Privacy Policy

1.Who this policy is from

UdyamNext is operated by Saphal Techno Soft LLP, a limited liability partnership registered in India (LLPIN [LLPIN — to be confirmed]), with its registered office at [registered address — to be confirmed]. The platform is built with our technology partner, VCNR Technologies Private Limited, who processes data only on our instructions and never for their own purposes.

In the language of the Digital Personal Data Protection Act, 2023, we are the Data Fiduciary for the personal data described here, and you are the Data Principal. This policy covers this website (udyamnext.com) and the UdyamNext web, mobile and admin applications.

Where you use UdyamNext to hold data about your own customers, staff and suppliers, that data belongs to your business. You decide what goes in and what happens to it; we hold and process it on your instructions under our Terms of Service.

2.What we collect

If you only fill in the enquiry form on this website, we collect:

• Your name and your business name
• Your phone number, and your email address if you give one
• Your city and industry, if you give them
• Whatever you type into the message box

Nothing else. We do not profile you, and we do not buy data about you from anyone.

If you register for the platform, we additionally collect:

• Account details — name, email, phone, password (stored only as a one-way hash, never as text we can read), and multi-factor authentication settings.
• Business details — business name, industry, addresses, GSTIN, and the other registration identifiers you choose to enter.
• Business records you create — orders, invoices, stock, payments, projects, job cards, and the customers, suppliers and staff you record against them.
• Location — an approximate position for your business, so the network can show you who is nearby. You control whether your business is listed at all.
• Technical data — device type, app version, IP address, and a log of significant actions taken in your account, which exists so that you can see who changed what.

Some fields are sensitive — PAN, Aadhaar number, bank account details, your password hash and your MFA secret. These are encrypted where they are stored, and they are deliberately excluded from our logs and error reports: an engineer debugging a problem does not see them.

3.Why we use it

We do not sell your data. We do not use your business records to train AI models for anyone else, and we do not share them with other businesses on the platform except what you deliberately send them — an enquiry, a quotation, a purchase order.

4.This website sets no cookies

udyamnext.com sets no cookies, stores nothing in your browser, and loads no third-party scripts — no analytics, no advertising pixels, no social trackers, no external fonts. You will not see a cookie banner here because there is nothing to consent to.

The signed-in applications are different: they use a small number of strictly necessary cookies and local storage to keep you logged in, remember your language, and let the mobile app work without a signal. Those are required for the product to function and are not used for tracking.

5.Who else sees your data

We use a small set of service providers. Each one sees only what it needs, and each is bound to use it only for us:

We will also disclose data where the law requires it — a valid order from a court or an authority acting within its powers — and, if the business is ever sold or merged, to the acquirer, who would remain bound by this policy.

6.Where your data is stored

Data for Indian businesses is stored in India: primarily the Mumbai region (ap-south-1), with a disaster-recovery copy in Hyderabad (ap-south-2). It does not leave India except where one of the providers in clause 5 unavoidably processes it elsewhere to deliver a message you asked for.

Each business gets its own separate database schema. Your records are not mixed with another business’s, and every query the platform makes is scoped to one business before it runs.

7.How long we keep it

• While your account is open — for as long as you use UdyamNext.
• If you close your account — we mark it deleted immediately and keep it recoverable for 30 days in case it was a mistake. After that we permanently erase the personal data.
• Financial records — invoices and payments are anonymised rather than deleted, because Indian tax and company law requires the underlying books to be kept. The transaction survives; the person attached to it does not.
• Audit logs — retained for seven years in write-once storage. They record who did what, and they cannot be edited, by us or by anyone else.
• Enquiries — if you never register, we delete the enquiry after 24 months.

8.How we protect it

• Encrypted in transit (TLS) and at rest.
• Sensitive fields — PAN, Aadhaar, bank accounts, password hashes, MFA secrets — are separately encrypted and masked out of every log and error report.
• Each business is isolated in its own database schema, with a second layer of row-level checks behind it.
• Access is by role. Staff access to production data is restricted, logged and reviewed.
• Uploaded files are virus-scanned and limited to document and image formats.
• Multi-factor authentication is available on every account, and we recommend it.

No system is perfectly secure. If a breach affects your data we will notify you and the Data Protection Board of India within 72 hours of becoming aware of it, and tell you plainly what happened and what to do.

9.Your rights

Under the Digital Personal Data Protection Act, 2023, you can ask us to:

• Show you what personal data we hold about you and who we shared it with.
• Correct anything wrong, incomplete or out of date.
• Erase your personal data, where we are not required by law to keep it.
• Withdraw consent at any time. Withdrawing consent for optional things — marketing messages, being listed in the network — does not cost you access to the software you paid for.
• Nominate someone to exercise these rights if you die or become incapacitated.
• Complain to our Grievance Officer, and after that to the Data Protection Board of India.

Write to enquiry@udyamnext.com. We answer within 30 days, and a request for a copy of your data is delivered as a machine-readable file within 72 hours.

10.Children

UdyamNext is for businesses and is not intended for anyone under 18. We do not knowingly collect data about children. If you believe a child’s data has reached us, tell us and we will delete it.

11.Changes to this policy

When this policy changes we update the date at the top. If a change materially affects your rights we will tell you inside the application and by email at least 14 days before it takes effect, so that you have time to object or to leave.

12.Grievance Officer

As required by the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000:

• Name: [officer name — to be confirmed]
• Email: enquiry@udyamnext.com
• Phone: +91 98440 36360
• Address: [registered address — to be confirmed]

We acknowledge a complaint within 48 hours and resolve it within one month.