Privacy Policy & Security Disclosures

1. Introduction

Welcome to VERISTOCK PRO, owned and operated by SM Technologies ("we", "us", or "our"). VeriStock Pro is an offline-first B2B Business Management and ERP system designed for mobile retailers, repair centers, pharmacy stores, garments merchants, and small businesses in India and worldwide.

We respect your data privacy and autonomy. Unlike standard cloud-only SaaS systems that store your business ledgers on central remote servers, VeriStock Pro operates on an Offline-First Architecture. Your core financial ledgers, inventory records, customer contacts, and repair tickets are processed and encrypted locally on your Android device.

2. Information We Collect

We strictly limit data collection to what is necessary for managing account authentication, app performance diagnostics, and subscription licensing:

• Account Identifiers: Name, Email Address, Mobile Phone Number (provided during registration).
• Device Identifiers: Firebase Installation ID, Android OS Version, Device Model (used for notification dispatch and licensing).
• Diagnostic & Performance Logs: Anonymized app crash logs, stack traces, and feature performance metrics via Firebase Crashlytics.

3. How Information Is Used

Your information is used strictly to provide and improve the VeriStock Pro application:

• To authenticate your user session and manage multi-device licensing.
• To send push notifications for low-stock alerts, repair status milestones, and payment reminders.
• To diagnose software crashes and maintain high stability on budget Android hardware.
• To enable user-initiated Google Drive encrypted database backups.

4. Firebase Authentication

We use Google Firebase Authentication (`com.google.firebase:firebase-auth`) to verify user credentials and secure user account sessions. Your email address, encrypted authentication token, and account creation timestamp are transmitted securely over TLS 1.3 to Firebase servers. We do not sell or share your account credentials with third parties.

5. Business Information

Information regarding your shop name, store address, GSTIN, PAN, and business logo is entered locally during shop onboarding (`SetupScreen.kt`). This data is stored on your device's local database and printed on your sales receipts. It is NOT published to any public index or sold to data brokers.

6. Customer Data

Customer names, phone numbers, delivery addresses, and outstanding balance ledgers (Udhari) entered into VeriStock Pro remain stored exclusively in your local device's encrypted database. When you choose to send a WhatsApp invoice or SMS receipt, the data is passed directly via standard Android System Intents (`WhatsAppUtil.kt`) to your installed WhatsApp application under your explicit action.

7. Supplier Data

Vendor profiles, purchase bills, and payables ledgers are maintained locally. We do not collect or monitor your supplier pricing, wholesale discounts, or vendor contact lists.

8. Inventory Data

Your product catalog, HSN codes, cost prices, selling margins, batch numbers, expiry dates, and IMEI / Serial numbers are private business assets. They are stored locally in Room database encrypted via SQLCipher. Developer cloud servers have zero access to your inventory stock value.

9. Repair Records

Repair job tickets, device lock patterns, diagnostic checklists, technician assignments, and estimated repair costs are stored locally. Diagnostic logs are used on-device to compute repair delivery deadlines.

10. Documents & Images

Images captured using CameraX (such as shop logo, inventory product photos, repair intake condition photos, and used phone seller ID proofs) are saved in app-specific private storage (`Context.filesDir`). They are not scanned or harvested for machine learning model training.

11. Invoices & Accounting

All invoice math (CGST, SGST, IGST, discounts, double-entry financial posting) is executed on-device using exact integer paise math. Tax summaries generated for GSTR-1 and GSTR-3B exports are compiled into local CSV files on your phone.

12. Local SQLCipher Storage

VeriStock Pro uses Zetetic SQLCipher (`android-database-sqlcipher:4.5.4`) paired with AndroidX Security Crypto (`androidx.security.crypto`). Your SQLite database file (`encrypted.db`) is encrypted using 256-bit AES encryption at rest. Even if a physical device is lost, the database cannot be read without your private encryption key.

13. Google Drive Backup

VeriStock Pro offers an optional Google Drive Sync integration (`play-services-auth`, `google-api-services-drive`). When enabled, encrypted database backup snapshots are written directly to your personal Google Drive account scope (`drive.appdata` / `drive.file`). SM Technologies does NOT store or host your backup files on developer servers.

14. Third-Party Services

The app incorporates trusted Google Play Services SDKs. The table below lists all third-party libraries and their data handling:

15. Permissions Used

Every Android permission declared in `AndroidManifest.xml` serves a specific operational purpose:

• `POST_NOTIFICATIONS`: Dispatches low-stock alerts, repair deadlines, and due payment reminders.
• `CAMERA`: Scans product barcodes and takes photos for repair intake & used phone KYC reports.
• `READ_MEDIA_IMAGES`: Selects shop logo, signature, and product photos from device gallery.
• `BLUETOOTH_CONNECT` / `BLUETOOTH_SCAN`: Connects to local 2-inch and 3-inch ESC/POS thermal printers.
• `ACCESS_FINE_LOCATION`: Geotags local invoice creation logs and KYC buyback receipts for tax compliance audit trails.
• `NEARBY_WIFI_DEVICES`: Powers P2P Smart Clone data migration between two devices.

16. Data Security

We employ rigorous technical safeguards to protect your business data: 256-bit AES database encryption at rest via SQLCipher, mandatory HTTPS / TLS 1.3 transport security for network requests, and sandboxed app storage.

17. Data Retention

Local database records remain on your device for as long as the application is installed. Uninstalling the app erases local private databases unless you have created an external Google Drive backup. Firebase authentication profiles are retained until you request account deletion.

18. User Rights

You retain full rights to access, export, or erase your business data at any time. Local database records can be exported directly as CSV files. Cloud auth profiles can be deleted self-serve or via written request.

19. Account Deletion

Under Google Play User Data Policy, we provide two pathways to request permanent account deletion:

1. In-App Self-Serve Deletion: Open VeriStock Pro -> Settings -> About App -> Click Delete Account.
2. Web Portal Request: Visit our Account Deletion Portal and submit your registered email address.

Upon request, cloud auth tokens and account metadata are permanently purged within 7 business days.

20. Children's Privacy

VeriStock Pro is a commercial B2B ERP system intended strictly for adult business operators (18+). We do not knowingly collect personal information from children under 13.

21. International Users

While primary compliance maps to Indian tax and trade guidelines (GST/HSN), local encryption and offline-first principles comply with international data autonomy standards including GDPR and CCPA.

22. Policy Updates

We may update this Privacy Policy periodically to reflect app enhancements or regulatory changes. The "Last Updated" timestamp at the top of this page indicates the latest revision date.

23. Contact Information

For questions, privacy inquiries, or data deletion assistance, contact our legal and support team: