How we handle your data.

GasKhata is a software product operated by Purple Mango, a partnership firm registered in India with its principal place of business at:

Address 1, Amber Gas Godown,
Nangal Road, Kunda,
Jaipur – 302028, Rajasthan, India

In this policy, "we," "us," and "Purple Mango" refer to the operator of GasKhata. "You" means the LPG distributor (and the distributor's staff) using our software.

GasKhata is a business operations tool. We collect only the data you put into the app to run your distributorship:

• Account data: your name, phone number, distributorship name, OMC (BPCL / IOCL / HPCL), and address, used to create your workspace and authenticate you.
• Business operations data: cylinder stock, cash transactions, customer records (including domestic and commercial consumer numbers and contact details you add), commercial sales and payments, staff records, and complaints.
• Device data: your IP address, browser/device type, and basic page navigation (via standard server logs), used to operate and secure the service.

We do not collect: biometric data, financial credit-card numbers (those are handled by our payment processor, below), or health information.

• To provide the service: store, display, and process your business records on your behalf.
• To communicate with you: support messages, billing reminders, important product updates. We do not use your data for unrelated marketing.
• To route complaints to your staff: when your manager logs a complaint, we send a WhatsApp message to the assigned staff member with a signed link. The link is signed with a JSON Web Token (JWT) that expires after 7 days.
• To secure the platform: detect and investigate abuse, fraud, or security issues.
• To comply with law: respond to lawful requests and court orders.

We use the following sub-processors to run the service. Each of them only receives the data necessary for its role:

• Supabase (database hosting): primary data store. Rows are isolated per tenant using row-level security.
• AiSensy (WhatsApp Business Solution Provider): delivers outgoing WhatsApp messages (complaint assignments, day-close summaries). AiSensy only sees the message content and the recipient's phone number.
• Razorpay (payment processor): processes your subscription fee. Razorpay handles card details directly; we do not store your card number.
• Vercel (application hosting): runs the web application.

We do not sell your data. We do not share your data with advertisers.

Data is stored on servers located in India (Supabase's Mumbai region) or in countries with comparable data protection standards. Transfers outside India, where they occur, rely on standard contractual clauses.

We keep your active workspace data for the duration of your subscription plus 90 days after cancellation, so you can export or recover if needed. You may request earlier deletion by writing to us (see section 10).

Server logs are retained for up to 90 days for security and debugging.

Under applicable law (including the Digital Personal Data Protection Act, 2023 in India), you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Ask us to delete your data (subject to legal retention duties).
• Withdraw consent and close your account.
• Lodge a complaint with the Data Protection Board or other competent authority.

To exercise any of these rights, email us at privacy@gaskhata.in (or call the number in section 10).

We protect your data with: encryption in transit (HTTPS everywhere), encryption at rest at the database layer, row-level isolation between tenants, principle-of-least-privilege on internal access, and routine backups.

No system is 100% secure. If we ever become aware of a breach affecting your data, we will notify you within 72 hours and report to the relevant authorities.

GasKhata is a business tool and is not intended for anyone under 18. We do not knowingly collect data from children.

For any privacy questions, requests, or complaints:

Purple Mango (GasKhata)
Address 1, Amber Gas Godown, Nangal Road, Kunda, Jaipur – 302028
Email: privacy@gaskhata.in
Phone: +91 82090 60310

We may update this policy from time to time. Material changes will be notified by email or in-app. Continued use of GasKhata after the effective date means you accept the updated policy.