Privacy Policy
Last updated: 11 October 2026
This policy explains what personal data PVERP collects, why we use it, who we share it with and how you can control it.
1. Who we are and what this covers
PVERP is a CRM and ERP platform for solar companies, operated from 81/75 NCC Road, Banipur, Habra, North 24 Parganas, West Bengal 743233. This policy covers our website, the PVERP web app and the PVERP Android app.
1.1 When we decide why your data is used
For visitors to this website, people who contact us, and the staff of solar companies who sign up for PVERP, we decide how personal data is used. We are the data fiduciary (controller) for that data.
1.2 When a solar company decides
A solar company that uses PVERP enters its own customers' and employees' details into the platform (enquiries, site surveys, projects, invoices, attendance). For that data the company decides the purpose and we process it on its behalf and on its instructions. If you are a customer or employee of such a company, contact that company first about your data; if you write to us instead, we will pass your request on to them.
2. What we collect
We collect only what we need for the purposes in section 3.
2.1 You give us
- Contact form and chat help: name, email, phone (optional) and your message.
- Signing up a company: your name, work email, phone, company name, address and GST details needed to invoice you, and a password (stored only as a hash).
- Paying for a plan: the plan and amount. Card, UPI and bank details are entered with Razorpay and never reach our servers.
- Data requests: your name, email, the kind of request and, if you give it, a business code.
2.2 Collected as you use the product
- Account and security records: login time, device identifier and a description of your browser and operating system.
- Your IP address when you sign in, used to detect suspicious logins and for audit trails. It is read by our server from the connection itself.
- Notification token, only if you allow push notifications.
- Location, camera and microphone only when you use a feature that needs them (for example attendance or site photos) and your browser or phone asks and you agree.
2.3 What we do not collect
We do not run analytics or advertising trackers on this website, we do not buy data about you, and we do not collect government ID numbers, health data or children's data for our own purposes.
3. Why we use it, and our basis
- To create and run your account, provide the service, take payment and send invoices (contract).
- To reply to contact, chat and support requests (your request).
- To keep the service secure, prevent fraud and abuse, and keep audit logs (legitimate use).
- To send service messages such as OTPs, receipts, plan expiry and security alerts. These are not marketing and cannot be unsubscribed from while you have an account.
- To meet tax, accounting and other legal obligations.
- To send product updates or offers, only if you ask for them. Every such message has an unsubscribe link and we stop within seven days of your request.
5. Transfers outside India
Some providers above, for example Cloudflare and Google, may process data outside India. We choose providers that commit to protecting it, and we transfer only what the provider needs to do its job.
6. How long we keep it
- Account data: while your account is active, then deleted or anonymised after closure unless a legal duty below applies.
- Contact, chat and data-request messages: until the matter is resolved, then up to 12 months in case of follow-up.
- Invoices, payment records and other tax and accounting records: for the period Indian tax law requires, even after account closure.
- Security and audit logs: kept only as long as needed to investigate misuse.
- Backups: removed on the normal backup cycle after the live copy is deleted.
7. Your rights
Under the Digital Personal Data Protection Act, 2023 and other applicable law you can:
- ask what personal data we hold about you and how it is used;
- have inaccurate data corrected or completed;
- have your data erased, subject to the legal retention in section 6;
- withdraw consent you gave, as easily as you gave it;
- nominate someone to exercise these rights if you die or cannot;
- complain to us, and then to the Data Protection Board of India.
7.1 How to ask
Use the data request form on /data-request or email the address in section 10. We confirm it is you before acting, acknowledge within 48 hours and aim to complete the request within 30 days.
7.2 Withdrawing consent and unsubscribing
Untick the box or use the unsubscribe link in any non-service email. Withdrawing consent does not affect what we did before you withdrew, and some features may stop working if they depend on that data.
8. Children
PVERP is a business product and is for people aged 18 or over. Our forms ask you to confirm you are 18 or older, and we do not knowingly collect data from anyone under 18. If you believe a child has given us personal data, tell us and we will delete it. A solar company that records a child's details in the platform must have a parent or guardian's verifiable consent first.
9. Security
Connections use HTTPS, passwords are stored hashed, access inside the platform is limited by role, and sensitive actions are logged. No system is perfectly secure. If a breach affects your personal data we will tell you and the Data Protection Board as the law requires.
11. Contact and grievances
Privacy questions, data requests and complaints: [email protected]. You can also write to 81/75 NCC Road, Banipur, Habra, North 24 Parganas, West Bengal 743233. If we do not resolve your complaint you may approach the Data Protection Board of India.
12. Changes to this policy
When we change this policy we update the date at the top. For material changes we also tell signed-in users in the app or by email before the change applies.