1. Who we are
PharmaSaathi ("we", "us", "our") provides a mobile app and admin platform that helps independent pharmacy owners in India manage inventory, billing, invoice scanning, and expiry tracking. This policy explains what data we collect from pharmacy owners ("you", "the store") and how we handle it.
2. What information we collect
Account & store information
- Phone number (used for OTP login)
- Store name, city, state, GSTIN (optional), and drug license details if you choose to submit them
- Store logo and bill footer text, if you add them
Inventory and sales data
- Medicine names, salts, categories, prices, batch numbers, expiry dates, and stock quantities you enter or scan
- Sales records, bill items, customer name/phone if you enter them at billing, and payment mode
- Purchase orders and distributor details you add
Invoice photos
- Photos of distributor invoices you scan are uploaded to our storage and processed by an AI vision service to extract medicine line items. You review and confirm every extracted item before it's saved — nothing is added to your inventory automatically.
Device and usage information
- App version, device type, sync logs, and FCM push notification token
- Basic usage events (e.g. bill created, invoice scanned) used to improve the product and calculate plan usage limits
Payment information
- Subscription payments are processed by Razorpay. We store the payment status, amount, and Razorpay transaction references — we do not store your card, UPI, or bank details ourselves.
3. How we use your information
- To operate core app features: billing, inventory, invoice OCR, expiry alerts, and sync across your devices
- To process subscription payments and send renewal reminders
- To send you service notifications (expiry alerts, low stock, license expiry) via push notification, SMS, or WhatsApp
- To provide customer support when you raise a ticket
- To improve the product based on aggregated, anonymised usage patterns
- To comply with legal or regulatory obligations, including drug license and GST-related record-keeping where applicable
We do not sell your data. We do not share your inventory or sales data with other pharmacies or distributors without your explicit action (for example, sending a purchase order via WhatsApp).
4. Third-party services we use
We work with the following service providers to run PharmaSaathi. Each only receives the data needed to perform its function:
| Provider | Purpose | Data shared |
|---|---|---|
| Anthropic (Claude Vision) | Reading invoice photos to extract medicine details | Invoice images you scan |
| Cloudflare R2 | Storing invoice images and uploaded documents | Invoice/document files |
| Razorpay | Processing subscription payments | Payment amount, store ID; card/UPI details go directly to Razorpay, not to us |
| Firebase (FCM) | Push notifications | Device push token |
| WATI | WhatsApp notifications and support replies | Phone number, message content |
| Fast2SMS | SMS alerts | Phone number, message content |
| SendGrid | Transactional email | Email address, message content |
5. Where your data is stored
Store, inventory, sales, and account data is stored in a MySQL database hosted on our servers in India. Invoice images and documents are stored via Cloudflare R2. Some third-party providers listed above may process data on servers outside India as part of their standard infrastructure.
6. Offline data on your phone
PharmaSaathi is built to work without internet at the counter. A copy of your inventory and sales data is stored locally on your device using SQLite so billing and inventory lookups work offline. This local copy syncs to our servers automatically once your device is back online.
7. How long we keep data
We keep your account and business data for as long as your account is active. If you close your account, we retain data for a limited period to comply with tax and regulatory record-keeping requirements, after which it is deleted or anonymised, except where longer retention is legally required.
8. Your rights and choices
- You can access, edit, or delete most of your store and inventory data directly within the app
- You can request a copy of your data, or request deletion of your account and associated data, by contacting us (see below)
- You can opt out of non-essential notifications from the app's settings screen
- You can withdraw consent for optional data (like GSTIN or drug license uploads) at any time; this may limit access to features that require verified compliance status
9. How we protect your data
- Passwords and OTPs are hashed, never stored in plain text
- Admin panel access requires two-factor authentication and is logged in an immutable audit trail
- All data in transit is encrypted via HTTPS/TLS
- Access to production data is restricted to authorised team members only
No system is 100% secure, but we take reasonable technical and organisational measures to protect your information.
10. Children's data
PharmaSaathi is a business tool intended for pharmacy owners and staff who are adults. We do not knowingly collect data from children.
11. Changes to this policy
We may update this policy as the product evolves. Material changes will be communicated in-app, and the "last updated" date at the top of this page will reflect the latest revision.