Privacy Notice for Shop Owners — e-Kirana Desktop

Version 1.0 · October 2026

You have the right to read this notice in the language of your choice. It is available in English. A Hindi version will follow.

1. Who we are and what this notice is about

e-Kirana is made by S3Agents, a sole proprietorship firm with GSTIN 29JITPS6954R1ZE, whose principal place of business is 449, Railway Layout, Bogadi, Mysuru, Karnataka 570026, India. In this notice, "we" means S3Agents, which is responsible for your personal information. We provide e-Kirana Desktop, a billing and shop-management app for shop owners. It comes with online features that let your customers order from you, help you manage deliveries, and confirm payments (together, "e-Kirana for Shops").

This notice is about you: the shop owner who signs in to e-Kirana. It explains what personal information about you we collect, why we collect it, and how we use it. It also asks for your consent.

Your customers' and delivery riders' information is different. You decide how that information is used, and it is covered by the Data Processing Terms in your Shop Owner Agreement.

This notice is complete on its own. You can also read our Shop Owner Agreement at savekiranashop.com/shop-agreement and our general Privacy Policy at savekiranashop.com/privacy. If you have any questions, write to us at support@ekirana.org.

2. What personal information we collect

Your sign-in details. When you sign in with Google, we receive your Google account ID, name, email address and profile picture from Google.

Your contact and shop details. These are your phone number, shop name, shop address, city, state and pincode, your shop's location on a map, and your shop's web address. They also include your logo, opening hours, GSTIN, UPI ID, and your receipt and printer settings.

• Sensitive: your UPI ID is a payment detail.
• Sensitive: your shop location can be precise, which matters if your shop is also your home.

Your subscription and payment records. Your plan, dates, amounts paid, invoices, and reference numbers from our payment partner. We do not receive or store your card numbers, bank account numbers or UPI PIN.

Sign-in and security records. Your IP address, details of your computer or browser, the times you signed in, and records of the consents you give or withdraw.

App and device information. Your app version and update channel, your Windows version, and a summary of your computer's hardware (processor, memory, free disk space). It also includes your shop's identifier and connection status. If you agree to purpose 6, it also includes how often features are used and how fast the app runs.

Diagnostic information. Error and crash reports, app logs and a timeline of recent app events. These are sent automatically when something goes wrong. They are also sent when you report a problem. When we ask your computer for more detailed logs to help you, the app asks your permission first. They are designed to hide phone numbers, email addresses, tax numbers, passwords and codes. They may still sometimes include other things that were on your screen or in use at the time, such as a product or customer name. A screenshot is included only if you agree when you report a problem.

Support conversations. What you tell us when you contact support. If you have an AMC, our customer care team may also call you, and with your agreement they may help you through a remote screen-sharing session. During a session, our staff may see what is on your screen. They do not record the session or copy your information, except what you agree is needed to help you. Customer-care calls are recorded, to check quality, train our team and resolve complaints. We tell you at the start of each call.

Your location, if you use "My Location". If you press "My Location" in the app, Windows shares your computer's approximate location once, so that we can set your shop's position on the map. We do not track your location continuously.

Your Google Drive backup connection, if you turn it on. This is permission for e-Kirana to use a private e-Kirana folder in your Google Drive. Your backups go from your computer straight to your own Drive. We do not receive their contents.

Accounts you connect. If you connect a WhatsApp Business account or a courier account, the app keeps the account details needed to connect on your computer.

Your marketing choices. Whether you have agreed to receive news and offers from us, and how.

Where this information comes from. Most of it comes from you, when you sign up, set up your shop and use the app. Some comes from Google (your sign-in details) and from our payment partner (payment confirmations). Some is created automatically by the app as you use it (app, device and diagnostic information).

3. Why we use your information

1. Creating and running your account (Required) — We use your sign-in details, contact details and security records to create your account and sign you in. They also let us keep your account active on one computer at a time and protect it from misuse.

2. Providing e-Kirana for Shops (Required) — We use your shop details to run the features you use. These include:

• publishing your online shop and products;
• passing customer orders to your app;
• managing deliveries; and
• confirming payments through the Companion app.

3. Subscription, billing and tax records (Required) — We use your subscription and payment records, and your GSTIN, to process payments, issue tax invoices and keep the accounts the law requires.

4. Keeping the app working and secure (Required) — We use your app, device and diagnostic information to:

• check your subscription;
• deliver required updates;
• find and fix errors and crashes;
• help you when you ask for support; and
• detect and stop fraud, misuse and security threats.

Error reports are part of this purpose. Without them we cannot keep the app reliable for you and your customers.

5. Talking to you about your account (Required) — We send you important messages. Examples are security alerts, renewal reminders, changes to our terms, and replies to your support requests.

6. Improving e-Kirana (Optional — you can say no) — With your permission, we use extra usage and performance information to see which features are used and where the app is slow, so that we can make it better. Examples are how long screens take to load, how long sessions last, and how often features are used. You can switch this off at any time. If you do, we stop collecting it and delete what we collected only for this purpose within 30 days.

7. News and offers from e-Kirana (Optional — you can say no) — With your permission, we send you news about new features, tips and offers. We send these by email, WhatsApp or SMS. You can unsubscribe at any time.

8. Google Drive backup (Optional — asked when you turn it on) — If you turn it on, we use your Google authorisation to save, list, restore and delete e-Kirana backups in your private e-Kirana Drive folder.

• We cannot see any other files in your Drive.
• e-Kirana's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

9. Following the law — We use your information where the law requires us to. Examples are keeping tax records, and responding to lawful requests from courts or government authorities.

What we never do with your information:

• We do not sell your personal information.
• We do not use it for advertising by other companies.
• We do not use your shop's sales, customer or supplier information to market anything to you or to others.

4. Who we share your information with

Our service providers. These are companies that help us run e-Kirana: a customer support partner in India that handles AMC support for us (support calls, remote help sessions and onboarding); cloud hosting and networking, account database hosting, error and crash diagnostics, payment processing, maps and location, email and messaging, and software tools that help us diagnose faults, including AI-assisted tools. The fault tools receive error details with names, contact details, addresses, locations and IP addresses removed. They receive only what they need for their task, under written contracts that require them to protect it. Some of them process information outside India (see Section 10). You can ask us for their names at any time.

Google. We share information with Google when you use Google sign-in or Google Drive backup.

Your customers and the public. They see the shop details you choose to publish: your shop name, address, opening hours, logo, location on the map, and any contact details you choose to show.

Your delivery riders. They see your shop's name, address and location, and the contact details they need for deliveries.

Our professional advisers. These are our lawyers, accountants and auditors, under duties of confidentiality.

Government and law enforcement. We share information with them only when the law requires us to.

A buyer of our business. If e-Kirana is sold or merged, your information may pass to the new owner. The new owner must keep the promises in this notice.

5. How long we keep your information

We keep your information only for as long as we need it for the purposes above, or for as long as the law requires. After that we delete it securely.

• Account and shop details: while your account is active, and for up to 12 months after your last subscription ends, so that you can come back easily. After that they are deleted, unless the law requires us to keep them.
• Billing and tax records: for as long as tax and accounting laws require. This is generally up to 8 years.
• Records of your consents: while your account is active, and for up to 8 years afterwards, so that we can show what you agreed to.
• Sign-in and security records, and records of how your data was processed (logs): at least one year, as the law requires, and no more than 2 years.
• Error reports and diagnostics: the contents are kept for up to 90 days. A minimal log that a report was received is kept with the records above.
• Support conversations: up to 2 years after the issue is closed.
• Marketing choices: until you change them. We also keep a record that you unsubscribed.

On your computer and in your Google Drive. Information stored there stays there, under your control. It is not deleted when your subscription ends.

Asking us to delete your data. You can ask us to delete your information at any time (see Section 6). We act on deletion requests within 30 days, and our service providers delete it too. We keep only what the law requires us to keep, or what we must hold for a legal dispute or investigation. Copies in our system backups are removed as those backups expire, within 90 days.

6. Your rights

You can do most of these yourself in the app. If you cannot, email support@ekirana.org.

6.1 The right to know — You can ask us what personal information we hold about you, why we hold it, and which other organisations we have shared it with and what we shared.

• How: email us at support@ekirana.org. We will reply within 30 days.

6.2 The right to a copy — You can ask for a copy of the personal information we hold about you.

• How: your shop records are already on your computer, and you can export them from the Customers, Orders, Products and Purchase Reports screens. For a copy of what we hold about you, email us. We will reply within 30 days.

6.3 The right to correct your information — If something is wrong or out of date, you can fix it.

• How: change your shop details in the app under Settings → Shop Details, or on our website under Account. For anything you cannot change yourself, such as invoice details, email us with your account email and the correction. We will reply within 30 days.

6.4 The right to delete your information — You can ask us to delete your account and personal information. We will do so, except for what the law requires us to keep.

• How: email us with the subject "Delete my desktop account". Deleting your account ends your use of e-Kirana for Shops.

6.5 The right to withdraw or change your consent — You can change or withdraw your consent at any time. It is as easy to withdraw as it was to give.

• How:
  • On our website: go to Account → Consent & Privacy.
  • By email: if you cannot use the website, email us.
• What happens:
  • Withdrawing does not affect what we did before you withdrew.
  • When you withdraw an optional consent, we stop that use. Within 30 days, we delete information collected only for it, including copies held by our service providers. Examples are your usage statistics, or your entry on a marketing list. We keep a record that you withdrew.
  • If you withdraw consent for a required purpose, we will no longer be able to provide e-Kirana for Shops, and we will help you close your account.

6.6 The right to nominate someone — You can nominate a trusted person to use these rights for you if you die or become unable to act.

• How: email us with the subject "Nomination Request".

6.7 The right to complain — If you are unhappy with how we have handled your personal information, you can complain to our Grievance Officer (Section 11). If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

• How: email our Grievance Officer, or use "Report a Problem" in the app. We acknowledge complaints within 48 hours and aim to resolve them within 30 days. We will always respond within 90 days.
• Taking it further: if you have used our grievance process and are still not satisfied, you can complain to the Data Protection Board of India through its official complaint channel.

7. How we keep your information safe

We protect your information with security measures suited to the risk. These include encrypted connections, limited and logged staff access, regular security fixes, and backups of our online systems. We require our service providers to protect your information too.

Your shop records are stored mainly on your own computer, so the security of that computer matters a great deal. We recommend that you:

• use a Windows password;
• give staff their own Windows accounts where you can;
• keep Windows updated;
• turn on device encryption if your computer has it; and
• protect your Google account with 2-step verification.

No system is completely secure. If a breach affects your personal information, we will tell you and the authorities as the law requires.

8. Children's privacy

e-Kirana for Shops is for adults aged 18 and above who run a business. We do not knowingly collect personal information from anyone under 18, and when you sign up you confirm that you are 18 or older. If we find that we have collected a child's information, we will delete it. If you are a parent or guardian and believe a child has given us information, contact us at support@ekirana.org.

9. Cookies and tracking

The e-Kirana Desktop app does not use advertising trackers and does not track you across other apps or websites. Our website uses cookies that are needed for sign-in and for your account to work. If you agree through the cookie banner, it also uses analytics tools that measure visits and page speed. We do not use advertising cookies. You can change your choice at any time with Privacy choices on the website.

10. Sending your information outside India

Some of our service providers process information outside India:

• error and crash reports, and the tools that help us fix faults, are in the United States;
• if your shop uses our early-access (Beta) version, your account records are kept in Singapore; and
• our network may route traffic through servers in other countries so that the app and your online shop stay fast and available.

We protect this information with written contracts that require these providers to keep it secure and use it only for us. We will not send your information to any country that the Government of India has restricted.

11. Grievances and contact

If your complaint is not resolved to your satisfaction, you can complain to the Data Protection Board of India. For any other privacy question, write to support@ekirana.org.

Your choices

Required to use e-Kirana for Shops

☐ I have read and agree to the Shop Owner Agreement (including the Data Processing Terms). I am 18 or older, and I am authorised to accept it for my shop.

☐ I have read the Privacy Notice and agree to S3Agents using my personal information for the required purposes (purposes 1 to 5). I know I can withdraw this consent at any time.

Optional — you can say no, and change your mind later

☐ News and offers from e-Kirana by email, WhatsApp or SMS (purpose 7).

When you first open e-Kirana Desktop, you can also choose whether to help improve e-Kirana (purpose 6). Google Drive backup is asked for separately, when you turn it on.