Privacy Policy

We take privacy seriously — especially because our users share sensitive documents like Aadhaar and land records to unlock government schemes. This Privacy Policy describes how KrishiScan collects, processes, stores and protects your personal information. By using KrishiScan (the "Service"), you agree to this policy. If you disagree with any part of it, please stop using the Service.

The Service is operated by ELLOTH ("we", "us", "our"), a design-led AI studio based in India. For any privacy-related question you can reach us at contact@elloth.in.

We collect only the minimum needed to run the Service:

• Account data — email or phone number, name (optional), password hash (email-signup only), chosen language, subscription plan.
• Crop scan images — the photos you upload for AI diagnosis (see §4).
• GPS / location data — approximate latitude & longitude for local weather & mandi prices (see §5).
• Phone number & OTP metadata — for phone-based sign-up & login (see §6).
• Guest device fingerprint — an anonymous, non-identifying hash that meters the free 3-scan trial (see §7).
• YojanaAI documents — images of Aadhaar, land records & bank passbook that you choose to upload (see §8).
• Profit AI inputs — district, state, crop, soil type, budget you enter in the form.
• Usage data — pages visited, features used, feedback thumbs, session IDs, timestamps.
• Device / network data — IP address, browser type, OS — used for security & abuse prevention.

When you snap or upload a leaf photo, the image is transmitted over HTTPS to our servers and forwarded to our vision-AI subprocessor (in no-retention API mode) purely to produce a diagnosis. We store a copy of the image, the AI-generated diagnosis, and a session timestamp in our database so you can revisit past scans from History. Images are:

• Never sold or licensed to any third party.
• Never used to train third-party AI models. The vision provider is called with no-retention API settings.
• Optionally used, in fully anonymised aggregate form, to improve KrishiScan's own diagnostic accuracy (e.g. tracking which diseases are most common in Maharashtra). You can opt out — see §13.

KrishiScan's live weather widget, Daily Mandi Prices, City Retail (Direct-to-Consumer) rate lookup, 14-Day Forecast, and mini-weather badge all use your device GPS. Location is requested only after your explicit browser permission prompt. We use only the approximate coordinates (rounded) to:

• Pin the whole dashboard to your exact State & District so mandi rates, retail benchmarks and the forecast graph reflect your real market.
• Look up the nearest metro city for the City Retail Insights widget (e.g. a Malda farmer sees Kolkata rates).
• Fetch live weather from Open-Meteo (a keyless public API).
• Reverse-geocode your city name from BigDataCloud (client-side).
• Pre-fill your state in Profit AI / YojanaAI forms.

Your GPS coordinates are used strictly for these price-accuracy and advisory features. We do not continuously track your movement in the background, sell location data to third parties, or link it to advertising IDs. If you deny location access, KrishiScan still works — we'll ask you to pick your District manually via the "Please select your District" prompt so the app never falls back to a random default city.

KrishiScan offers phone-number sign-up & login as an alternative to email/password. When you register or log in by phone we ask you to enter your 10-digit Indian mobile number and verify a 6-digit One-Time Password (OTP).

• Your phone number is stored in E.164 format (e.g. +919876543210) and linked only to your KrishiScan account. It is never shared with advertisers or resold.
• OTPs are hashed, expire after 10 minutes, and are consumed on first successful use. We store only the hash and timing metadata — never the raw OTP.
• Rate limits (max 3 OTP requests / phone / 10 minutes and max 5 verification attempts) protect you from brute-force abuse.
• When we go live with SMS delivery, OTPs will be routed via a licensed Indian telecom aggregator (Twilio or MSG91). During pilot / dev builds the OTP is displayed inside the app for testing convenience.
• We do not send you SMS marketing. Only transactional OTPs and — if you opt in — subscription-renewal reminders.

Anyone can try KrishiScan without signing up — you get 3 free crop diagnoses per device before we ask you to create an account. To keep this fair (and prevent one device from claiming unlimited free scans by refreshing the browser) we generate a lightweight device fingerprint:

• The fingerprint is a one-way hash of your browser user-agent, language, screen size, hardware concurrency and time-zone offset. It contains no name, phone, email, IP or GPS coordinate.
• The hash is stored locally in your browser's localStorage and mirrored on our server against a single counter (0–3). It cannot be reversed to identify you.
• We also log the last-seen IP address purely for abuse investigation (e.g. a bot creating hundreds of fake fingerprints). This IP is rotated after 90 days.
• Guest scan images and their diagnoses are not persisted — no history is saved. You must sign up to keep scan history.
• Clearing your browser storage will reset the counter on the device side, but the server-side counter for that fingerprint hash remains until it naturally rolls out of our 180-day cleanup window.

YojanaAI's Document Assistant lets you upload photos of your Aadhaar card, land record and bank passbook so we can auto-extract details for scheme eligibility & PDF generation. This is the most sensitive data we handle, so it gets extra protection:

• In-memory processing. Uploaded document images are held in server RAM only during extraction and are never written to persistent storage.
• Aadhaar masking. Only the last 4 digits of any Aadhaar number are stored; the first 8 digits are permanently discarded before any DB write.
• Bank account masking. Only the last 4 digits of the account number are retained.
• No sharing. These documents are never sent to any partner, advertiser, or model-training pipeline.
• Purpose limitation. Extracted fields (name, DOB, district, land area, IFSC, etc.) are used only to compute scheme eligibility and to generate the Farmer Profile PDF you download.

KrishiScan's Profit AI and Loan Matching engine (Pro tier) analyse crop economics and match you against KCC · NABARD · MUDRA and state-scheme loan products. To make this useful — and safe — we handle the data behind them as follows:

• Profit AI inputs. The crop, land area, district, expected yield and investment ceiling you enter are stored against your account so you can revisit the recommendation. These numbers are used only to compute the profit prediction and 14-day mandi trend — never sold, never shared with advertisers.
• Net-profit calculator. The calculator runs entirely in your browser. Cost / yield / price inputs are not sent to our servers unless you tap "Save prediction".
• Loan lead handoff. When you tap "I'm interested" on a matched loan product (KCC / NABARD / MUDRA / state scheme), we forward only a lead snapshot (name, phone, state, district, land area, product name, requested amount) to our internal loan-advisory desk so a human can call you back. We do not transmit your Aadhaar / PAN / bank account number in this handoff.
• No auto-underwriting. KrishiScan does not itself underwrite, disburse or guarantee any loan. Final eligibility, interest and disbursal are decided by the issuing bank / NBFC.
• Application drafts. Application-draft PDFs (Standard plan and above) are generated on-demand and streamed straight to your device. We do not archive a copy on the server.
• Consent to be called. Submitting a loan lead constitutes explicit consent for a KrishiScan advisor to contact you on the phone number registered against your account, within business hours, purely for that lead.

Your data is used strictly for:

• Providing the diagnosis, profit prediction, and scheme-matching services you request.
• Improving KrishiScan's own AI accuracy through anonymised aggregate analysis.
• Sending important service notifications (e.g. broadcast advisories, scheme deadlines, subscription renewals).
• Preventing abuse, fraud, and security threats.
• Meeting our legal obligations under Indian law.

We do not use your data for advertising, resale, or third-party model training.

We share limited data with a small set of trusted subprocessors purely to run the Service:

We do not sell personal data to anyone. We may disclose data if compelled by a lawful order from an Indian court or regulator.

• Account data: kept until you delete your account.
• Crop scans & diagnoses: retained for as long as your account is active so you can revisit them in History; permanently deleted 90 days after account deletion.
• Uploaded documents: not persisted — only the masked extracted fields are stored.
• Phone number & OTP metadata: phone number retained until account deletion; OTP hashes purged 24h after use.
• Guest device fingerprints: rolled out of the counter table after 180 days of inactivity.
• Payment records: kept for 7 years to comply with Indian tax law.
• Usage logs: rotated after 90 days.

We apply reasonable, industry-standard safeguards including TLS 1.3 in transit, encryption at rest for our database, bcrypt-hashed passwords, JWT-signed sessions, RBAC for admin endpoints, and regular dependency-security audits. No system is 100% impregnable, but we work continuously to make yours as safe as possible.

Under Indian law (including the DPDP Act 2023) you have the right to:

• Access a copy of your personal data.
• Correct inaccurate data.
• Delete your account and its associated data.
• Withdraw consent for anonymised aggregate use of your scans.
• Lodge a complaint with the Data Protection Board of India.

To exercise any of these rights, email us at contact@elloth.in from the email tied to your account. We reply within 30 days.

KrishiScan is not directed at children under 18. If you believe a minor has created an account, please write to us and we will delete it promptly.

We may update this policy from time to time. Material changes will be announced via an in-app broadcast and by revising the effective date at the top of this page. Continued use of the Service after such notice constitutes acceptance of the updated policy.

Questions, deletion requests, or a data-access ask? Reach us at: