Privacy Policy

This Privacy Policy describes how Shronix Technology Private Limited (“Shronix”, “we”, “us”) collects, uses, discloses and safeguards information in connection with the Nidhi Cloud platform (the “Service”). We are committed to handling your data in accordance with the Information Technology Act, 2000, the applicable rules thereunder, and India’s data-protection framework.

1.Information we collect

a) Account & contact information

When you sign up, we collect your name, company name, chosen subdomain, email address, mobile/WhatsApp number and password (stored in encrypted, hashed form).

b) Billing information

When you subscribe to a paid plan, payment is processed by our authorised payment gateway. We receive transaction details such as amount, status, order and payment reference IDs. We do not store your full card, UPI or bank credentials — these are handled directly by the PCI-DSS-compliant payment gateway.

c) Customer Data

The Service lets you store operational records about your own members and business (for example member details, deposits, loans and accounting entries). This “Customer Data” is entered and controlled by you; we process it on your behalf to provide the Service.

d) Usage & technical data

We automatically collect limited technical information such as IP address, browser type, device information, log timestamps and pages accessed, for security, diagnostics and to improve the Service.

2.How we use your information

• To create, provision and operate your account and dedicated database;
• To process subscription payments, renewals and invoices;
• To send transactional communications — verification codes (OTP), onboarding details, payment receipts and renewal reminders — by email and WhatsApp;
• To provide customer support and respond to your requests;
• To secure the platform, prevent fraud and abuse, and comply with legal obligations;
• To maintain and improve the reliability, features and performance of the Service.

3.Data isolation & security

• Dedicated database per company: each Customer’s data is stored in a separate, logically isolated database — your data is never co-mingled with another company’s.
• Encryption in transit: all traffic is served over HTTPS/TLS with HSTS enforced.
• Access controls: passwords are hashed, admin sign-in supports OTP-based two-factor authentication, and infrastructure access is firewalled and restricted.
• Backups: we take automatic daily backups to enable recovery.

While we implement reasonable security safeguards, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

4.Sharing & disclosure

We do not sell your personal data. We share information only in these limited circumstances:

• Service providers: payment gateways (to process payments), email delivery services (to send transactional email), WhatsApp Business messaging (to send OTP and notifications), and cloud hosting/infrastructure providers — each only to the extent needed to provide the Service;
• Legal requirements: where required by law, regulation, legal process or enforceable governmental request;
• Business transfers: in connection with a merger, acquisition or sale of assets, subject to this policy.

5.Cookies

We use strictly necessary cookies to keep you signed in and to maintain session security (including CSRF protection). We do not use third-party advertising cookies. You can control cookies through your browser settings, but disabling essential cookies may prevent the Service from functioning.

6.Data retention

We retain your account and Customer Data for as long as your account is active. After termination, we retain data for a limited grace period to allow export and to meet legal or accounting obligations, after which it is securely deleted. Backup copies are purged on a rolling schedule.

7.Your rights

Subject to applicable law, you may request to access, correct, export or delete your personal data, or withdraw consent for non-essential processing. To exercise any of these rights, contact us at shronixt@gmail.com. We will respond within a reasonable time.

8.Children

The Service is intended for businesses and is not directed at individuals under 18. We do not knowingly collect personal data from children.

9.Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified through the Service or by email, and the “Last updated” date above will be revised.

10.Contact & grievances

For any privacy question or grievance, please contact our Grievance Officer: