Privacy Policy

A jewellery business that uses Sarraf AI (a "shop") keeps its customers' details in the app: names, phone numbers, addresses, dates of birth, PAN and Aadhaar numbers and papers, bills, loans and schemes. The shop decides why and how those details are used. For that data the shop is the one responsible, and we only process it on the shop's behalf and on its instructions.

For the details of the people who sign in (owners and staff), and for the shop's own account, we decide how the data is used. For that data we are responsible. This policy covers both, and says which is which.

• Account details: your name, email address, phone number, role and a hashed password (we never store the password itself). Branch and shop details such as business name, address, GST number and bank details that the shop chooses to print on its bills.
• Shop records the shop enters: customers and suppliers, bills, purchases, stock and tags, Girvi loans, schemes, karigar issues, vouchers and rates. This can include customers' PAN and Aadhaar numbers, photographs and uploaded identity papers. Shops should collect these only when the law or their business needs them, and with the customer's knowledge.
• Activity records: who did what and when (an audit log), sign-in times, the device's browser type and address, which are used for security and to show a shop its own history.
• Assistant questions: the questions you type or speak to the assistant, the answer given, and whether you marked it helpful. These are kept so the shop can see its history and so we can improve the assistant.
• Messages to us: what you send through the contact page or email, and your payment records for the subscription (we do not see or store card numbers; the payment provider does).

• To run the service: sign you in, keep the shop's records, calculate and print bills, and show reports.
• To keep it secure: detect misuse, limit sign-ins, investigate problems, keep backups for recovery.
• To bill the subscription and tell you about your plan, renewals, trial ending and changes to the service.
• To answer your questions and support requests.
• To meet legal duties, such as tax records and answering lawful requests.

We do not sell personal data. We do not use a shop's customer records to advertise to anyone.

The assistant mostly answers from rules inside Sarraf AI, which run on our servers. When the shop's plan has AI credits and an outside language model is switched on, a question the rules cannot understand is sent to a language model provider (currently Anthropic, the maker of Claude) so that it can choose which Sarraf AI tool to run.

• What is sent: the text of the question, the names and descriptions of the tools you may use, and short business notes the shop has saved. If you type a customer's name or number in the question, that goes too.
• What is not sent: bills, customer lists, balances, stock records or any other data from the shop's books. The model chooses a tool; the tool runs on our servers and the answer is built there.
• Questions in Hindi, Gujarati and Hinglish are understood the same way.

If you use the microphone button, your browser's own speech service turns your voice into text. Depending on your browser this may send the audio to its maker (for example Google for Chrome). We do not receive or store the audio, only the text you then send as a question.

Assistant answers can be wrong. Check them before you act. Actions that change records wait for your approval.

We use service providers to run Sarraf AI. They process data only to provide their service to us:

• cloud hosting and database providers, and file storage for uploaded photographs and papers;
• an email provider, for password, trial and renewal messages once these are switched on;
• a payment provider (Razorpay), to collect subscription payments;
• an error-monitoring provider, which may receive technical details of a failure;
• a language model provider (Anthropic), only as described above.

Some of these providers may store or process data outside India. We choose providers that protect the data, and we ask for the same care from them that we give. We may also share data when the law or a court order requires it, or to protect people from fraud or harm.

Sarraf AI uses only what it needs to work: two sign-in cookies (an access token and a refresh token, both hidden from page scripts) and your language and appearance choices stored in your browser. The marketing website does not use advertising or tracking cookies.

We keep a shop's records for as long as its account is active. When a subscription ends, the owner can still sign in to read and download the data. After 90 days we delete the shop's data, except records we must keep by law, such as our own invoices and payment records and the security log. Backups are removed on their normal cycle afterwards. A shop can ask us to delete its data sooner.

• Connections to Sarraf AI use HTTPS.
• Passwords are stored as one-way hashes. Our own platform staff must also enter a one-time code from an authenticator app.
• Each shop sees only its own data. Inside a shop, a person sees only what their role allows.
• Sign-ins are limited and watched, and changes are recorded in an activity log.
• We keep backups so a failure does not lose the shop's records.

No system is perfectly safe. If a breach affects your personal data we will tell the affected shops without delay and report it to the Data Protection Board of India and to the people affected as the law requires.

You can ask to see the personal data we hold about you, to correct it, to have it erased, to withdraw a consent you gave, or to complain. If your data is in a shop's records (you are a customer of a jewellery shop), please ask the shop first: it decides what is kept, and we will help it act on your request.

To use any of these rights, write to our grievance officer, Name of the person who handles privacy requests, at contact@sarrafai.com. We aim to reply within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.

Sarraf AI is a business tool and is not meant for anyone under 18. If you think a child's data has been entered, tell us and we will remove it.

If we change this policy in a way that matters, we will update the date above and tell shops by email or inside the app at least 30 days before the change takes effect.