Legal Document

Privacy Policy

Last Updated: April 18, 2025 | Effective Date: April 18, 2025

Summary: Milk Manager 24, operated by Kansaraix, takes your privacy seriously. This policy explains what data we collect, why we collect it, how it is stored, and your rights regarding your personal information. By using our platform or the Earn Partner Program, you agree to this policy.

1. Who We Are

Milk Manager 24 is a cloud-based software-as-a-service (SaaS) platform owned and operated by Kansaraix ("Company", "we", "our", or "us"). Our primary service is a digital dairy management system designed for milk shopkeepers, their suppliers, and field-level business partners (also referred to as "Subadmins" or "Earn Partners").

Our registered operations are based in India. For any privacy-related queries, contact us at: support@milkmanager24.com

2. Scope of This Policy

This Privacy Policy applies to all products, services, and programs offered by Milk Manager 24, including but not limited to:

Shopkeeper Platform: The web-based application used by dairy shopkeepers to manage customers, record daily milk entries, generate invoices, send PDF reports, and track payments.
Supplier Management Module: A module allowing suppliers to manage their delivery relationships with shopkeepers.
Earn Partner Program: A commission-based referral and management program where individuals ("Partners" / "Subadmins") onboard shopkeepers onto the platform and earn a commission linked to those shopkeepers' activity.
Wallet & Payout System: The internal financial system used by Partners to track earned commissions and request withdrawals via Bank Transfer or UPI.
Landing Pages: All public-facing web pages including home.php, supplier_home.php, earn_partner.php, and any linked subpages.

3. Information We Collect

3.1 Information You Provide Directly

Account Registration Data: Full name, email address, mobile number, and password when you register as a shopkeeper, supplier, or partner.
Shop Information: Shop name, business category, and operational details entered during account setup.
Customer Data (added by shopkeepers): Names, mobile numbers, email addresses, daily milk quantities, and rates of their end customers. Note: Shopkeepers are fully responsible for obtaining appropriate consent from their own customers to share this data with our platform.
Financial Information: Bank account holder name, account number, IFSC code, and/or UPI ID submitted by Partners for the purpose of receiving withdrawal payouts.
Communication Data: Any correspondence, feedback, or support requests you send us.

3.2 Information Collected Automatically

Session Data: Login sessions, timestamps, and IP addresses for security and fraud prevention.
Browser & Device Information: Browser type, operating system, screen resolution, and basic device metadata collected for compatibility and performance optimization.
Usage Logs: Pages visited, features used, forms submitted, and error events — used to improve the platform experience.
Cookies: We use session cookies to maintain your logged-in state. We do not use third-party advertising cookies. You may disable cookies in your browser settings, though doing so may affect platform functionality.

3.3 Information from Third Parties

If you log in using Google Authentication (Firebase), we receive your name and email from Google as part of the authentication process. No other data is obtained from Google beyond what is needed for login.

4. How We Use Your Information

We use the information collected for the following purposes:

To create and manage your account and provide access to platform features.
To generate customer invoices and monthly PDF billing reports on behalf of shopkeepers.
To send billing-related emails to customers on behalf of shopkeepers (when instructed by the shopkeeper from within the platform).
To calculate, credit, and process commission payouts to Earn Partners through our Wallet system.
To process withdrawal requests and transfer payouts via Bank Transfer or UPI.
To send transactional notifications such as account creation confirmations, withdrawal status updates, and service alerts.
To analyze platform usage in aggregate (anonymized) form for product improvements.
To detect and prevent fraud, unauthorized access, or misuse of the platform.
To comply with applicable laws, regulations, and legal processes.
To respond to support requests and resolve disputes.

5. Data Sharing & Disclosure

We respect your privacy and do not sell, rent, or trade your personal information to any third party for marketing purposes. We may share your data only in the following limited circumstances:

With Platform Administrators: Admins of Milk Manager 24 have access to user account data, shopkeeper lists, commission records, and withdrawal requests for operational purposes.
With Earn Partners (Subadmins): A Partner can only see the shopkeepers they themselves created. They cannot view any data of shopkeepers onboarded by other partners.
With Email Service Providers: We use third-party email delivery services (such as PHPMailer with SMTP) to send invoice emails on behalf of shopkeepers. These services receive the recipient's email address and the PDF content for that specific send operation only.
With Payment Infrastructure Providers: Bank and UPI payout information is processed by the administrator manually or through banking interfaces; no payment gateway stores your financial details on our servers.
Legal Compliance: We may disclose your information if required by law, court order, or a request from a government authority in India, or to protect the rights, property, or safety of our Company, users, or the public.
Business Transfer: In the event of a merger, acquisition, or sale of company assets, your data may be transferred to the successor entity, subject to the same privacy commitments.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you services. Specifically:

Shopkeeper accounts and their customer data are retained for the duration of the active subscription and for a minimum of 180 days after account deactivation, to allow for data export or dispute resolution.
Partner wallet and transaction ledger data is retained for a minimum of 3 years for financial record-keeping purposes.
Audit logs and security event logs are retained for a minimum of 12 months.
Upon a verified deletion request, we will erase your personal data within 30 days except where retention is required by law.

7. Data Security

We implement industry-standard security measures to protect your data, including:

Password hashing using PHP's native password_hash() function (bcrypt). Passwords are never stored in plaintext.
CSRF (Cross-Site Request Forgery) token validation on all form submissions.
Session-based authentication with server-side session management.
Role-based access control ensuring shopkeepers, subadmins, and admins can only access data relevant to their role.
HTTPS encryption for all data transmitted between your browser and our servers.

While we employ robust security practices, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security and you use the platform at your own risk with respect to internet-inherent risks.

8. Your Rights

As a user of our platform, you have the following rights regarding your personal data:

Right to Access: You may request a copy of the personal data we hold about you.
Right to Correction: You may update or correct inaccurate information through your account settings or by contacting us.
Right to Deletion: You may request deletion of your account and associated personal data, subject to legal retention requirements.
Right to Data Portability: You may request an export of your customer and transaction data in a machine-readable format.
Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time, though this may affect your ability to use the service.

To exercise any of these rights, email us at support@milkmanager24.com with the subject line "Privacy Request — [Your Name]".

9. Children's Privacy

Our platform is not intended for individuals under the age of 18 years. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us immediately and we will delete it.

10. Third-Party Links

Our platform may contain links to third-party websites, such as Google Fonts or payment references. We are not responsible for the privacy practices or content of those external websites. We encourage you to review the privacy policies of any third-party websites you visit.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date. For material changes, we will notify active users via the registered email address or an in-platform notification. Your continued use of the platform after such changes constitutes your acceptance of the updated policy.

12. Grievance Officer

In accordance with the Information Technology Act, 2000, and the rules made thereunder, the contact details of the Grievance Officer are as follows:

Grievance Officer: Kansaraix (Milk Manager 24)

Email: support@milkmanager24.com

Response Time: We will acknowledge your complaint within 24 hours and resolve it within 15 working days.

13. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of India, including the Information Technology Act, 2000, and the Digital Personal Data Protection Act, 2023 (DPDPA). Any disputes arising under this policy shall be subject to the exclusive jurisdiction of the courts in India.