Skip to content
Shivakriti Logistics CRMBack to the product page

Legal

Privacy policy

Last updated: 8 October 2026

Shivakriti Tech runs Shivakriti Logistics CRM. We collect only what is needed to give your company its account and run the CRM, store it in a database in India, never sell it, and use no advertising or tracking cookies. The records your company enters belong to your company, and you can export them or have them deleted.

Who we are

Shivakriti Logistics CRM ("the CRM") is provided by Shivakriti Tech, Vadodara, Gujarat, India. This policy explains what personal data the CRM handles, why, and the choices you have. It follows India's Digital Personal Data Protection Act, 2023.

There are two kinds of data here. Your account data (who signed up, who your users are, what you paid) is ours to look after. The records your company enters (customers, rates, jobs, documents, employees) are your company's: we store and process them only to run the CRM for you, on your instructions.

What we collect

  • When you sign up: company name, your name, work e-mail, phone number if you give it, and your password. Passwords are stored only as a one-way hash; nobody, including us, can read them. The 6-digit e-mail code is never stored in readable form either.
  • To stop abuse of free trials and sign-in: the internet address and browser of sign-up and sign-in attempts, and whether they succeeded.
  • Your users: each user's name, e-mail, role, permissions and last sign-in time.
  • Payments: plan, period, amount, GST and the payment reference. Card, UPI and bank details are handled by Razorpay and never reach us.
  • E-mail sent from the CRM: for quotations e-mailed from the CRM, the recipients, subject and whether it was sent, so your company has a record and daily limits can be applied.
  • Your company's records: whatever your users enter, which may include your customers' and employees' contact details, salaries and attendance.

How we use it

  • to create and secure your account and keep each company's records separate;
  • to send sign-up codes, trial and renewal reminders and service notices;
  • to deliver the e-mails your users send from the CRM;
  • to take payments and keep the records Indian tax law requires;
  • to answer support requests and fix problems.

We do not sell or rent personal data, we do not use it for advertising, and we do not look at your company's records except when you ask us to help with them or when the law requires it.

Who processes it for us

  • Supabase: the database, hosted in Mumbai, India.
  • Hostinger: the server the CRM runs on.
  • Brevo: delivers the CRM's e-mails. It receives the recipient's address and the message.
  • Razorpay: takes online payments.

Each receives only what it needs for that job. We may also disclose data when a court or government authority lawfully requires it.

Cookies

The CRM sets only the cookies needed to keep you signed in and to protect forms against forgery. There are no analytics, advertising or tracking cookies.

How long we keep it

  • Account data and your company's records: for as long as the account exists. A locked account (trial or paid period over) keeps its data so it can be unlocked.
  • After your company asks us to delete its account, we delete its data within 30 days.
  • Payment and invoice records: as long as Indian tax law requires, even after the account is deleted.
  • Sign-up and sign-in attempt records: only as long as needed to prevent abuse.

Security

  • All traffic to the CRM is encrypted (HTTPS), and so is the connection to the database.
  • Every query is limited to the company that owns the data.
  • Repeated failed sign-ins are slowed down and blocked; sessions expire after a period of no use.

If we learn of a breach that affects your data, we will tell you and the authorities as the law requires.

Your rights

You can ask us to:

  • tell you what personal data we hold about you, and give you a copy;
  • correct data that is wrong or incomplete;
  • delete your data, unless the law requires us to keep it;
  • stop sending you reminder e-mails (service and security notices still go out while you have an account).

If you are a customer or employee of a company that uses the CRM, that company decides what is stored about you; please contact them first. We will help them answer you.

We reply to requests and complaints within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.

Changes

When this policy changes, the date at the top changes too. For important changes we will also tell account administrators by e-mail. See also the terms and conditions.

Contact

To use your rights, or with any question or complaint about your data (grievance contact):