Privacy Policy

This Privacy Policy explains how Sanjivani Solutions ("we", "us", or "our") handles information in connection with our inventory and business management application available at https://shop.computersolutions.in ("Service"). It describes information that may be entered into the application, how it is used, and how the optional Google Drive backup integration works.

1. Who we are

Sanjivani Solutions is an IT products business with a legacy of trust since 2003. The Service supports internal inventory and business record management for authorised users.

2. Information we handle

Depending on the features used, the Service may process these categories:

• Account and authentication information: usernames, names displayed in the application, password-verification data, session identifiers, and login status needed to authenticate users and restrict access.
• Inventory information: product names, descriptions, product codes, stock quantities, categories, purchase costs, selling prices, and stock adjustments entered by authorised users.
• Purchase and supplier information: purchase dates, quantities, prices, supplier names and contact details, references, and notes entered into purchase features.
• Payment and business records: payment amounts, transaction dates, payment methods, references, balances, customer or supplier details, and notes entered into enabled business modules.
• Imported and exported files: spreadsheets, CSV files, database exports, reports, and backup files that users choose to import, download, upload, or restore.
• Technical and security information: session and request information, error information, and server access logs where recorded by the application or hosting provider. These records may help troubleshoot problems and protect the Service.
• Google authorisation information: if Google Drive is connected, the application may store the authorisation tokens needed to maintain the permitted connection. If the configured identity scope requests it, basic Google account information such as an email address may also be processed.

Users should only enter information necessary for legitimate business purposes and should be authorised to provide any personal information they enter.

3. How we use information

Information may be used to:

• authenticate users and maintain authorised sessions;
• maintain product and stock records;
• record purchases, payments, and other enabled business transactions;
• prepare operational summaries, reports, and data exports;
• create or restore database backups when an authorised user requests it;
• upload backup files to Google Drive when the integration is connected;
• maintain the security, reliability, and functionality of the Service;
• troubleshoot errors and investigate suspected unauthorised access; and
• respond to support requests and comply with applicable legal obligations.

We do not sell personal information. Google Drive data is not intended to be used for advertising, unrelated profiling, or marketing.

4. Google OAuth and Google Drive access

Connecting Google Drive is optional. When an authorised user chooses to connect a Google account, Google displays an authorisation screen describing the access requested by the application. The user can decline authorisation; Drive backup functions requiring that access will then be unavailable.

Purpose of Google Drive access

The integration is intended to support database backup operations, such as creating and uploading application backup files to the connected Google Drive account.

• Data accessed: the application uses the Google Drive permissions configured in its OAuth client. The intended configuration uses the limited drive.file scope to work with files created by the app or files explicitly made available to it.
• Purpose: to create or manage permitted backup files in the connected Drive account for data protection and recovery.
• Data transmitted: when a backup is uploaded, the backup contents and necessary file metadata are sent to Google Drive. A database backup may contain inventory records, account-related records, purchase information, payments, and other data stored in the application.
• Token storage: the application may store OAuth tokens in private server-side storage so the connection can be reused. Such files should not be publicly accessible.
• Limits: the integration is not intended to read Gmail messages or access unrelated Google services. The actual access is determined by the OAuth scopes configured for the deployed application.

We do not sell Google user data or use it for advertising. Google processes authorisation and Drive requests under its own terms and privacy policy.

Google Privacy Policy: https://policies.google.com/privacy

You can review or revoke the application's access through your Google Account security settings. Revoking access can stop Drive backup functions from working. It does not automatically delete backup files already saved in Google Drive.

5. Database backups and restoration

The Service may provide a manual database backup and restore feature. Backup files can include database structure and the records stored in the application. Anyone who obtains an unencrypted backup may be able to read its contents.

• Backups are created when the available backup action is initiated. Do not assume that automatic or scheduled backups are running unless they have been separately configured and tested.
• Where Google Drive integration is enabled and authorised, a backup may be uploaded to the connected account.
• Users should restrict access to backup files and avoid sharing them publicly.
• Restoring a backup may replace existing database information. Create a separate safety backup before restoration and only restore a trusted file.
• Removing information from the live database may not remove copies retained in previously created backup files.

6. How information is shared

Information may be available to the following parties when necessary:

• Authorised users: users and administrators who require access to perform their business duties.
• Hosting and infrastructure providers: providers supporting website hosting, database storage, maintenance, and security may process information as necessary to deliver those services.
• Google: Google processes information when the user authorises and uses the Google Drive integration.
• Legal authorities: information may be disclosed where required by law or where reasonably necessary to protect the Service, users, or legal rights.

We do not sell personal information. Access should be limited to what is necessary for the relevant business or technical purpose.

7. Cookies and sessions

The Service may use essential session cookies or similar mechanisms to maintain login sessions and protect authenticated pages. These support the operation of the application. Blocking cookies may prevent login or other restricted features from working correctly.

8. Data security

Reasonable safeguards should be maintained to protect application data, including authenticated access, restricted server-side configuration files, secure handling of credentials, and appropriate hosting protections. No website or storage system can be guaranteed completely secure.

Users should use strong passwords, sign out on shared devices, and keep passwords, database credentials, OAuth secrets, setup keys, and backup files confidential. Suspected unauthorised access should be reported promptly to the business operator.

9. Data retention and deletion

Business records may be retained for as long as needed for business operations, reporting, accounting, security, legal obligations, and backup or recovery purposes. Retention periods may vary according to record type and applicable requirements.

Authorised users may request correction or deletion of records by contacting the business operator. Deleting a record from the live database does not automatically delete copies contained in downloaded backups or files already saved to Google Drive. Those copies must be managed separately.

10. User responsibilities

Users who enter information about customers, suppliers, employees, or other individuals are responsible for ensuring they have the necessary authority to provide and use that information for the relevant business purpose. Users should keep business records accurate and avoid entering unnecessary sensitive information.

11. Third-party services

The Service may rely on hosting providers and, if connected, Google services. Those services may have their own privacy policies and terms. We are not responsible for independent processing carried out by third parties under their own policies.

12. Children's privacy

The Service is designed for business use and is not directed at children. Users should not knowingly enter children's personal information unless there is a lawful and necessary business purpose and appropriate authority.

13. Privacy requests and contact details

For questions about this Privacy Policy, requests concerning information stored in the Service, or concerns about the Google Drive integration, contact Sanjivani Solutions using the details below. We may need to verify identity and authority before acting on a request.

14. Changes to this Privacy Policy

We may update this policy when the Service, its Google permissions, or our data-handling practices change. The revised policy will be published on this page with an updated date. Users should review this page periodically.