Privacy Policy

What we collect

• Account details: name, email, company name, a hashed password (or your Google account's email and name if you sign in with Google).
• Content you add: leads and visiting cards (LeadFlow); designs, photos, weights, prices and share links (JewelPilot); CAD jobs, references and deadlines (CADFlow); production orders and karigar assignments (JewelOps); metal ledgers and loss or recovery records (Karigar Khata); inventory, quality checks, unique IDs, QR labels and equipment records (JewelVault); purchasing, planning, costing and dispatch records (JewelCore); invoices, bills, bank and GST records (JewelBooks); employee, attendance, leave and payroll records (JewelPeople); stock, bagging and billing records (SilverFlow) — along with the client, karigar, employee and order details you type into any of these apps.
• Usage and security data: login times, IP address (for rate limiting and fraud prevention), and basic activity records such as sign-ups and plan changes.
• Payment details: handled by our payment provider; we receive the plan, status and a customer reference, never your full card number.

How we use it

To run the apps you use, keep them secure, send emails you need (sign-up confirmation, password reset, order alerts), bill you, and support you. We don't sell your data.

Who else handles it

• Railway hosts the application, its database and any uploaded files (data centre region: Southeast Asia).
• Anthropic (the Claude AI service) receives a photo or the question you type in, only when you use an AI feature, for example AI visiting-card capture in LeadFlow, design-photo reading or JewelIQ in JewelPilot, or similar assistants in other apps. Nothing is sent to it otherwise.
• An email provider ([e.g. Resend]) and a payment provider ([e.g. Razorpay / Stripe]).
• Google, if you choose "Continue with Google".

Your clients' and karigars' data

For the client, customer and karigar details you enter, you decide what to collect and why; we act as your processor and only handle it on your instructions. You are responsible for having the right to collect it.

Keeping and deleting data

We keep your content while your Single Tab account exists, across whichever apps you use. You can download it any time from Company Info, and delete the account to have it removed: the records and every uploaded file are deleted straight away, and copies in our encrypted backups expire on the backup schedule ([backup retention, e.g. 35 days]). To ask about or correct personal data, write to [privacy email].

A few records are kept on purpose, after an account is deleted or while it exists:

• Security records (failed sign-ins, denied requests; they include network addresses): 180 days.
• An audit record of account actions such as plan changes, exports, deletions and security-setting changes: 2 years. It holds the company id, who did it and what, not your designs, ledgers or clients.
• Payment event identifiers, used only to avoid applying the same payment twice: about 400 days.
• A one-way coded fingerprint of the sign-up email, kept so that deleting an account cannot be used to get another free trial. It cannot be turned back into your email address.

Share links (JewelPilot)

A link you send to a client shows only the designs you chose. It stops working after the time you pick when you create it (7 days to 1 year; 90 days is suggested) and you can turn it off at any time. Turning it off cannot remove photos a client has already downloaded or copied.

Security

Passwords are stored hashed, traffic is encrypted, and each account's data is kept separate. No system is perfectly secure; we'll tell you promptly if there is a breach affecting you.

Cookies and local storage

We use one login cookie, and on your device we store a few settings and, where an app offers an offline mode such as JewelPilot's Exhibition Mode, a copy of the data you need so it works without a signal. We don't use advertising cookies.

Changes and contact

We'll update this page if our practices change. Contact: [privacy email]. See also our Terms of Service.