Depending on how you use the App, we may collect the following information.

When you register or use your account, we may collect:

• Mobile number
• Full name
• Business or legal name
• Favouring name, where applicable
• PAN
• GSTIN, where applicable
• Organisation type
• GST type
• Trader or Broker role
• Country, state, city, pincode, and business address
• Plant and business-related information
• Email address

Some information may be mandatory for registration, KYC, verification, or use of particular business functions.

For business and regulatory verification, we may process information such as:

• PAN details
• GSTIN details
• Business registration information
• KYC-related information
• Information required to verify your business identity

PAN and GST verification is performed through our backend services, which may use third-party verification providers such as Surepass and applicable government/GSP services. The App communicates with our backend for these verification services rather than directly providing your information to such external verification services.

We may collect and process:

• Promoter/contact person name
• Contact mobile number
• Contact email address
• Business contacts
• Additional business-location information
• Shipping and billing addresses

Where additional business locations are submitted to our backend, the relevant mobile number may be associated with the location. An address email address is not required to be sent to the ERP location service.

If you provide bank information for business purposes, we may collect:

• Bank account holder name
• Bank account number
• IFSC code
• Bank branch information
• Other bank-profile information you voluntarily provide

Bank-related documents, such as cheque images, may also be submitted where required by the relevant business process.

When you use Kirti Trades for business activities, we may process information relating to:

• Quotations, commodity/item details, quantity, offered rates, selling type, delivery location, payment and freight terms
• Trade and purchase-order information, purchase order number and date, plant information, delivery terms, broker information, transaction status

When using dispatch and quality-related features, we may process:

• Vehicle number, driver name, driver mobile number, transport information, dispatch date, gross, tare, and net weight
• Invoice information, Advance Shipping Notice (ASN) information, inward information
• Quality-control parameters, moisture and deduction information, inspection and acceptance/rejection information

When you use account and ledger functionality, we may process:

• Transaction dates, voucher types, debit and credit amounts, balances, narration and transaction-related information

When you request account deletion, we may process information necessary to securely verify and complete the deletion request, including:

• Mobile number, PAN, OTP verification information, account-deletion verification token, deletion reason, and optional feedback

We may collect limited technical information required to operate and secure the App, including:

• Android device identifier/device ID
• Firebase Cloud Messaging (FCM) token
• Device and application information
• Technical information associated with authentication and notifications

The device ID may be used to associate an account with an authorized device and help prevent unauthorized account access.

The FCM token is used to deliver relevant push notifications.

We do not use advertising identifiers for targeted advertising through the App.

Kirti Trades may request access to your device's location. We may process:

• GPS latitude
• GPS longitude

Location information may be used for authentication-related functionality and to provide location-related features, including weather information. The App requests location permissions only when the relevant functionality requires them.

We may use collected information to:

• Create and manage your account
• Authenticate your identity and device
• Verify PAN and GST information
• Complete KYC and business verification
• Provide quotation and trading functionality
• Manage trades and purchase orders
• Manage dispatch and ASN processes
• Support quality-control and inward processes
• Provide account and ledger information
• Manage broker-related functionality
• Maintain business records
• Send relevant service and transactional notifications
• Provide location-related functionality
• Process account-deletion requests
• Prevent unauthorized access and misuse
• Troubleshoot and maintain the App
• Provide customer and technical support
• Comply with applicable legal and business requirements

We do not use your information for targeted advertising through Kirti Trades.

Kirti Trades uses certain third-party technologies and services to provide its functionality. These may include:

• Firebase / Firebase Cloud Messaging: Firebase services are used for application infrastructure and push notifications. FCM tokens may be processed to deliver notifications to your device.
• Surepass and Verification Services: PAN/GST verification may be performed through our backend using third-party verification services such as Surepass and applicable government/GSP services.
• Google Weather API: Location information may be used by our backend to obtain weather-related information through the Google Weather API.
• Other Technical Libraries and Services: The App uses technical components and libraries for functions such as networking, device information, location services, notifications, local storage, document/image selection, and localization.

Third-party services process information according to their own applicable terms and privacy policies.

Certain information required for authentication and App functionality may be stored locally on your device, including session and registration-related information. Examples include:

• Authentication/session information
• Account information
• Registration progress
• PAN/GST verification cache
• Device/session-related information

The App uses standard device application storage mechanisms for this purpose.

We may disclose or provide access to information where necessary to operate Kirti Trades and provide requested services. This may include sharing or processing information with:

• Our backend and ERP systems
• PAN/GST verification and government/GSP service providers
• Technology and infrastructure service providers
• Notification service providers
• Weather service providers
• Other service providers required to operate requested App functionality

We do not sell your personal information for advertising purposes.

We may also disclose information where required by applicable law, legal process, or a valid governmental or regulatory request.

We take reasonable measures to protect information processed through Kirti Trades against unauthorized access, misuse, alteration, disclosure, or loss. The App communicates with our backend services using HTTPS.

However, no electronic transmission or storage system can be guaranteed to be completely secure. You are responsible for maintaining the confidentiality of your account credentials and OTPs and for using the App through a secure device.

Authentication may involve mobile-number verification and one-time passwords (OTPs). You should:

• Keep OTPs confidential
• Never share OTPs with another person
• Notify us if you suspect unauthorized access
• Keep your device secure

We will not be responsible for unauthorized access resulting from your intentional sharing of authentication information or failure to secure your device.

You can request deletion of your Kirti Trades account from within the App. The account-deletion process includes identity verification and OTP verification before the deletion request is completed.

You may also request account deletion through our external account-deletion page: Account Deletion Request

After a successful account-deletion request, your session and access to the account will be terminated.

Kirti Trades is a business-to-business application intended for business users. The App is not directed toward children. We do not knowingly collect personal information from children for purposes unrelated to the App’s business functionality.

Kirti Trades may provide access to external websites or services. We are not responsible for the privacy practices, content, security, or policies of third-party websites or services. You should review the applicable privacy policies of those services before providing information to them.

We may update this Privacy Policy from time to time to reflect changes in the App, our services, business practices, or applicable requirements. When changes are made, the updated Privacy Policy will be made available through the appropriate App or website location.

Your continued use of Kirti Trades after an updated Privacy Policy becomes available constitutes acknowledgment of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or the processing of your information, you can contact us at: