Privacy Policy

StockMitra — Inventory & GST Billing app · Last updated: 13 June 2026

StockMitra ("the app", "we") helps shop owners manage inventory, billing, and customer credit (khata). This policy explains what data the app handles, where it is stored, and your rights under India's Digital Personal Data Protection Act, 2023 (DPDP Act).

1. Data we collect

• Account data — email address and password (managed by our authentication provider; we never see your password).
• Business profile — shop name, address, GSTIN, phone, UPI ID, invoice preferences.
• Business records — inventory items, stock movements, bills/invoices, purchases, payments and credit (khata) entries.
• Customer & supplier details you enter — names and phone numbers of your customers and suppliers, stored to power billing and khata features. You are responsible for having their consent.
• Photos — item images and purchase-bill photos you choose to attach. Only photos you explicitly pick are accessed.
• Team data — email addresses and roles of staff you invite.
• Crash reports — anonymous technical data (device model, OS version, error traces) to fix bugs. No business records are included intentionally.

2. What we do NOT do

• We do not sell or rent your data to anyone.
• We do not show ads or share data with advertisers.
• We do not read your contacts, SMS, location, or files outside the app.

3. Where data is stored

Your data lives in two places: a local database on your device (so the app works offline) and our secure cloud database, protected by row-level security so only you and the team members you invite can access your business's records. Data in transit is encrypted with TLS.

4. Third-party services

We use a small set of service providers to run the app. They process only what their function needs and are not permitted to use your data for their own purposes.

• Cloud hosting — securely stores your data and syncs it across your devices.
• Crash diagnostics — anonymous technical reports (device model, OS, error traces) help us fix bugs. No business records are included.
• SMS service — sends the one-time login code to your phone when you sign in with your mobile number.
• Payment processing — securely handles subscription payments when you upgrade. Card details are handled by the processor, not us.
• GST registry — when you use "fetch from GSTIN", the GSTIN you enter is checked against the government-authorised GST database to retrieve public taxpayer details.
• Product database — when you scan an unknown barcode, the barcode number is looked up in a public product database to suggest details.
• Web fonts — display fonts are loaded from a content delivery network on first launch and cached.

5. Device permissions

• Camera — scanning barcodes/QR codes, taking item photos.
• Photos — attaching images you pick to items and bills.
• Microphone — voice-to-invoice; speech is processed on your device and is not recorded or stored.
• Bluetooth — connecting to your thermal receipt printer.
• Notifications — trial and account reminders only.
• Biometric — optional app lock; biometric data never leaves your device and is handled entirely by Android/iOS.

Every permission is optional — the related feature simply stays off if you decline.

6. Data retention & deletion

Your data is kept as long as your account is active. You can delete your account and all associated business data at any time from Setup → Account → Delete account inside the app. Deletion is permanent and removes your cloud data; local data is removed when you uninstall the app. Backups expire within 30 days.

7. Your rights (DPDP Act, 2023)

• Access a copy of your data (use the in-app CSV export tools).
• Correct inaccurate data (editable directly in the app).
• Erase your data (in-app account deletion).
• Raise a grievance using the contact below.

8. Children

StockMitra is a business tool and is not directed at children under 18.

9. Changes

We will update this page and the "last updated" date when this policy changes. Material changes will be announced in the app.

10. Contact

Grievance officer / data requests:
support@risorra.com