Privacy Policy

1. Who this policy applies to

Hiverta is a business-to-business platform. The people whose data we process are principally authorised dealers (proprietors and their staff) who buy seed from us, field officers and staff of Seedorix Agri Science Pvt. Ltd. who use the platform to onboard and serve dealers, and farmers who register to verify seed or receive updates. It also applies to anyone who submits the dealer enquiry form on this website.

2. What we collect, and why

We collect only what a specific function of the platform needs. In practice that is:

Identity and contact — your name, the firm name, mobile number, email address and postal address. Used to create your account, issue invoices, and contact you about orders.
Statutory registration — GSTIN, PAN, your seed licence number and, where your firm holds them for its other trade, fertiliser / pesticide licence numbers. Required to invoice you correctly under GST and to confirm you are licensed to trade in the products we sell. We check the format of a GSTIN and PAN on entry; we do not currently verify them against a government registry.
Aadhaar — last four digits only. Our systems store only the final four digits of an Aadhaar number, for reference on your dealer record. We never collect, store or transmit a full Aadhaar number, and we do not perform Aadhaar-based authentication.
Bank details — account holder name, account number and IFSC, so that refunds and settlements can be paid to you.
KYC documents — images of the documents you or our field officer upload during onboarding (shop photograph, proprietor photograph, licence and registration certificates). Stored in access-controlled private storage and visible only to the staff who process your KYC and to you.
Shop location — the GPS coordinates of your shop, captured once by the field officer during onboarding with your consent, used to assign you to a territory and route deliveries.
Terms acceptance — when you accept our Authorised Distributor Agreement we record the version accepted, the date and time, the language you read it in, the OTP verification that confirmed it, and — where captured — the image of your signature drawn on the acceptance pad.
Transaction data — your orders, invoices, payments, credit limit, ledger balance, returns and bookings. This is the core of the service and is retained for as long as accounting law requires.
Payment information — when you pay online, your payment is processed by a licensed payment gateway. We receive a transaction reference and status; we do not receive or store your card number, CVV, UPI PIN or net-banking credentials.
Technical data — device type, app version, and the IP address and user-agent recorded against security-relevant events such as terms acceptance and login.
Profile photo — optional, if you choose to upload one.

3. The legal basis on which we process it

We process your data to perform the contract between you and Seedorix Agri Science Pvt. Ltd. (the Authorised Distributor Agreement and each purchase order under it); to meet our legal obligations under the GST Acts, the Seeds Act 1966 and the Companies Act; and, for a small number of optional items (profile photo, marketing updates), on the basis of your consent, which you may withdraw at any time.

We do not sell personal data. We share it only with:

Payment gateways, to process a payment you initiate. They are independent data fiduciaries under their own policies.
Logistics partners, who receive your delivery address and contact number to deliver an order.
Our infrastructure providers (cloud hosting, database and file storage), who process data on our instructions and under contract.
Government authorities, where the law requires it — for example GST reporting, or a lawful request from a regulator or court.
Our own staff and field officers, on a need-to-know basis enforced by role-based access control in the platform. A field officer sees the dealers assigned to them; an accounts user sees ledgers; a dispatcher sees delivery addresses.

5. How long we keep it

Transaction records (orders, invoices, payments, ledgers) are kept for eight years from the end of the financial year they relate to, as required by the GST Acts and the Companies Act. KYC documents and the terms acceptance record are kept for the life of your dealership and for the same period afterwards. Enquiry-form submissions that do not lead to a dealership are deleted after twelve months. A profile photo is deleted when you remove it or close your account.

6. How we protect it

Data is stored on servers located in the Asia-Pacific region with encryption in transit and at rest. Access to the platform is authenticated, and every table is protected by row-level security so that a user can read only the rows their role permits. KYC documents and signatures live in a private storage bucket that is never publicly readable. Passwords are never stored in plain text. We review access rights when a staff member joins or leaves.

7. Your rights

You may, at any time, ask us to:

tell you what personal data we hold about you and provide a copy of it;
correct data that is inaccurate — most of your dealer profile you can correct yourself from the Profile screen;
delete data we no longer have a legal basis to keep;
withdraw consent for any processing that rests on consent;
stop sending you marketing or promotional messages.

Write to [email protected] with the subject line "Data request". We respond within 30 days. Note that transaction records we are legally required to retain cannot be deleted on request, but they can be corrected.

8. Grievance officer

In accordance with the Information Technology Act, 2000 and the rules made under it, our grievance officer is Rajeev Goyal, Founder, Seedorix Agri Science Pvt. Ltd., reachable at [email protected], on +91 97594 60903, and at the registered office address below. Grievances are acknowledged within 24 hours and resolved within 15 days.

9. Children

The platform is for licensed businesses and their adult representatives. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us data, contact us and we will delete it.

10. Changes to this policy

When we change this policy we update the date at the top of this page. For a material change — a new category of data, a new kind of recipient — we will also notify you in the app or by email before it takes effect.