Privacy Policy
This policy explains what Neem Karoli Sales Corporation Private Limited collects when you use our ordering apps or this website, why we collect it, who else can see it, and how to get it deleted. It is written to be read, not to be got past.
1. Who we are
Neem Karoli Sales Corporation Private Limited ("we", "us", "the company") is a wholesale distributor of packaged beverages, with its registered office at Plot No. 219, Parshvnath Enclave Vistar, Vatika, Bagru, Sanganer, Jaipur, Rajasthan 303905, India. We are the data fiduciary for the information described here.
This policy covers our ordering app for shops ("Neem Karoli Sales"), our depot app used by our own staff and delivery team ("Neem Karoli Depot"), this website, and the phone calls and messages we exchange with you about your orders.
2. What we collect
We are a business-to-business supplier, so almost everything we hold is about a shop rather than a private individual. We collect only what an order needs, and what we need to run the apps well.
Information you give us
- Your mobile number
- This is your account. There is no password anywhere in our system — you sign in with your number and a one-time code, which we send to that number by SMS — or on WhatsApp, if the SMS cannot be sent. It is also the number we call to confirm your order.
- Your details and your outlets
- Your name, the name of each outlet you order for, and — if you want it on your bills — your GSTIN, for the account or separately for an outlet that has its own.
- Your email address, if you add one
- Optional, on your shop's profile. We keep it and our team can see it, but we do not use it yet — we send nothing to it and it is not a way to sign in. You can change it or remove it in the app at any time.
- Your delivery address
- The point you place on the map, and the details you give at checkout: the name to ask for, the address lines and pincode, directions, and — if you add one — another mobile number our driver can ring at the door. They are kept with that outlet so you do not type them again, and you can change them at any time. See app permissions for how the location is read.
- A voice note, if you record one
- Optional, at checkout: up to a minute of directions or instructions for the driver. It is stored privately with that order and played only by our team and our delivery staff, through a link that stops working after five minutes. A new note replaces the old one, and all of them are deleted with your account.
- Your wallet
- If you add money to the wallet in the app: the balance, and each movement — money added (with the payment gateway's reference), paid towards an order, or put back when an order is cancelled or reduced. See Payments.
- What you ask us
- Messages you send through Need help in the app, with the order and items they are about, and our replies — read by our owner and depot staff, never by delivery staff. Drinks you ask us to stock, with your shop name and number. Sizes you ask us to tell you about when they are back in stock. And, after a delivery, whether you said it went well.
- Your photo, if you add one
- Entirely optional — your face or your shop front, added on Your details so our depot staff recognise you. It is saved at a long, random web address that is not listed or linked anywhere, and only our apps show it. You can change or remove it at any time from the app; removing it, or deleting your account, deletes the file (a copy cached on the way to the app can take up to a day to expire).
- Your GST certificate, if you send one
- Entirely optional — many shops are under the registration threshold and have none, and nothing is blocked without it. If you do upload it, the file is stored privately, never published, and never readable from a public link. Our depot staff can open it only through a link that expires within minutes, and every time one of them does, it is recorded. You can take it off file at any time from the app or by asking us.
- Your orders
- What you ordered, the quantities, the rate you were actually charged at the time, the delivery address used, how it was paid, how many empty crates came back, and any note you added.
Information we generate
- Distance from our depot
- The straight-line distance from our depot to the point you placed, which decides whether we deliver to you. It is frozen onto the address when you save it, so that changing our delivery area later cannot change an address your past orders used.
- Account summary
- How many orders you have placed, their total value, and the date of your last one. We use this to sort our own customer list.
- When you last used the app
- The time you last signed in, and the last time the app was opened while you were signed in. Our staff see it on your shop's page, so they know which accounts are in use. Each new time replaces the last one — it is not kept as a history. The same is recorded for our own staff and delivery team.
- Refunds
- When money you paid online is owed back to you, the amount, the date the refund was sent and the payment gateway's reference for it, so that either of us can trace it later.
- Our notes about your account
- Our staff can record operational notes against a shop — delivery instructions, preferred call times, credit arrangements. These are internal, but you are entitled to ask for a copy of them at any time.
- Account status
- Whether your account is active or has been blocked by us — see our terms. A blocked account is signed out of the app and cannot be signed in to until we unblock it.
- Requests from outside our delivery area
- If you try to save an address outside our delivery area, we record the location, the distance and your shop name and number. We use this to decide where to add a route. If you would rather we did not keep it, ask us and we will remove it.
- Your notification setting and choices
- Whether your phone lets our notifications through — on, off, or switched off in your phone's settings — and which kinds you have chosen in the app (each order step, offers, payments). Our staff can see the first, so that when you are not getting order updates, the confirmation call is a chance to tell you how to turn them back on.
- Notification records
- A record of each alert we sent you and whether it went out, so that "I was never told" can actually be checked.
Information collected automatically
- A sign-in token
- Stored on your own phone so you do not have to sign in every time. Signing out or removing the app removes it.
- A notification token
- If you allow notifications, the operating system issues an anonymous token for your device and we store it so we can send order updates to that phone. If you refuse notifications, no token exists and nothing is stored.
- How the apps are used
- Which screens are opened, which products are viewed and added to an order, and whether an order went through. See how we measure app use for exactly what is sent and what is not.
- How you found the app
- When you first sign in on a new install, the shop app tells us where the install came from, as Google Play reports it — a Play Store search, our website, our printed QR code, or a link in one of our posts or ads — and how the app was installed. It is kept with your account and used only to see which of our efforts bring shops to us. It is not shared, and it holds no advertising ID.
- Crash reports
- If an app crashes, Google's Firebase Crashlytics receives a report of the crash: where in the app it happened, the app version, the Android version and phone model, and an anonymous installation ID. No order, contact or payment details are in it. We use these only to fix crashes.
- Problem reports from the apps
- When something goes wrong inside an app — a screen that fails to load, a location that cannot be read — the app sends us a short report: what failed, the error message, the app version, the Android version and phone model, and your account ID. We use these only to find and fix faults.
- Server logs
- Our servers record the usual technical detail for each request — IP address, time, which screen was asked for, and whether it succeeded. These exist to keep the service running and to investigate abuse.
Your cart is kept with your account. What you add is saved on our server as you go, so the same cart is on every phone you sign in on, and changes made with no signal are sent when it returns. The app-use measurement in section 3 notes steps such as "added to order" — which product, and how many — so that we can see where an order gets stuck; never a rate, a price or an order value.
3. How we measure app use
We use Google Firebase Analytics in both apps to understand how they are used, so we can see which products shops look for and where an order gets stuck. Each event is a short record like "opened the catalogue", "viewed Mountain Dew", "added to order" or "order placed".
Each event is linked to:
- a random account ID — not your phone number;
- whether the account is a shop, depot owner, depot staff or a driver; and
- for a shop, the business name of its store — the name on your signboard — so that we can see which products a particular shop has looked at. Never your own name: an account with no store name sends none.
It is never sent your phone number, the owner's name, your address, your GST details, or any rate, price or order value. Firebase keeps this event data for no longer than 14 months. Google's Firebase library can read Android's advertising identifier; we do not use it for advertising, and you can reset or delete it at any time in your phone's settings under Google → Ads.
4. Why we collect it
| What | What it is for | Our basis |
|---|---|---|
| Mobile number | Signing you in, and calling to confirm your order | Performing our contract with you |
| Shop name and address | Delivering to the right shutter; your bill | Performing our contract with you |
| Email address (optional) | Kept on your profile; not used to contact you yet | Your consent — you choose to add it, and can remove it |
| Your location | Checking we deliver to you; placing your shop on the map | Your consent, given when you allow location |
| Address search | Suggesting places as you type, so you can find your shop | Your request, when you type in the search box |
| Searches in the rate card | Showing the searches shops make most, and learning what shops look for that we do not stock. We keep the words and how often each was searched — never who searched. Anything that looks like a phone number or an email address is not kept. Kept for 90 days. Your own recent searches stay on your phone. | Our legitimate business interest |
| Order records | Fulfilment, accounts, GST and statutory record-keeping | Legal obligation and our legitimate business interest |
| Notification token and setting | Telling you when your order is confirmed and on the way | Your consent, given at the notification prompt |
| Your photo | Helping the depot recognise you | Your consent |
| GSTIN and certificate | Putting your GST number on your bill, if you gave it | Your consent |
| App usage (Firebase) | Improving the apps and the range we carry | Our legitimate interest in a service that works for shops |
| Problem reports and server logs | Finding faults; keeping the service up; security | Our legitimate interest in a working, secure service |
| Payment at the door, and its photo | Knowing what was paid, and why an amount was less | Performing our contract with you; our books of account |
| Delivery staff location | Assigning orders to the nearest vehicle; knowing where deliveries are | Our employment relationship with our staff |
5. App permissions
Before either app asks Android for a permission, it tells you in one sentence what the permission is for. Android's own prompt appears only if you say yes. If you say no, the app does not keep asking — at most it reminds you now and then, and you can close the reminder.
Location — the shop app
- Used for two things: placing your shop on the map when you save an address, and checking whether we deliver to where you are.
- If you have already allowed location, the app reads your position when you open it, to check whether we deliver to you. That position is sent to our server to measure the distance and is not stored — unless you save it as your address, or save an address outside our area (see requests from outside our delivery area).
- The shop app never reads your location in the background. We do not build a movement history of any shop.
- We ask for precise location, because an approximate one can put your pin on the wrong street.
- You can refuse. You can then place your shop on the map by searching, or give us your address on the phone.
The map and address search
The map in both apps is Google Maps, so loading it contacts Google. When you type into the address search box, what you type is sent to our server and passed on to Google, which suggests matching places; choosing one asks Google for that place's coordinates. When you place the pin, its coordinates go to Google the same way so it can tell us the street address to show you. Google receives the search text or the point — never your name, number or account.
Notifications
Used for order updates — confirmed, on the way, delivered, changed or cancelled — payments and refunds, answers to your Need help messages, a size you asked about being back in stock, and, only if you leave Offers switched on, offers from the depot. For our staff, new orders. You choose which kinds you get under Account, then Notifications. Refusing costs you nothing but those updates. We record whether notifications are on (see your notification setting), and if they are off the shop app may remind you, no more than once every few days, with a button to your phone's settings. You can change it in your phone's settings at any time.
Files, photos and the camera — the shop app
To send a GST certificate you choose one of three ways: a PDF, through Android's own file picker; a photo you already have, through Android's photo picker; or a new photo, with the camera. The pickers give the app only the one file you choose, and the shop app has no photo-library permission. It asks for the camera only when you tap Take a photo, and uses it for nothing else. Your own photo, if you add one, is chosen the same way: the photo picker or the camera, only when you tap them.
The microphone — the shop app
Used only to record a voice note for the driver at checkout, and only while you hold the record button — Android asks your permission the first time. Nothing is recorded at any other moment, and the note goes nowhere until you send your order. The depot app has no microphone permission: it can only play a note back.
Your number at sign-in — the shop app
On the sign-in screen Google may offer the number of the SIM in your phone, so you can pick it instead of typing. That is Google's own sheet: the app sees the number only if you tap it, and uses it only to send your sign-in code.
The sign-in text — both apps
On Android, either app can fill in your sign-in code for you. When the text with the code arrives, Android asks you first whether the app may read that one message. If you tap Allow, only that message is handed to the app, which takes the six digits from it and keeps nothing else; if you tap Deny, you type the code yourself. The apps have no SMS permission and cannot read any other message.
Camera and contacts — the depot app
Our depot app, used only by our own staff, uses the camera to photograph products for the catalogue and, if they choose, a payment made at your door (see Payments). When the owner adds a member of our team, they can pick that person from the phone's contacts instead of typing: the app reads the contacts on that phone to show the list, and saves only the one name and number chosen. Nothing else from the contacts leaves the phone.
Installing updates
The shop app is installed from Google Play and updated by Google Play. Copies of the shop app installed directly from us before it was on Google Play, and our depot app, come directly from us, so they check our server for a newer version and ask permission to install it. This permission is used for nothing else. Some updates are required before the app can be used again, so that every phone sees current rates.
6. Our delivery staff
The depot app records the position of our delivery staff about once a minute while they are signed in, including when the phone is locked, so that orders can be assigned to the nearest vehicle and the depot can see where deliveries are. A driver who stays in one place is recorded as one stop rather than a new position every minute. Android shows a permanent notification the whole time it runs, and the driver is told before the app first asks for location. Signing out stops it. Positions are kept for 30 days and then deleted automatically. This applies only to our own employees — never to a shop or a customer.
7. What we never do
- We do not sell your data. Not to anyone, for any price.
- We do not share it for advertising or allow anyone to use it to target ads at you. There is no advertising in our apps.
- We never track a shop's location in the background. See location.
- We do not read your contact list. The shop app never reads, copies or uploads your address book, and does not ask for permission to. (Our own depot app can, on our staff's phones only — see Camera and contacts.)
- We do not read your messages, call logs or files — only the one file you choose to send.
- We never store card, UPI PIN or bank credentials. See payments.
- We do not send marketing notifications through the app.
8. Who else sees it
We share what is necessary with the following, and with nobody else. None of them is permitted to use your information for their own purposes.
| Who | What they handle |
|---|---|
| MongoDB Atlas | Hosts the database holding accounts, addresses and orders. |
| DigitalOcean | Runs our servers, in Bengaluru, India. Also stores files — catalogue photographs, the app downloads, your photo if you add one, and GST certificates you upload (kept private) — in its San Francisco, USA storage region. |
| Google — Firebase Analytics | Counts how the apps are used, as described in how we measure app use. |
| Google — Firebase Crashlytics | Receives a report when an app crashes, as described under crash reports. |
| Expo & Google Firebase Cloud Messaging | Deliver notifications to your phone. They receive the device token and the text of the alert — which for an order update includes your order number and total. |
| Google Maps Platform | Draws the map in both apps, suggests places when you search for your address, and names the street under the pin. It receives what you type in the search box and the pin's coordinates, never who you are. |
| Cashfree Payments | Processes online payments. It receives the order reference and amount, your account ID, your phone number and your shop name. See payments. |
| Fast2SMS | Delivers your one-time sign-in code as an SMS, through Indian mobile networks under TRAI's registration rules. It receives your mobile number, the code and the first word of the name on your account (for "Hi …"), and tells us whether the message was sent. It is based in India. |
| WhatsApp (Meta) | Delivers your one-time sign-in code as a WhatsApp message when the SMS cannot be sent. It receives your mobile number and the code, and tells us whether the message was delivered and read. If you write to our sign-in number, your message reaches WhatsApp too; we keep only that you wrote, not what you wrote. |
| Our delivery staff | See the shop name, address, phone number and order contents for the deliveries they are making, the delivery details you gave at checkout — the name to ask for and the other number to ring — and can play your voice note for that order. |
We may also disclose information where a law, court order or lawful government request requires it, or to establish or defend a legal claim. If our business is transferred, your information may pass to the buyer under this same policy.
9. Payments
You can pay at the door — in cash, by UPI, or part of each — or online in the app. For a payment at the door we record how much was paid each way, any discount agreed there and the driver's reason for it, and, if the driver takes one, a photo of the payment (the UPI success screen, say). That photo is kept privately with your order; only our team can open it, through a link that stops working after five minutes.
Online payment is handled by Cashfree Payments India Private Limited, a PCI-DSS compliant payment gateway. Your card number, CVV, UPI PIN and net-banking credentials are entered on Cashfree's own secure screen and are never sent to us or stored on our servers. We receive only the result — paid or failed — plus a reference number and the amount, which is what we need to release your order and answer questions about it later. Cashfree's own privacy policy applies to what you enter on its screen.
The wallet. Money added to the wallet is paid through Cashfree in the same way, and can be spent only on orders with us. Paying from the wallet, we record how much went to which order; if that order is cancelled or reduced, the wallet part goes straight back into the wallet. An account cannot be deleted while its wallet holds money — we settle it with you first.
10. Where it is stored
Our servers are in India, in Bengaluru. Files — catalogue photographs, app downloads and GST certificates — are stored with DigitalOcean in the United States. Our database is hosted by MongoDB Atlas, and Google (analytics, maps, notifications), Expo, Cashfree and WhatsApp (Meta) may process data on servers outside India. Where information leaves the country, it is only what those services need to do their job, and it stays subject to this policy.
11. How long we keep it
| What | Kept for |
|---|---|
| One-time sign-in codes | Stored only as a hash, never in plain text, and deleted the moment the code is used — or after five minutes if it is not. The times codes were asked for on a number (not the codes) are kept for one hour so we can limit how many one number can request, then deleted automatically. |
| WhatsApp message records | 180 days, then deleted automatically. For each sign-in message: the number it went to, when, and whether WhatsApp delivered it — never the code. For a message sent to our sign-in number: who sent it, when, and what kind of message it was — not what it said. |
| Notification records | 60 days, then deleted automatically. |
| Problem reports from the apps | 30 days, then deleted automatically. |
| Delivery staff positions | 30 days, then deleted automatically. |
| App usage (Firebase Analytics) | No longer than 14 months, then deleted by Google. |
| Account, shop, address, notification setting and last use | While your account is open, and until you ask us to delete it. |
| Voice notes | Until replaced by a newer one on the same order, or until your account is deleted. Deleted from storage, not just unlinked. |
| Need help messages, product requests and back-in-stock requests | While your account is open; deleted with it. A back-in-stock request is deleted as soon as we have told you. |
| Wallet records | Kept with your orders as part of our books of account, for the same eight years — see orders and invoices below. |
| Crash reports (Firebase Crashlytics) | 90 days, then deleted by Google. |
| Your photo | Until you remove it or delete your account. Deleted from storage, not just unlinked. |
| GST certificate | While your account is open, or until you remove it — whichever is sooner. Deleted from storage, not just unlinked. |
| Requests from outside our delivery area | Until you ask us to remove them, or your account is deleted. |
| Orders and invoices | Up to eight years, because company and tax law require us to keep books of account and GST records. These survive account deletion — see what we must keep. |
| Server logs | Routinely rotated and overwritten; not retained long-term. |
12. Security
We take the following concrete measures, and we would rather describe them than claim "bank-grade security":
- All traffic between the apps, this website and our servers is encrypted with HTTPS.
- There are no passwords in our system to be stolen. Sign-in is a one-time code, sent only to your number by SMS (or WhatsApp), which we store only as a hash; it expires in five minutes and is locked out after five wrong attempts.
- Sign-in attempts are rate limited per mobile number, so nobody can work through codes for your account.
- When an account is deleted, blocked, or has its depot access withdrawn, the app on that phone is signed out automatically and everything it stored is cleared.
- Access to the depot app is an allowlist. Only numbers the owner has added can reach any depot screen, and access can be withdrawn immediately.
- Rate and stock changes are recorded with who made them and what the values were before and after.
- Our staff see only what their role requires. Delivery staff see the orders assigned to them and nothing else — not rates, not stock, not other shops, and not any document you have sent us.
- Documents you upload, such as a GST certificate, are stored privately rather than on a public address. They are never reachable by a link alone, and each time a member of our staff opens one it is written to an audit record.
- The apps do not allow their data to be backed up to your Google account, so uninstalling genuinely removes what they stored on the phone.
No system is perfectly secure. If we discover a breach affecting your information, we will inform you and the relevant authority as the law requires.
13. Your rights
Under India's Digital Personal Data Protection Act, 2023 and other applicable law, you can ask us to:
- Show you what we hold about you, and who we have shared it with.
- Correct anything wrong, incomplete or out of date.
- Delete your account and personal data — see the data deletion page for how, and what we must keep by law.
- Withdraw consent you previously gave, such as for location or notifications — in your phone's settings, or by asking us.
- Nominate someone to exercise these rights if you are unable to.
- Complain — to us first, and then to the Data Protection Board of India.
Ask by calling +91 76108 11113 or writing to neemkaroli.sales@gmail.com. We respond within 30 days. We may need to confirm you are the account holder before acting, which normally means a call to your registered number.
14. Children
This is a wholesale service for businesses. It is not intended for anyone under 18 and we do not knowingly collect information about children. If you believe a child has given us information, tell us and we will delete it.
15. This website
This website sets no cookies, uses no analytics service, and contains no advertising or tracking pixels. Nothing you do here is profiled.
The typefaces are served from this site's own server rather than from a font service, and the delivery figures on our pages are read live from our own server, so browsing here contacts nobody but us. The one exception is the payment page you reach from the app to pay online, which loads Cashfree's secure checkout. Our web server keeps ordinary access logs as described above.
16. Changes to this policy
If we change this policy we will update the date at the top and, where the change is significant, tell you in the app or by phone. Continuing to use the service after a change means you accept the updated policy.
17. Grievance officer
As required by Indian law, the following person is responsible for privacy questions and complaints:
| Name | Daulat Singh, Director |
|---|---|
| Company | Neem Karoli Sales Corporation Private Limited |
| Address | Plot No. 219, Parshvnath Enclave Vistar, Vatika, Bagru, Sanganer, Jaipur, Rajasthan 303905, India |
| Phone | +91 76108 11113 |
| neemkaroli.sales@gmail.com | |
| Hours | Every day · 9 AM – 9 PM (IST) |