. We do not knowingly collect personal data from minors. If you believe a minor has provided us data, contact us and we will remove it.

11. Grievance Officer

In accordance with the Information Technology Act, 2000 and rules made thereunder, the Grievance Officer for KisaanJi can be reached at: , First Floor, Opposite DK Sharma Clinic, Main Bazar, Kalka, Panchkula, Haryana 133302, India. We acknowledge complaints promptly and aim to resolve them within the timelines prescribed by law.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified via the Platform or by email. Continued use after an update constitutes acceptance of the revised policy.

13. Contact us

Questions about this policy? Email .