Privacy policy
Last updated 11 October 2026
SupplyKaro is an ordering, delivery and khata service for distributors and the shops they supply. It is run by Learncetra Technologies Private Limited (CIN U62011UP2026PTC253223), 356/340/1146 Ashok Vihar, Alamnagar, Lucknow, Uttar Pradesh 226017, India (“we”). This policy explains what we keep, why, and the choices you have. It follows India’s Digital Personal Data Protection Act, 2023.
Who decides what happens to the data
A distributor who uses SupplyKaro decides which shops, staff and orders go into it. For that information the distributor is responsible for it, and we process it on the distributor’s behalf and on their instructions. For the distributor’s own account (the owner’s name, email and mobile), and for visitors to this website, we are responsible.
What we keep
- Distributor accounts: business name, owner and staff names, email addresses, mobile numbers, GSTIN and address, and passwords (stored only as a one-way hash).
- Shops: shop name, owner’s name, mobile number, address and delivery days, entered by the distributor or by the shop.
- Business records: products and prices, orders, deliveries, returns, bills, payments, khata entries, cashbook entries, collection dates and photos of bills that someone chooses to attach.
- Sign-in codes: the one-time codes sent to shops, stored only as a hash and only until they expire.
- Technical records: server logs with the time, the page or action and the IP address, kept to keep the service secure and to fix faults.
This website itself sets no cookies, has no analytics and no advertising trackers. If you contact us on WhatsApp, by phone or by email, we keep that conversation to answer you.
Why we use it
- To run the service: take orders, prepare deliveries, make GST bills, keep the khata and send reminders.
- To sign people in, and to keep accounts and data secure.
- To give support, and to tell distributors about changes to the service.
We do not sell personal data, and we do not use it for advertising.
Messages we send
- SMS: sign-in codes to shops, sent through 2Factor.
- WhatsApp: payment reminders to shops, sent through Meta’s WhatsApp Business Platform, only when the distributor turns them on. A reminder contains the shop’s name, the distributor’s name and the amount due.
- In the app: order, delivery and payment notices to the shop.
Who else handles the data
We use these service providers, each only for the part named:
- Hetzner Online (servers and storage, in Singapore), where the service and its backups run.
- 2Factor (sending SMS).
- Meta Platforms (sending WhatsApp messages).
- Cloudflare (serving this website).
We share data with authorities only when the law requires it.
How long we keep it
We keep a distributor’s data while their account is open. When an account is closed, we delete its data within 90 days, except records the law requires to be kept longer, such as bills. Backups are made every night and kept for 7 days.
How we protect it
Connections are encrypted (HTTPS). Each distributor’s data is kept apart from every other distributor’s at the database level. Passwords and sign-in codes are stored only as hashes. Access to the servers is limited to the people who run them.
Your rights
You can ask to see the personal data we hold about you, to correct it, or to delete it, and you can withdraw consent you gave. If your data was entered by a distributor, you can also ask them directly. To use these rights, or to complain, write to privacy@supplykaro.com. We reply within 30 days.
Grievance Officer: privacy@supplykaro.com, 356/340/1146 Ashok Vihar, Alamnagar, Lucknow, Uttar Pradesh 226017, India. If you are not satisfied with our answer, you may complain to the Data Protection Board of India.
Children
SupplyKaro is for businesses. It is not meant for anyone under 18.
Changes
If we change this policy, we update the date at the top. If a change matters for distributors, we tell them before it applies.