What Shop Analyst keeps about you and your business, why, who else sees any
of it, and what you can ask us to do with it. Written for India's Digital Personal Data
Protection Act, 2023 and its rules.
Version 2026-10-07. GENNEM Technologies Private Limited.
This is the demo. It runs on Railway's servers in
Singapore, not on our server in India, and holds only invented businesses and the test
businesses people make to try it, which are deleted after 14 days. Do not type a
real customer's details, or your own, into it. Your own business, when you sign up for real,
is kept on our server in India as this notice says.
This notice is being read by our legal adviser before
Shop Analyst takes its first paying customer. What it says about how the product works is
already true.
Who we are, and two different kinds of data
Shop Analyst is made by GENNEM Technologies Private Limited ("we"). Two kinds of personal data pass through it,
and we stand in a different place towards each.
Yours, as the person who signs up, and your staff's: names, your phone number and
email, your staff's names and logins. We decide why we keep these, so for them we are what
the law calls the data fiduciary.
What your business puts in: your bills, your stock, your expenses, and any personal
data in them, such as a customer's name or a buyer's GSTIN on a bill, or who came to work.
Your business decides why it keeps those. We keep them only to run Shop Analyst for you,
and do nothing else with them.
What we keep
Your account: your business's name and trade, where it is (country, state, town, postcode,
and the spot you mark for each branch), your name, phone number and email.
Your staff's logins: their names, the login name you give them, their role and branch. A
password is never kept, only a one way hash of it, so not even we can read it.
Your records: the files you send us, what you enter, and every bill rung up on the till,
with whatever it carries.
When somebody signs in, and what is changed by whom where the product keeps a log of it
(who was given a login, who cancelled a bill, who counted a drawer).
One cookie, which keeps you signed in. No advertising, tracking or analytics cookies.
What we use it for
To run Shop Analyst for you: the dashboard, the forecast, the till, the reports.
To reach you about your account, and for the calls you ask us for.
To keep it safe: slowing down anybody guessing passwords, and keeping backups.
Where a law requires us to keep or hand over something, to do that.
We never sell it, never show you advertising, never build a profile of you or your customers
for anybody else, and never send your records to an artificial intelligence service: every
figure is worked out by our own code on our own server.
Who else sees any of it
This demo's server is rented from Railway, in Singapore, for trying Shop Analyst with
invented data. Railway looks after the computer and so could reach what is on it; that is why
nothing real belongs here. Our own server, for real businesses, is a rented computer in India.
The weather, the map and event listings. To tell you what rain or a nearby event does
to your trade, the server asks outside services about a place and some dates: the weather
for a point on the map (Open-Meteo), what is mapped around it (OpenStreetMap), and, in the few
countries where it is switched on, events listed nearby (Ticketmaster). They are sent a place
and dates and nothing else: never a name, a figure, a phone number or anything you typed.
Our own team opens your records only when you ask for help, or when a file you sent
could not be read and has to be set up by hand.
Email, once we send you notes by email, travels through an email provider, which
carries the message. Your daily note's email carries a link and no figures unless you choose
to have the whole note in it; then your figures travel with it, through our email provider
and yours.
How long we keep it
For as long as your account is open. When you close it, everything is deleted within thirty
days, and our encrypted backups roll it off within the thirty days after that. Before you close,
you can take your records with you: GST law asks a business to keep its own records for years,
and that copy is yours to keep.
What you can ask us
For a summary of the personal data we keep about you, and who it has been shared with.
To correct it, complete it or bring it up to date.
To erase it, by closing your account, where no law requires it to be kept.
To withdraw your consent, which you do by closing your account; anything done before stays
lawful.
To name somebody to act for you if you die or cannot act yourself.
To have a complaint looked into by us, and if you are not satisfied, to take it to the Data
Protection Board of India.
If your name or number is on a bill from a business that uses Shop Analyst, ask that
business first: those records are theirs. We will help them answer you.
Who to write to
The name and email address of the person who answers these are being
appointed, and appear here before the first paying customer.
If something goes wrong
If personal data we hold is exposed, we tell the people affected and the Data Protection
Board, as the law requires, and say what happened and what we are doing about it.
Children
Shop Analyst is for businesses. It is not meant for anybody under eighteen, and we do not
knowingly keep a child's data.
When this changes
A new version gets a new date at the top, and you are asked to accept it the next time you
sign in. What you accepted, and when, is kept with your account.