Privacy Policy

Sanchix ("we", "our", or "us") provides cloud-based point-of-sale and retail ERP software operated by Sigma Rocks. This Privacy Policy outlines our commitments regarding data collection, processing, and storage in compliance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDP). This policy applies to all merchants, workspace owners, and staff accessing Sanchix via web, desktop, and mobile applications.

We collect information you provide directly: store registration details (owner name, business name, phone number, email, GSTIN, business address), workspace operational data (product catalog, purchase prices, selling prices, inventory movements, sales transactions, supplier records), and customer contact details entered for the sole purpose of issuing digital receipts or maintaining credit khata. We do not collect sensitive biometric data.

Your store data is processed strictly to deliver POS functionality: generating GST tax invoices, calculating inventory levels, enabling cloud sync, and generating accounting reports for your store. We never monetize, sell, share, or rent your merchant or customer data to advertisers or third-party data brokers.

All data is stored in secure, enterprise-grade cloud facilities located in certified data centers with encryption in transit (TLS 1.3) and encryption at rest (AES-256). We maintain automated daily backups with multi-region redundancy to ensure business continuity and zero data loss. Role-based access controls within your workspace protect sensitive pricing and margin information from unauthorized staff.

We share data only with authorized service partners strictly necessary to provide platform features: Razorpay for secure PCI-DSS compliant subscription billing, and certified cloud infrastructure hosts. All partners are bound by strict non-disclosure and data protection agreements.

You retain full and absolute ownership of all data entered into your Sanchix workspace. Your catalog, customer records, and transaction history remain strictly private. Upon account termination, your data is securely purged after the statutory retention period mandated under Indian tax laws.

In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, our designated Grievance Officer handles privacy inquiries and data concerns. Contact our Grievance Officer at [email protected] or write to Sigma Rocks, Attn: Privacy & Data Protection, India. We acknowledge all formal grievances within 24 hours and resolve them within 48 business hours.