Privacy Policy

1. Introduction

KisanYantra ("KisanYantra", "we", "our", "us") operates a mobile application and supporting services that help farmers, equipment owners and operators discover, book, list and complete short-term agricultural-equipment rentals in India. This Privacy Policy describes what personal data we collect, why we collect it, how we use and share it, how long we retain it, and the choices and rights available to you.

By installing or using the KisanYantra app you agree to this Privacy Policy. If you do not agree, please do not use the app. This policy is published in compliance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000, and the SPDI Rules thereunder.

2. Information we collect

We collect only the data we need to operate KisanYantra. Categories include:

2.1 Account information

• Mobile number (used as your primary identifier)
• Name, profile photo (optional), preferred language
• Role on the platform (farmer / owner / operator)
• Village, taluka, district, state

2.2 KYC information (only when listing equipment, registering as an operator, or making bookings above a threshold)

• Government-issued ID number and image (Aadhaar / PAN / driving licence — collected and stored as required for KYC)
• Bank account or UPI VPA so payouts and refunds can be initiated by the parties to a booking (KisanYantra does not collect or hold money — payments are settled directly between the renter and the owner via cash or UPI)
• Business registration details, where applicable

2.3 Equipment and listing data

• Equipment photos, brand, model, HP rating, inclusions
• Pricing, availability calendar, location pin

2.4 Booking and transaction data

• Bookings made, accepted, declined, cancelled
• Status of payment (settled outside the app between renter and owner — cash or UPI)
• Dispute history, ratings exchanged

2.5 Location data

• Approximate location at sign-in (used to surface nearby equipment)
• Precise location only during a live booking, with your consent (for operator-on-the-way tracking)

2.6 Communications

• Messages exchanged between farmers, owners and operators inside the app
• Support tickets, feedback, ratings and reviews you submit

2.7 Device and technical data

• Device model, OS version, app version, language settings
• Crash reports and diagnostics (via Firebase Crashlytics, where opted in)
• Push-notification token (Firebase Cloud Messaging) so we can deliver booking updates

We do not collect: contact list, photos outside what you explicitly upload, microphone, calendar, or social-media graphs.

3. How we use information

1. Run the platform — match nearby farmers and owners, accept and confirm bookings, route the operator to the renter's field.
2. Verify identities — protect both sides through KYC, prevent fraud and impersonation.
3. Communicate with you — send transactional notifications (booking accepted, owner on the way, operator en route) in your preferred language.
4. Improve the product — analyse aggregate usage patterns, fix bugs, prioritise localisation.
5. Comply with law — respond to lawful requests from law enforcement or regulators.

We do not sell your personal data, and we do not use it for advertising profiling.

4. How we share information

Personal data is shared only with the parties below, and only to the extent necessary:

• Other users on the platform: name, photo, ratings and (for active bookings) approximate location are visible to the renter, owner and operator involved in a booking.
• KYC partners: identity documents submitted for verification are shared with our KYC vendor under a data-processing agreement.
• Cloud and infrastructure providers: data is stored on commercial cloud services located in India where reasonably available; sub-processors are bound by contractual confidentiality.
• Crash and analytics services: anonymised diagnostics may be sent to Firebase to improve stability.
• Authorities: when compelled by valid legal process under Indian law.
• Successors: in the event of a corporate restructuring, merger or acquisition, your data may transfer to the successor entity, which will continue to be bound by this policy.

KisanYantra does not handle money. Payments are settled directly between the renter and the owner via cash or UPI; we do not pass financial credentials to a payment processor.

5. Data retention

• Account information — for as long as your account is active, plus 12 months after deletion.
• KYC documents — as required by Indian KYC regulations (typically 5 years after the end of the business relationship).
• Booking records — minimum 7 years, in line with tax and accounting law.
• Communications — 24 months unless the booking is in dispute.
• Crash diagnostics — 90 days.

You may request deletion at any time (see Section 6). We will honour the request except where retention is mandated by law.

6. Your rights

Subject to applicable law (including the DPDP Act, 2023), you have the right to:

• Access the personal data we hold about you and a summary of how it is processed.
• Correct inaccurate or incomplete data.
• Erase data that is no longer needed for the purpose it was collected, subject to retention obligations.
• Withdraw consent for processing where consent is the legal basis. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
• Nominate a person to exercise these rights on your behalf in the event of death or incapacity.
• File a grievance with our Grievance Officer (Section 11) and, if unresolved, with the Data Protection Board of India.

To exercise any right, email privacy@kisanyantra.in from the mobile number registered on your account, or use the in-app "Privacy & data" controls.

7. Security

• TLS 1.2+ for all network traffic between the app and our servers.
• Secure storage of authentication tokens on-device using OS keystores.
• Encryption at rest for KYC documents.
• Role-based access control for our internal systems; least-privilege principle.
• Periodic vulnerability assessments and dependency reviews.

If we become aware of a breach affecting your data, we will notify you and the Data Protection Board of India in accordance with the DPDP Act.

8. Cookies and analytics

The KisanYantra mobile application does not use cookies. We use Firebase Analytics and Firebase Crashlytics (Google) to collect aggregate, mostly de-identified diagnostic data. You can disable diagnostics from your device's app settings or from the in-app Privacy controls.

This marketing website (kisanyantra.in and subdomains) uses minimal first-party logs (HTTP request logs) and does not embed third-party trackers. Web fonts are loaded from Google Fonts; Google's logging may apply to those requests.

9. Children's privacy

KisanYantra is not directed at, and we do not knowingly collect data from, individuals under 18. The app's KYC requirements effectively prevent minors from completing registration. If you believe a minor has registered, please contact us and we will delete the account.

10. Changes to this policy

We may update this policy as the product, our legal obligations, or our partners change. The latest version will always be available at this URL with the "Last updated" date at the top. Material changes will be notified in-app at least 7 days before they take effect.

11. Grievance officer

In compliance with the Information Technology Act, 2000 and the DPDP Act, 2023, you may contact our Grievance Officer for any data-protection complaints:

• Name: [To be appointed before public launch]
• Email: grievance@kisanyantra.in
• Hours: Monday – Friday, 10:00 – 18:00 IST
• Response SLA: Acknowledgement within 48 hours; resolution within 30 days.

12. Contact us

• Email: hello@kisanyantra.in
• Postal: [Registered office address — to be updated before public launch], India

By using KisanYantra you confirm you have read and understood this Privacy Policy.