Privacy Policy

KisaNetra ("we", "us", "our"), accessible at kisanetra.in, is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, how long we retain it, and the rights you have over your data.

This policy is prepared with reference to India's Digital Personal Data Protection (DPDP) Act 2023 and applicable rules thereunder. By using KisaNetra, you consent to the collection and processing of your personal data as described in this policy.

We collect the following categories of data when you use KisaNetra:

We use the data we collect solely for the following purposes:

• Service Delivery: Providing AI crop recommendations, cost optimization insights, commodity price data, and disease diagnoses.
• Marketplace Matching: Connecting farmers with nearby agricultural workers in the Farm Labour Marketplace based on proximity.
• Marketplace Facilitation & Payouts: Verifying seller statutory eligibility, publishing catalog listings, routing buyer orders, processing settlement payouts, and fulfilling applicable statutory tax obligations (such as TDS or GST TCS, where applicable).
• Account Management: Authenticating users via OTP, managing profiles, and verifying Educator and Seller credentials.
• Platform Improvement: Analyzing aggregated, anonymized usage data to train and refine our AI models, improve advisory accuracy, and optimize user experience.
• Safety & Compliance: Detecting fraud, preventing misuse of the Farm Labour and Seller Marketplaces, enforcing our Terms, and complying with legal obligations under Indian law.

We do not sell your personal data to third parties. We do not use your personal data for third-party advertising or profiling.

We share data only with the following service providers who assist us in operating the platform, under strict data protection and confidentiality agreements:

• Google Cloud / Firebase: Authentication, cloud database (Firestore), image storage, and analytics. Servers located in Google Cloud regions in India where available.
• Google Gemini API: AI image processing for crop disease detection and natural language processing for the AI chat assistant. Images and queries are transmitted securely via encrypted API calls.
• Agmarknet (Government of India): Sourcing commodity mandi prices. No user personal data is shared with Agmarknet.

Mandatory Seller Information Disclosure (E-Commerce Rules, 2020): Under Rule 6(5) of the Consumer Protection (E-Commerce) Rules, 2020, marketplace platforms must disclose certain seller information to prospective buyers. We publicly display the seller's legal entity name, trade name, physical business address, and customer care contact details on product listings and order invoices. Sensitive financial information (Aadhaar numbers, bank account numbers, internal wholesale margins) is strictly confidential and never disclosed to buyers.

We may disclose personal data to law enforcement or regulatory authorities only if required by a valid court order, warrant, or statutory obligation under Indian law.

We retain personal data only for as long as necessary to fulfill the purposes described in this policy:

• Account Data: Retained for the lifetime of your account. Deleted within 30 days of receiving a verified account deletion request.
• Location Data: Processed in real time for proximity matching and weather fetching. Not permanently stored with personally identifiable history unless saved as a preferred farm location in your profile.
• Crop Images: Stored securely in Cloud Storage. Retained for model improvement in anonymized form unless you request image deletion.
• Seller Transaction & License Records: Tax invoices, order records, and license verification records are retained for the period required under applicable tax and commercial laws.
• Educator Credentials: Retained for the duration of the Educator's active status and for 1 year following account closure for audit and record-keeping purposes.

We implement technical and organizational security measures to protect your personal data, including:

• Encryption: All data in transit is encrypted using TLS 1.3 / HTTPS. Sensitive data at rest is encrypted using Google Cloud's AES-256 encryption.
• Access Controls: Role-based access control (RBAC) ensures only authorized KisaNetra administrative personnel can access user records, restricted to operational need.
• Authentication Security: Firebase OTP-based authentication eliminates the risk of compromised passwords.
• Security Audits: Periodic review of access logs, API endpoints, and database security rules.

While we take all reasonable precautions, no internet-based service is 100% secure. If you suspect any unauthorized access to your account, notify us immediately at the contact details below.

Under the Digital Personal Data Protection Act 2023, you have the following rights regarding your personal data:

• Right to Access: You may request a summary of the personal data we hold about you and the processing activities undertaken.
• Right to Correction: You may request correction or updating of inaccurate or incomplete personal data.
• Right to Erasure (Right to be Forgotten): You may request deletion of your personal data and account. We will process deletion requests within 30 days, subject to any legal retention obligations.
• Right to Withdraw Consent: You may withdraw consent for processing at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
• Right to Grievance Redressal: You have the right to lodge a grievance with us through the contact details in Section 10 below. We will acknowledge within 48 hours and resolve within 30 days.
• Right to Nominate: Under the DPDP Act 2023, you may nominate another individual to exercise your data rights on your behalf in the event of your death or incapacity. Nomination requests may be submitted to our Grievance Officer.

To exercise any of these rights, contact our Grievance Officer at the details in Section 10. We may require identity verification before processing certain requests.

KisaNetra is not intended for use by individuals under 18 years of age without the consent and supervision of a parent or legal guardian. We do not knowingly collect personal data from children under 18.

If we become aware that a user under 18 has registered without guardian consent, we will promptly delete the account and associated data. If you believe a minor has registered on our platform without appropriate consent, please contact us at the email address below.

We may update this Privacy Policy from time to time to reflect changes in our data practices, new platform features, or changes in applicable law (including the DPDP Act 2023 and any rules notified thereunder).

When we make material changes, we will notify registered users via in-app notification and/or SMS at least 7 days before the changes take effect. Continued use of the platform after the effective date constitutes acceptance of the updated policy.

In accordance with the Digital Personal Data Protection Act 2023 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021, we have designated a Grievance Officer for data protection matters:

Note: As KisaNetra is currently in its pilot phase, the Grievance Officer below is a founder/operator of the platform, acting in this capacity until formal registration and role assignment is complete.

If you are not satisfied with our response, you may lodge a complaint with the Data Protection Board of India once it is operationalised under the DPDP Act 2023.