Privacy Policy for Jeet Fresh

Effective date: 6 September 2026

1. About this policy

Jeet Fresh is a role-based farm-to-market business application available in India. It is intended only for authorized business users who are at least 18 years old, including approved administrators, accounts personnel, farmers, field employees and other authorized business participants. The application is not directed to children.

This Privacy Policy explains how Jeet Fresh collects, uses, stores, discloses, protects and retains personal data when authorized users access or use the Jeet Fresh mobile application, backend services and related support services.

2. Who operates Jeet Fresh

Jeet Fresh is operated by Jeet Fresh, a proprietorship owned by Meenakshi.

Privacy, support and grievance email: business@jeetfresh.com
Privacy and grievance contact: Meenakshi

3. Who may use the service

Jeet Fresh is restricted to authorized business users. Accounts are created only by an authorized Jeet Fresh Admin. There is no public self-registration at launch. Users must be at least 18 years old.

4. Personal data we process

Depending on role and workflow, we may process:

• Account and role data: name, mobile number, email address, internal identifiers, role, permissions, status and party or employee profile information. Passwords are stored only as secure hashes.
• Authentication and security data: token and session records, token hashes, device or browser descriptions, optional device identifiers, IP address, user agent, request identifiers, login/logout events, security events and audit records.
• Farm and agricultural data: farmer contact/address details, farm identifiers, crop, area, location details, optional coordinates, assignments, site visits, condition, quantities, rates, schedules, offers, incidents and approvals.
• Labour, transport and operations data: employee/contractor information, attendance/work records, labour counts and rates, vehicle/driver/trip details, costs, stock and approvals.
• Financial and tax data: party details, addresses, GSTIN, PAN, payment terms, bank/UPI details, invoices, item/tax data, payments, UTR/bank references, allocations, receipts, reversals, balances, ledgers, payroll, commission and audit history.
• Documents and media: farm photos/videos, invoices, bills, tax documents, delivery challans, payment proofs and related metadata.
• Notifications: message, type, priority, status, delivery/read time, channel preferences and safe failure information.

Location coordinates are processed only when supplied through an applicable workflow and are not used for advertising or behavioral profiling.

5. How we collect and use data

Data is provided by authorized users or Admins, generated through approved business workflows, selected for upload, or created by authentication, security and audit processes.

We use it for account and role access; farm, field, labour and transport operations; purchases, sales, invoices, payments, payroll, commission and accounting; contracts; legal and tax compliance; security, fraud prevention and audit; authorized reporting; and necessary service or support communications.

We do not use personal data for advertising, behavioral profiling or sale. The application does not use advertising or analytics SDKs.

6. Authentication and OTP status

Authorized users may use password login. Public self-registration, mobile OTP registration, OTP login, OTP verification and OTP-based password recovery are disabled at launch and fail closed. We do not use a fake, static, bypass or master OTP. We will review this policy before enabling OTP, push, SMS or WhatsApp processing.

7. Hosting and international processing

Hostinger provides the production hosting/API infrastructure, PostgreSQL database hosting, private file storage, Business Email service and scheduled weekly VPS backup service used by Jeet Fresh. The production server is in Kuala Lumpur, Malaysia. Personal data may therefore be transferred to, stored and processed in Malaysia.

Jeet Fresh has approved this cross-border processing for business operations and uses appropriate contractual, access-control and technical safeguards. The first successful weekly backup and its recovery coverage remain pending verification. Backups are used for resilience, not advertising or independent use.

Information may also be disclosed to authorized Jeet Fresh personnel, processors acting on our instructions, confidential professional advisers, or lawful authorities where required. We do not sell personal data or share it with advertising networks or data brokers.

8. Documents, exports and security

Production documents and farm media are private by default, stored outside public web directories and made available only through authenticated, authorized functions. Safeguards include HTTPS, secure mobile token storage, password hashing, role/ownership controls, file validation, server-generated filenames, transaction controls, session revocation and audit records.

Authorized Admin or Accounts staff may export reports for legitimate business, accounting, tax, audit or legal purposes. Exports must be protected, limited to authorized recipients and securely deleted when no longer required. Temporary server exports are intended to be deleted within 24 hours and, where delayed retrieval is necessary, no later than seven days.

9. Retention and deletion

We retain information only for its approved purpose, operational need, legal requirement, claim or legal hold. Our provisional retention approach is:

• financial, tax, invoice, payment, payroll and related audit records: up to 10 years after the relevant period, or longer under a legal hold;
• user profiles: for the relationship and normally 90 days after verified closure, then deletion or de-identification except required records;
• access tokens: until expiry, logout or revocation;
• session, device and ordinary security logs: generally 180 days to one year;
• farm media: normally 12 months after closure, or up to three years for documented dispute risk;
• ordinary notifications: normally 12 months;
• temporary server exports: normally 24 hours and at most seven days where required; and
• backups: until scheduled expiry, with approved deletions reapplied after restoration.

Tax, GST, accounting, employment, security, audit and dispute records may be retained despite account closure or a deletion request. Unnecessary personal data should be deleted or de-identified where lawful.

Automated production deletion is currently disabled pending professional review and approved implementation. Until then, valid requests and scheduled reviews are handled through a controlled process. This does not permit indefinite retention without a documented purpose.

10. Privacy rights and requests

Subject to applicable law, individuals may request information, access, correction, completion, updating or deletion, withdraw consent where applicable, or raise a grievance by emailing business@jeetfresh.com.

We verify identity using registered account details and proportionate non-secret information. We never ask a requester to email a password, OTP, private key or complete financial credential. Requests may be limited where identity cannot be verified or retention is required for law, tax, accounting, employment, security, fraud prevention, disputes or legal claims.

11. Children

Jeet Fresh is for authorized business users aged 18 or older and is not directed to children. Contact us if you believe a child's data has been processed improperly.

12. Changes to this policy

We may update this policy when services, providers, legal duties or data practices change. The current version and effective date will be posted on this page. Where appropriate, material changes will also be communicated through an available in-app or registered contact channel.

13. Contact and grievance redressal

Privacy and grievance contact: Meenakshi
Email: business@jeetfresh.com