Your Privacy Matters
Effective Date: March 12, 2026 · Last Updated: March 12, 2026
Kakshlink Innovation ("we", "us", or "our") operates the PharmaBandhu mobile application (the "App"). This Privacy Policy explains what personal data we collect, how we use it, and your rights under applicable law including India's Digital Personal Data Protection Act, 2023 (DPDP Act).
By using PharmaBandhu, you agree to the practices described in this policy. If you do not agree, please uninstall the App.
1. Data We Collect
Identity data: full name, email address, mobile number
Business data: firm name, drug license number, GST number, designation
Location data: city, state, and zone (for business matching purposes)
Profile data: supply type, brand portfolio, years of experience, date of birth
Documents: drug license images uploaded for verification
Usage data: search queries, profile views, app activity, session timestamps
Device data: device model, OS version, unique device identifiers
Referral data: referral codes used during registration
Camera data: images captured using the camera (for drug license upload only)
2. How We Use Your Data
To register and manage your PharmaBandhu account
To connect pharmaceutical stockists with retailers across India
To verify your business identity and maintain platform integrity
To process drug license verification and profile approvals
To send account notifications and push notifications via Firebase Cloud Messaging
To improve search results, platform features, and user experience
To display relevant advertisements through Google AdMob
To analyse usage trends and improve the application
To comply with legal obligations under Indian law
3. Data Sharing & Third-Party Services
Your verified business profile (firm name, city, supply type, brands) is visible to other verified users on the platform
We do NOT sell your personal data to any third party
We do NOT share personal contact details (email, mobile) without your explicit consent
Firebase Cloud Messaging (Google LLC) — used for push notifications; may collect device tokens
Google AdMob (Google LLC) — used to display ads; may collect advertising ID and usage data
Google Play Services — used for core Android functionality
Data may be disclosed to Indian authorities if required by law or court order
Aggregated, anonymised analytics may be used internally for platform improvement
4. Data Storage & Servers
Your account and business data is stored on our secure VPS servers located in India
Data is transmitted over HTTPS (TLS encryption) between the app and our servers
A local encrypted SQLite database on your device stores session and cache data
Passwords are securely hashed using the bcrypt algorithm — never stored in plain text
Document images (drug licenses) are stored securely on our servers with restricted access
Uninstalling the app removes all locally cached data from your device
5. Permissions We Request
CAMERA — to capture drug license and business document photos for profile verification
INTERNET — required to connect to our servers for all app functionality
READ/WRITE STORAGE — to save and upload document images from your device
POST_NOTIFICATIONS — to receive account alerts and platform updates
All permissions are used solely for the stated purpose and not shared with third parties
6. Data Security
All data transmissions are encrypted using HTTPS/TLS
Passwords are hashed using bcrypt — never stored in plain text
Access to servers is restricted to authorised personnel only
Regular security reviews are conducted to protect your data
In case of a data breach, affected users will be notified promptly as required by DPDP Act 2023
7. Data Retention
Your account data is retained as long as your account is active
After account deletion, personal data is deleted within 30 days
Business verification documents are retained for 1 year for compliance purposes
Usage logs and analytics data are retained for up to 90 days
You may request earlier deletion by contacting our support team
8. Your Rights (DPDP Act 2023)
Access: Request a copy of your personal data we hold
Correction: Update or correct inaccurate information from your Profile page
Deletion: Request full account deletion from Profile → Delete Account
Grievance: File a complaint with our Data Protection Officer within 30 days
Nomination: Nominate a person to exercise rights on your behalf in case of incapacity
To exercise any right, contact us at kakshlink2025@gmail.com
9. Children's Privacy
PharmaBandhu is a professional B2B platform intended for adults aged 18 and above
We do not knowingly collect data from anyone under 18 years of age
If we discover that a child under 18 has provided personal data, we will delete it immediately
Parents or guardians who believe their child has registered should contact us immediately
10. Changes to This Policy
We may update this Privacy Policy from time to time
Users will be notified of significant changes via the app or email
Continued use of the App after changes constitutes acceptance of the updated policy
The "Last Updated" date at the top of this page will reflect the latest revision
Data Protection Officer
For any privacy concerns, data requests, or grievances under DPDP Act 2023:
Kakshlink Innovation, India
We aim to respond to all requests within 30 days.
Third-Party Privacy Policies
Our app uses the following third-party services. Please review their policies: