Privacy Policy

1. Information we handle

• Account and business profile: name, Indian mobile number, role, language, state, mandi, and commodity details.
• Service records: invoices, policy and claim details, receipts, uploaded photos or documents, vehicle and route information, and support interactions.
• Payment activity: payment status, amount, transaction references, refunds, and insurance-service ledger activity. MandiPlus does not receive your full card, bank, or UPI credentials.
• Voice and AI input: recordings or transcripts you choose to provide, your questions, and the limited account context needed to answer them.
• Technical data: app version, device or installation identifiers used for notifications, diagnostics, security, and fraud prevention.

2. Device permissions

The app may request camera or photo-library access when you capture or choose an invoice, receipt, or claim document; microphone and speech-recognition access when you choose voice entry; and notification access after sign-in for account, policy, claim, payment, or trip updates.

The iOS app does not request your phone's location, contacts, or App Tracking Transparency permission. Vehicle tracking displays information supplied by authorised tracking services for a vehicle or trip requested in the app.

3. How we use information

• Authenticate users and maintain account security.
• Prepare and manage requested invoices, insurance-service records, policy documents, tracking views, and claims.
• Process payments and refunds, prevent fraud, provide support, and comply with applicable Indian legal obligations.
• Provide AI-assisted answers or transcription only when you use the relevant feature.

4. AI-assisted features

Sahayata uses Google Gemini / Vertex AI. Before its first use, the app explains that your question and relevant account context may be sent to Google and asks you to continue. This context can include your mandi, role, language, service-limit activity, invoices, policies, and claims when needed to answer the question. MandiPlus removes information that is not needed for the response where reasonably possible.

Voice entry may use Google or AssemblyAI to convert the recording you submit into text. AI output can be inaccurate and does not replace the issued policy, payment record, claim decision, or professional advice.

5. Service providers and disclosure

We disclose information only as needed to provide a feature you request, protect the service, comply with law, or complete an authorised business transfer. Providers can include:

• The insurer and authorised insurance or claim-service participants shown in the relevant policy or service record.
• PhonePe and banking/payment participants for real-world insurance and related service payments.
• Google Gemini / Vertex AI for Sahayata and selected AI-assisted document or voice features, after the applicable in-app notice.
• Google or AssemblyAI for voice-to-text processing, depending on the feature's current production configuration.
• Cloudinary and infrastructure providers for secure document storage and delivery.
• Expo for app updates and push-notification delivery, and 2Factor for OTP delivery.
• Vehicle-tracking, mapping, routing, and geocoding providers needed to display a requested trip.
• PostHog only when you opt in to privacy-protected analytics in the app.

MandiPlus does not provide a public social feed or user-to-user messaging. Invoice, policy, and claim uploads are private business records available only to the account holder and authorised service or operations personnel.

6. Analytics and tracking

Privacy-protected product analytics and masked session replay are off by default in the mobile app. If you opt in under Profile → Security, limited usage and diagnostic data may be sent to PostHog. Text, images, system pickers, and sensitive account content are masked or excluded. MandiPlus does not use this data for cross-app advertising and does not sell personal information.

7. Storage, security, and retention

Sign-in tokens are stored using the device's protected storage. We use reasonable administrative, technical, and organisational safeguards. Records are retained only as needed to provide the service, resolve disputes, prevent fraud, enforce agreements, and meet insurance, payment, tax, or other legal obligations. Saved app drafts and preferences may remain on your device until removed or the app is uninstalled.

8. Account deletion and user choices

Request deletion in the iOS app under Profile → Security → Delete account, or use the web account-deletion page. A request has a seven-day recovery window. Contact support before the scheduled date to cancel it. Personal profile data is deleted or anonymised after the recovery window, while invoices, policies, claims, payment, tax, fraud-prevention, or legal records may be retained where required.

9. Contact

For privacy questions, access or correction requests, or deletion recovery, email support@mandiplus.com or call +91 96069 95351.

ENP FARMS PRIVATE LIMITED, SY No. 38, 1 No. 51/4, CMC Katha Post, Glass Factory Layout, Electronic City, Andapura, Karnataka 560099, India.