Privacy Policy
What we collect, why, who else touches it, and how to get it deleted. Written to be read, not skipped.
Sankalp Of Solution (SOS) ("Sankalp", "we", "us") provides business software for manufacturers: Sankalp ERP and Sankalp WhatsApp, together with the separate Calling CRM at crm.jajpuragroup.com (the "Service"). This policy applies to the businesses that use the Service ("Clients", "you") and, where relevant, to people whose details a Client stores in it, such as that Client's customers, suppliers and contacts.
For the data a Client puts into the Service about its own customers and suppliers, the Client decides why and how it is used, and we process it on the Client's behalf.
1. Information we collect
Account and business details
Your name, work email, phone number, company name, password (stored only as a salted hash) and business details you choose to add, such as GSTIN, address, bank details for invoices, logo, seal and signature.
Business records you store
Products, raw materials, purchase and sales orders, invoices, customers and suppliers, production batches, quality tests, packing and dispatch records, accounting entries and the photos or files you upload. This data belongs to you. We use it only to run the Service for you.
WhatsApp data
If you connect a WhatsApp Business number through Meta's WhatsApp Business Platform, we process the contacts, message content and delivery status needed to show your team's inbox and to send the messages you or your team ask for. We do not message your contacts ourselves, do not use this data for advertising and do not sell it.
Technical information
IP address, browser type, device type, pages or API calls made, and timestamps, kept to secure the Service, prevent abuse and fix faults.
AI Copilot
If your company switches on the AI Copilot and you use it, the question you type, your company name and a short summary of operating figures (for example items below reorder level and counts of open orders) are sent to an AI provider to produce the answer. The Copilot is optional, off unless enabled, and we do not send your full records to it.
2. How we use information
- To provide, secure and support the Service you subscribed to.
- To send transactional messages, such as account and verification emails, password resets and in-app alerts.
- To process subscription payments through Razorpay.
- To investigate misuse and to keep backups.
- To improve the Service and fix bugs.
- To meet legal obligations.
We do not sell personal information, and we do not show advertising inside the Service.
3. Who else processes data
We use a small number of providers, each under its own terms and privacy policy:
- Hosting and databases: our hosting provider (Hostinger) and database services (including MongoDB Atlas) store the Service and its backups.
- Razorpay: processes subscription payments. Card and bank details are entered on Razorpay's checkout and never reach our servers.
- Meta / WhatsApp Business Platform: carries WhatsApp messages if you connect a number.
- Google: Google Sign-In if you choose to use it. If you use the Calling CRM's recording feature, recordings are stored with Google Cloud.
- AI providers (Google Gemini, Groq): answer AI Copilot questions, only if the Copilot is enabled.
- Email delivery services: send verification and password-reset emails.
We share information with providers only as needed to run the Service, with your own team members according to the roles you set, when the law requires it, or with your consent.
4. Cookies and local storage
The public pages of this website set no cookies and use no advertising or analytics trackers. The signed-in app keeps your login token and a few preferences in your browser's local storage so you stay logged in. Pages that load Google Sign-In or Razorpay Checkout load scripts from those providers.
5. Security
Each company's data is kept separate. Connections use HTTPS. Passwords are stored as salted hashes. Roles are enforced on the server. Repeated wrong logins are slowed down. Important actions are written to an audit trail. Sessions end when you log out, after a long idle period, or when you are removed or your password is reset. We keep automatic daily backups for 30 days. No system is perfectly secure, and if we find a breach that affects your data we will tell the administrator of the account.
6. Retention and deletion
We keep your data while your account is active. After you close it, write to us from your registered email and we will delete or anonymise your account and business data within 30 days of a verified request, except records we must keep for legal or accounting reasons. Backups roll off automatically within 30 days after that. For WhatsApp or Facebook Login data, use the subject "WhatsApp Data Deletion Request" with your company name.
7. Your choices and rights
You can ask to see, correct, export or delete your information. Administrators can do much of this directly: download a complete backup from Settings, edit records, and remove team members. For anything else, write to the contact address below. You may also have rights under applicable Indian data-protection law, and we will honour requests within the time the law requires.
8. Children
The Service is for businesses and is not directed to anyone under 18.
9. Changes
If we change this policy we will update the date at the top and, for material changes, tell account administrators by email or in the app.
10. Contact and grievances
Questions, requests or complaints about privacy: write to the email address in the footer of this page, or use the contact page. We aim to respond within a few working days.