Privacy Policy

1. Introduction

SpireStock ("we," "us," or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our distribution management platform, or engage with us in connection with our services.

By using our services or providing us with your personal information, you agree to the practices described in this policy. If you do not agree with this policy, please do not use our services or provide us with your personal data.

2. Information We Collect

We may collect the following types of personal and business information:

2.1 Information You Provide Directly

• Business name, contact person, email, phone number, and address
• GSTIN, PAN, and other business registration details
• Product catalog, pricing, and scheme information
• Retailer and outlet information, including location data
• Order, delivery, and payment records
• Employee and field force details for user account provisioning
• Billing and subscription payment information
• Any other information you provide in correspondence with us

2.2 Information Collected Automatically

• IP address, browser type, and operating system
• Pages visited, time spent on pages, and navigation paths
• Device information, mobile app usage data, and GPS coordinates (for delivery tracking)
• Referring website and search terms used
• Cookies and similar tracking technologies

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the SpireStock platform
• Process and manage your subscription and billing
• Communicate with you about your account, product updates, and support enquiries
• Enable platform features such as order management, delivery tracking, and analytics
• Generate GST-compliant invoices and reports on your behalf
• Provide customer support, onboarding, and training
• Improve our platform, website, and customer experience
• Send you relevant product updates, feature announcements, and industry insights
• Comply with legal obligations and regulatory requirements under Indian law

4. Information Sharing and Disclosure

We may share your information with the following parties:

• Cloud Hosting Providers: We host our platform on secure cloud infrastructure located in India to ensure performance and data residency.
• Payment Processors: To securely process your subscription payments. We do not store full card details on our servers.
• Integration Partners: Such as WhatsApp Business, Tally, and accounting tools where you choose to enable these integrations.
• Support and Analytics Tools: Third-party tools used for customer support, error logging, and product analytics, under strict confidentiality.
• Legal and Regulatory Bodies: When required by Indian law, regulation, or legal process.

We do not sell, rent, or trade your personal or business information to third parties for marketing purposes.

5. Data Retention

We retain your data for as long as your subscription is active and for a reasonable period thereafter to comply with legal, accounting, and reporting obligations. Typically, we retain customer records for a minimum of 8 years to comply with Indian tax and GST regulations.

You may request export or deletion of your data at any time, subject to our legal and regulatory retention obligations.

6. Data Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted data transmission (TLS/SSL), encrypted storage, role-based access controls, regular backups, and routine security assessments.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Your Rights

You may have the following rights regarding your personal data under Indian data protection laws:

• Right of Access: Request a copy of the data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data, subject to legal retention requirements.
• Right to Restrict Processing: Request that we limit how we use your data.
• Right to Data Portability: Request your data in a structured, machine-readable format (Excel, CSV).
• Right to Object: Object to processing of your data for specific purposes.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on your consent.

To exercise any of these rights, please contact us at [email protected].

8. Cookies

Our website uses cookies and similar technologies to enhance your browsing experience, analyse site traffic, and understand user behaviour. You can control cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

9. Data Location

Your data is primarily stored and processed within India, in compliance with data localisation requirements. In limited cases, data may be processed by service providers in other jurisdictions under appropriate safeguards and contractual protections.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of material changes by posting the updated policy on our website with a revised "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: