Privacy

KrishiScan uses AI services to process crop images and documents. Your data is processed securely and is never sold to third parties. Crop images and documents are used solely to generate your diagnosis or document result and are not stored beyond your session. Aadhaar data is masked and never transmitted in full.

The Service is operated by ELLOTH ("we", "us", "our"), a design-led AI studio based in India. For any privacy-related question you can reach us at contact@elloth.in .

We collect only the minimum needed to run the Service:

• Account data — email or phone number, name (optional), password hash (email-signup only), chosen language, subscription plan.
• Crop scan images — the photos you upload for AI diagnosis (see §4).
• GPS / location data — approximate latitude & longitude for local weather & mandi prices (see §5).
• Phone number & OTP metadata — for phone-based sign-up & login (see §6).
• Guest device fingerprint — an anonymous, non-identifying hash that meters the free 3-scan trial (see §7).
• YojanaAI documents — images of Aadhaar, land records & bank passbook that you choose to upload (see §8).
• Profit AI inputs — district, state, crop, soil type, budget you enter in the form.
• Soil & water data — the soil type, pH, moisture, irrigation source and Soil Health Card details you add or scan, saved against your account so future diagnoses can reuse them.
• Field boundary data — the plot corners you draw or walk, plus area, crop and optional place name for each saved plot.
• Weather data — forecasts and rainfall readings fetched for your rounded coordinates and cached for a short time to keep the app fast and usable offline.
• Agriculture news preferences — the news category, state filter and reading language you choose. We store the preference, never a profile of what you read.
• User profile data — name, language, state, district, farm size and plan, as you enter them in your account.
• Usage data — pages visited, features used, feedback thumbs, session IDs, timestamps.
• Device / network data — IP address, browser type, OS — used for security & abuse prevention.

Crop photographs are processed only for your requested result. KrishiScan does not persist uploaded images. Signed-in History retains text results and timestamps, not the original photographs. Previously retained raw uploads have been removed from the application database.

• Never sold or licensed to any third party.
• This session-only storage commitment applies to KrishiScan. External AI processing is subject to the processor's security and retention terms; we cannot promise that its abuse-monitoring retention is zero.
• Raw crop images and documents are not retained for model training. Text-only history remains available until you delete it or your account.

KrishiScan's live weather widget, Daily Mandi Prices, City Retail (Direct-to-Consumer) rate lookup, 14-Day Forecast, and mini-weather badge all use your device GPS. Location is requested only after your explicit browser permission prompt. We use only the approximate coordinates (rounded) to:

• Pin the whole dashboard to your exact State & District so mandi rates, retail benchmarks and the forecast graph reflect your real market.
• Power the 48-Hour Actionable Weather forecast and the rain-spray guard rail ("Do not spray now — rain is expected in 3 hours").
• Look up the nearest metro city for the City Retail Insights widget (e.g. a Malda farmer sees Kolkata rates).
• Enable the Plot-Level Satellite Field-Health map (Pro tier) — your rounded field lat/lon is used to fetch the NDVI / soil-moisture / water-retention overlay for that exact patch. No name, phone or email is ever attached to the satellite request.
• Fetch local weather from the configured weather service.
• Resolve the nearest district using the configured location service.
• Pre-fill your state in Profit AI / YojanaAI forms.

Satellite access (Pro): tile requests include the viewed coordinates and require an online entitlement check. Location-based imagery is not a live camera feed or an individual-plant diagnosis.

Plot boundary mapping: saved polygons contain the corners you draw or walk, area, crop and optional place details. Verification means you reviewed a boundary, not a certified survey. You can delete a saved plot from Field Mapping or My Plots.

Your GPS coordinates are used strictly for these price-accuracy and advisory features. We do not continuously track your movement in the background, sell location data to third parties, or link it to advertising IDs. If you deny location access, KrishiScan still works — we'll ask you to pick your District manually via the "Please select your District" prompt so the app never falls back to a random default city.

KrishiScan offers phone-number sign-up & login as an alternative to email/password. When you register or log in by phone we ask you to enter your 10-digit Indian mobile number and verify a 6-digit One-Time Password (OTP).

• Your phone number is stored in E.164 format (e.g. +919876543210) and linked only to your KrishiScan account. It is never shared with advertisers or resold.
• OTPs are hashed, expire after 10 minutes, and are consumed on first successful use. We store only the hash and timing metadata — never the raw OTP.
• Rate limits (max 3 OTP requests / phone / 10 minutes and max 5 verification attempts) protect you from brute-force abuse.
• SMS delivery is not connected in this build. Test OTPs are available only to the operator in development logs, never in the browser response.
• We do not send you SMS marketing. Only transactional OTPs and — if you opt in — subscription-renewal reminders.

Anyone can try KrishiScan without signing up — you get 3 free crop diagnoses per device before we ask you to create an account. To keep this fair (and prevent one device from claiming unlimited free scans by refreshing the browser) we generate a lightweight device fingerprint:

• The fingerprint is a one-way hash of your browser user-agent, language, screen size, hardware concurrency and time-zone offset. It contains no name, phone, email, IP or GPS coordinate.
• The hash is stored locally in your browser's localStorage and mirrored on our server against a single counter (0–3). It cannot be reversed to identify you.
• We also log the last-seen IP address purely for abuse investigation (e.g. a bot creating hundreds of fake fingerprints). This metadata is retained for abuse prevention according to the application's operational retention settings.
• Guest scan images and their diagnoses are not persisted — no history is saved. You must sign up to keep scan history.
• Clearing your browser storage will reset the counter on the device side, but the server-side counter for that fingerprint hash remains until it naturally rolls out of our 180-day cleanup window.

Pro demo. The public credentials shown on Pricing open an isolated demo workspace, never the existing account with the same email. Demo visitors share scans, chats and plots. Sessions expire after 30 minutes. Billing, account changes and loan submissions are blocked. Do not upload personal documents or private farm details. Demo content may be removed without notice.

YojanaAI's Document Assistant lets you upload photos of your Aadhaar card, land record and bank passbook so we can auto-extract details for scheme eligibility & PDF generation. This is the most sensitive data we handle, so it gets extra protection:

• In-memory processing. Uploaded document images are held in server RAM only during extraction and are never written to persistent storage.
• Aadhaar masking. Local OCR extracts document text before AI processing. Numeric content is masked before it reaches the AI; only the last four Aadhaar digits are returned as a separate field. Unreadable documents and QR codes are blocked for manual review.
• Bank account masking. Only the last 4 digits of the account number are retained.
• AI processing. Document images stay within the local processing step. Only digit-masked OCR text is sent for AI extraction. Review masked or missing numeric fields manually before preparing an application.
• Purpose limitation. Extracted fields (name, DOB, district, land area, IFSC, etc.) are used only to compute scheme eligibility and to generate the Farmer Profile PDF you download.

KrishiScan's Profit AI and Loan Matching engine (Pro tier) analyse crop economics and match you against KCC · NABARD · MUDRA and state-scheme loan products. To make this useful — and safe — we handle the data behind them as follows:

• Profit AI inputs. The crop, land area, district, expected yield and investment ceiling you enter are stored against your account so you can revisit the recommendation. These numbers are used only to compute the profit prediction and 14-day mandi trend — never sold, never shared with advertisers.
• Net-profit calculator. The calculator runs entirely in your browser. Cost / yield / price inputs are not sent to our servers unless you tap "Save prediction".
• Loan lead handoff. When you tap "I'm interested" on a matched loan product (KCC / NABARD / MUDRA / state scheme), we forward only a lead snapshot (name, phone, state, district, land area, product name, requested amount) to our internal loan-advisory desk so a human can call you back. We do not transmit your Aadhaar / PAN / bank account number in this handoff.
• No auto-underwriting. KrishiScan does not itself underwrite, disburse or guarantee any loan. Final eligibility, interest and disbursal are decided by the issuing bank / NBFC.
• Application drafts. Application-draft PDFs (Standard plan and above) are generated on-demand and streamed straight to your device. We do not archive a copy on the server.
• Consent to be called. Submitting a loan lead constitutes explicit consent for a KrishiScan advisor to contact you on the phone number registered against your account, within business hours, purely for that lead.

Your data is used strictly for:

• Providing the diagnosis, profit prediction, and scheme-matching services you request.
• Showing you daily agriculture news in the category, state and language you picked.
• Improving KrishiScan's own AI accuracy through anonymised aggregate analysis.
• Sending important service notifications (e.g. broadcast advisories, scheme deadlines, subscription renewals).
• Preventing abuse, fraud, and security threats.
• Meeting our legal obligations under Indian law.

We do not use your data for advertising, resale, or third-party model training.

We share limited data with a small set of trusted subprocessors purely to run the Service:

We do not sell personal data to anyone. We may disclose data if compelled by a lawful order from an Indian court or regulator.

• Account data: kept until you delete your account.
• Crop images and documents: processed during the request and not persisted by KrishiScan. History keeps text results only; you can delete those results.
• Uploaded documents: not persisted — only the masked extracted fields are stored.
• Verification metadata: codes are short-lived and hashed. Your account phone number remains until you change it or delete your account.
• Guest device fingerprints: retained for guest scan limits and abuse prevention, without crop images.
• Payment records: where live payments are enabled, records are retained as required by applicable accounting and tax law.
• Usage logs: operational log retention follows the hosting configuration. Raw uploaded images and documents are not intentionally logged.
• Soil & water profile and saved plots: kept until you edit or delete them, or delete your account.
• Weather and news content: cached on our server for everyone's benefit, not against your identity. News articles are removed after 30 days.

Safeguards implemented in the application include password hashing, signed session cookies and access controls. HTTPS, database encryption and provider retention depend on the hosting and service configuration. No system can guarantee absolute security.

Under Indian law (including the DPDP Act 2023) you have the right to:

• Access a copy of your personal data.
• Correct inaccurate data.
• Delete your account and its associated data.
• Withdraw consent for anonymised aggregate use of your scans.
• Lodge a complaint with the Data Protection Board of India.

To exercise any of these rights, email us at contact@elloth.in from the email tied to your account. We reply within 30 days.

KrishiScan is not directed at children under 18. If you believe a minor has created an account, please write to us and we will delete it promptly.

We may update this policy from time to time. Material changes will be announced via an in-app broadcast and by revising the effective date at the top of this page. Continued use of the Service after such notice constitutes acceptance of the updated policy.

Questions, deletion requests, or a data-access ask? Reach us at: