Privacy Policy & Data Notice

1. Introduction & Commitment

Welcome to Krushi Nidan ("we", "our", "us"). We are committed to safeguarding the digital personal data of farmers, agricultural practitioners, and users who access our web application, artificial intelligence crop diagnostics, live mandi rates, and farm weather advisories.

This Privacy Policy sets out how Krushi Nidan, as a Data Fiduciary, processes personal data in accordance with the provisions of the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

2. Personal Data We Collect

We collect only the minimum personal data strictly necessary to deliver agricultural intelligence services:

• Identity & Contact Data: Full Name, Email Address, and Phone Number (mandatory for account verification and security).
• Farm & Diagnostic Data: Photographs of diseased or healthy crop leaves uploaded for AI vision inference, selected crop types, and past diagnosis records.
• Geographic & Location Data: Approximate latitude and longitude coordinates provided by your device or selected city/mandi to deliver localized agricultural weather warnings and APMC auction rates.
• Technical & Log Data: Internet Protocol (IP) address during registration and login sessions, browser user-agent, access timestamps, and cryptographic session tokens (JWT) to secure user sessions and prevent automated abuse.

3. Purpose of Processing (Why We Use Your Data)

We process your data exclusively for lawful purposes with your prior, informed, and affirmative consent:

4. Technical & Organizational Security Safeguards

We have instituted state-of-the-art security safeguards to protect personal data against unauthorized access, alteration, or disclosure:

• Cryptographic Password Hashing: Passwords are salt-hashed using the industry standard bcrypt algorithm (12 cost factor) and are never stored or logged in plain text.
• Secure Cookie Architecture: Session tokens are transmitted exclusively via httpOnly, SameSite=Lax, and SSL/TLS encrypted cookies, preventing malicious client-side script theft (XSS/CSRF).
• Defense Against Exploitation: Strict Content Security Policies, X-Frame-Options (Clickjacking defense), X-Content-Type-Options (MIME sniffing defense), and strict rate limiting on registration and login endpoints.
• No Sale of Data: Krushi Nidan does NOT sell, rent, monetize, or share your personal data with third-party advertisers or data brokers.

5. Your Rights as a Data Principal (DPDP Act 2023)

Under Chapter III of the Digital Personal Data Protection Act, 2023, you enjoy the following statutory rights:

6. Data Retention Period

We retain personal data only for as long as your account remains active or as required to fulfill the purposes described herein. When you delete your account, your data is permanently deleted from our active database and audit logs in accordance with our deletion protocols.

7. Grievance Redressal Officer (Statutory Disclosure)

In compliance with the Digital Personal Data Protection Act, 2023 and Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the details of our designated Grievance Officer are as follows: