Privacy Policy

Goal Sarathi (“Goal Sarathi”, “we”, “us”, or “our”) is a goal-achievement platform for Indian SME & MSME business owners, operated by Udhyam Sarathi (a proprietorship based in Jam Khambhalia, Gujarat, India). This Privacy Policy explains what we collect, why we collect it, and how we protect it when you use goalsarathi.com and the Goal Sarathi web/PWA application (the “Service”).

By using the Service you agree to this Policy. If you do not agree, please do not use the Service.

1. Information We Collect

We collect only the information needed to provide the Service:

Account Information

• Your name and email address (used for email OTP sign-in and Google sign-in when enabled).
• Phone number and WhatsApp number (optional — used only when you choose WhatsApp digests).
• Preferred language and time zone.

Business Information You Enter

• Business name, industry, financial-year start month.
• Historical turnover figures and annual/quarterly/monthly goals.
• Departments, team members and their roles inside your business.
• Daily sales and collection entries, tasks, schedules and reviews.

Usage & Technical Information

• Basic activity logs (who did what inside the app), so owners can audit changes.
• Device and browser information sent by your browser (IP address, user agent, timestamps).
• Preference settings stored locally in your browser (theme, sidebar state, offline entry queue).

We do not knowingly collect any special-category personal data (health, biometric, financial account credentials, etc.). Please do not enter such information into the Service.

2. Why We Collect It

• To provide the Service — create your account, save your goals and daily entries, generate progress digests and reports.
• To secure your account — deliver one-time login codes and detect suspicious activity.
• To operate features you request — e.g. WhatsApp share links, AI Sarathi assistant, offline sync.
• To communicate — send transactional messages (login codes, product changes, important notices).
• To improve the product — understand aggregate usage patterns and diagnose bugs.

We do not sell your personal data. We do not use your data for advertising or profiling.

3. Where Your Data Lives

Your data is stored in a managed PostgreSQL database hosted by Supabase, our cloud infrastructure provider. Data is transmitted over TLS and stored encrypted at rest by the provider. AI Sarathi requests are processed through our AI Gateway strictly to answer your own queries; we do not use your conversations to train models.

4. Who Can See Your Data

• Your business team. Goal Sarathi is multi-tenant. Data you create belongs to a specific business workspace and is visible only to members of that business according to their role (owner / manager / member). Members cannot see data from other businesses.
• Service providers. Trusted sub-processors that help us run the Service (managed cloud hosting and database, email/OTP delivery providers, our AI Gateway for the assistant). They are contractually bound to process data only on our instructions.
• Legal requirements. When required by Indian law, court order, or to protect the rights, property or safety of Goal Sarathi, our users, or the public.

We never sell or rent personal data to third parties.

5. Cookies &Amp; Local Storage

We use browser storage only for functional purposes: keeping you signed in, remembering your preferences (theme, language, sidebar state) and queuing daily entries when you are offline. We do not use third-party advertising or tracking cookies.

6. Retention &Amp; Deletion

We retain your data for as long as your account is active. You may request deletion of your account and associated business data at any time by writing to kharajignesh@gmail.com from your registered email. We will complete deletion within 30 days, subject to any legal obligation to retain certain records.

If you are a team member (not the business owner), please contact your business owner to remove you from that workspace; we can also remove your personal profile on request.

7. Your Rights Under India's DPDP Act 2023

As a Data Principal you have the right to:

• Access the personal data we hold about you.
• Correct or update inaccurate data.
• Erase your data when it is no longer required.
• Withdraw consent at any time for optional processing.
• Nominate another individual to exercise your rights in case of incapacity or death.
• Grievance redressal — reach our Grievance Officer using the contact details below.

To exercise any of these rights, email kharajignesh@gmail.comfrom your registered email. We aim to respond within 15 working days.

8. Children

The Service is intended for business owners and their team members and is not directed at children under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us data, please contact us and we will delete it.

9. Changes To This Policy

We may update this Policy from time to time. Material changes will be notified inside the app or by email. The “Last updated” date at the top of this page always reflects the current version.

10. Contact &Amp; Grievance Officer

Udhyam Sarathi
Jam Khambhalia, Gujarat, India
Email: kharajignesh@gmail.com

For any privacy questions, data-access requests or grievances, please email us at the address above with the subject line “Privacy Request — Goal Sarathi”.