Privacy Policy

Version 2026-10-23.2 · last updated 23 October 2026. Written in English; the English text is the one that applies.

This Policy explains how JRC Agro Industries Private Limited, Suryapet, Telangana, India ("we"), the Data Fiduciary for OilBhav AI, collects and uses personal data, as required by the Digital Personal Data Protection Act, 2023 and its Rules, and the Information Technology Act, 2000. By ticking "I agree" at sign-up you give the consent described here.

1. What we collect

Who you are: full name, mobile number, email address.
Your business: business name, GSTIN (if given), what you do, the oils you buy and how much, your site locations (town, district, state, PIN), the refineries you buy from, the freight you pay, how many days of stock you keep and whether you pay deposits.
Your account and use: login times, devices, IP address and approximate location from it, the pages you open, the time you spend and the buttons you press, questions you ask the chat assistant, feedback and support messages.
Payments (once paid plans start): the amount, date, plan, invoice details and the payment reference the gateway gives us. We never receive or store card numbers, CVV, UPI PINs or bank passwords.

2. Why we use it

To create and run your account, check your sign-up, and send your login and service messages.
To work out the prices shown to you, such as your delivered ("you pay") price from your own freight and refineries.
To keep the Service secure, stop account sharing and misuse, and keep records the law requires.
To answer your questions, support requests and grievances.
To improve the Service, using aggregated and anonymised statistics that cannot identify you.
To tell you about our own OilBhav AI service, new features and plans. You can stop these messages at any time; service messages continue.

We use your personal data only for these purposes. We do not sell or rent your personal data, and we do not share it for other companies' marketing.

3. Who we share it with

Only with service providers who process it for us under contract and only for the purposes above: cloud hosting (Amazon Web Services, in India), email delivery, AI model providers that process the text of questions and analysis, voice processing for the app, and, once payments start, the payment gateway. Some of these providers process data outside India; we use only providers bound by contract to protect it. We may also disclose data when the law, a court or a government authority requires it.

4. How we protect it

All traffic to OilBhav AI is encrypted with HTTPS (TLS); browsers are told to use HTTPS only.
Passwords are never stored; only a salted, slow cryptographic hash of them.
Login cookies cannot be read by page scripts and are sent only over HTTPS.
The database is not reachable from the internet; only our own application on the same server can reach it.
Access to data is limited to the people who run the Service, and admin actions are logged.
Repeated wrong passwords lock an account; logins and requests are rate-limited.

5. How long we keep it

We keep your personal data while your account is active and for as long as needed for the purposes above. After your account ends we keep sign-up and account records so you can come back and for our legal, tax and dispute needs, and we erase or anonymise personal data when it is no longer needed for any of those, except where the law requires us to keep it longer (for example tax and invoice records for 8 years).

6. Your rights

Under the DPDP Act you may: get a summary of the personal data we hold about you and how we use it; correct, complete or update it; ask us to erase it (which ends the account, unless the law requires us to keep some records); withdraw consent (which ends the account, without affecting what was done before); nominate a person to exercise these rights if you die or cannot act; and make a grievance. If you are not satisfied with our reply you may complain to the Data Protection Board of India.

7. Data breaches

If a personal data breach happens, we will inform affected users and the Data Protection Board of India as the DPDP Rules require, with what happened, its likely effect, and what we are doing about it.

8. Cookies

We use only the cookies needed to keep you logged in and to remember your language. We do not use advertising or tracking cookies.

9. Changes

We will show any new version of this Policy on the Service and tell you before it applies to you.

10. Grievance contact

the support option inside your account, or a reply to any email we send you. We acknowledge a grievance within 48 hours and resolve it within 30 days.