Civil ERP ("the app") is a private business accounting and site-management tool used by staff of Secret Weapon Trading Solution Pvt. Ltd. and its authorised client companies. It is not a consumer product and is not offered to the general public. This policy explains what the app stores and how it is used.
The app does not collect location, contacts, photos, device identifiers for advertising, or any data for analytics or marketing.
We do not sell or share your data with third parties. Data is not used for advertising or profiling.
Data is held on a private server operated for Secret Weapon Trading Solution Pvt. Ltd. Each company's records are kept in a separate database schema. Encrypted backups are retained for disaster recovery.
Under India's Digital Personal Data Protection Act, 2023 you may, at any time:
Business records are retained for as long as the company keeps its account, and thereafter as required by applicable tax and companies law (accounting records must generally be kept for several years under Indian law regardless of an erasure request). Deleting your personal login does not delete a company's business records where other people still rely on them; if you are a company's last remaining member, its business records are erased along with your login under the same 14-day grace period described above.
| Data | Retained for | Why |
|---|---|---|
| Login (name, phone, email, password hash) | Until you delete your account (14-day grace period) or your company owner removes you | Needed to authenticate you and run the service |
| Company records (sales, purchases, ledgers, receipts, payments, estimates, etc.) | Life of the company account, then as required by tax and companies law afterwards (typically several years from the end of the relevant financial year) | Statutory bookkeeping requirement (e.g. Companies Act 2013, Income Tax Act 1961) — independent of any individual's erasure request |
| Support tickets and messages | Kept as a service record; the requester's name is replaced with "Deleted user" once their account is erased | Support history and audit trail |
| Encrypted database backups | 7 days locally on a rolling basis, plus an offsite copy | Disaster recovery |
| Server access / error logs | Short-term, operational only | Security monitoring and troubleshooting |
| Consent record (which policy version you agreed to, and when) | Until your account is erased | Evidence of consent under the DPDP Act |
Access is over HTTPS. Passwords are hashed. Access to a company's data is restricted to users that company's owner has authorised.
The app is a workplace tool and is not directed to anyone under 18.
We may update this policy; the "last updated" date above will change accordingly.
Under Section 8(9) of the DPDP Act, 2023, questions or complaints about how your personal data is processed — including access, correction, erasure and consent-withdrawal requests — can be raised with:
Vishwanath Savekar, Grievance Officer
Secret Weapon Trading Solution Pvt. Ltd.
Email: vsavekar@gmail.com
Secret Weapon Trading Solution Pvt. Ltd.
Email: raykars07@gmail.com