Privacy Policy

Information used by PoultryFlow

Account information includes your name, verified email, required phone number, language and account settings. Business information can include business and Team IDs, locations, shed and flock details, products, daily activity, stock, purchases, costs, invoices, payment records and business contacts. The information collected depends on the features you use.

Messages, Community posts, Bazaar listings, comments, group membership, support requests and reports contain the information you submit. Uploads can include profile pictures, photographs, videos and documents, together with file names, types, sizes and storage references. Do not include another person's private information unless you have permission or another appropriate basis to use it.

Browser cookies support sign-in. Local browser storage can hold workspace preferences, saved drafts and pending requests, including their entered contents. These copies may remain on the device until resolved, discarded or cleared; use care on shared devices.

How information is used

PoultryFlow uses information to authenticate users, maintain business records, calculate stock and financial results, provide invoices and reports, operate connections and messages, show listings and Community content, provide support, review safety reports and prevent misuse. Owners control team business and module permissions. A connection request does not by itself authorize access to every business record.

Operational activity indicators measure active businesses, farms making daily entries, active Bazaar sellers, buyer enquiries and returning businesses to assess service use. Private business records and messages are not provided to advertisers. Paid promotions are not activated in the current application.

Who can see your information

Private farm, financial and clinical records require authorized access. Team members see information allowed by their business and module permissions. Connected businesses receive records only within the sharing or transaction access you approve. Transactions can create records belonging to both parties.

Business directories and shared content can display your business name, business identifier, role, location and profile picture. Your registered phone number and email are not automatically published as directory contact fields. Contact details you choose to include in a listing, post, message or document are visible to that content's audience.

Bazaar listings and Community posts share the selected content and attachments with the audience allowed by the feature and your selected visibility. Community visibility can include the eligible public app audience, connections or a group. Public poultry articles can be read without signing in. Messages are available to their intended business participants and authorized team members. Audience members can copy or reshare information they receive.

Authorized support and moderation reviewers can access submitted support information and reported content when investigating a case. Safety records can include the reporter's identity, report reason, original and current content snapshots, and attachments. Report details are not published in the ordinary Community feed.

A manual share, download or print can place information outside PoultryFlow and its access controls. Removing content or deleting an account cannot remove copies already received, downloaded or shared by others.

Service providers, location and weather

The existing Supabase project in Mumbai provides authentication, database and file storage. Vercel hosts and deploys the application. GitHub manages application source and development/deployment metadata. Providers may process service information through their infrastructure and operations in other locations; this notice does not promise that all processing occurs in Mumbai.

Saved farm and shed locations, such as town or district names and coordinates, are used to provide weather. Location search terms and country filters are sent to Open-Meteo Geocoding, and forecast coordinates are sent to MET Norway through our server. These weather requests do not send your account email, private financial records or messages. Weather uses saved business locations rather than continuous device location tracking.

Verification and recovery emails use the configured email delivery service and support@poultryflow.in sender configuration. Hosting and authentication services can process request and security information as part of delivering and protecting the service. Provider logs and backups are subject to their own controls; a single verified retention period for all providers is not specified here.

PoultryFlow does not add automated SMS or WhatsApp messages. You can copy or share information manually using the controls you choose.

Security and sign-in information

The service uses HTTPS for data in transit, authentication and permission checks to restrict access, and authentication-provider password hashing. A team member's temporary credentials are displayed to the owner when created or reset; the member must replace the temporary password before ordinary business access. Protect your password and devices, and share team credentials only with the intended member.

Sign-in and recovery abuse checks process request IP information and store hashed IP-derived or email-derived keys, attempt counters and timing. These hashes still support security checks and are not treated as anonymous data. An attempt window resetting does not erase the stored key; these security records currently have no automatic expiry deadline.

Photos, videos and documents

New and replacement ordinary photos may be resized and converted before storage, removing unnecessary photo metadata, including GPS information. Financial document images, PDFs and videos are not processed through that ordinary photo conversion, so their original contents and metadata may remain. Review files before sharing them. Existing photos are not bulk-recompressed.

A conversion fallback can use a restricted temporary original. Conversion or cancellation removes originals when storage operations succeed; expired originals and unreferenced abandoned uploads qualify for scheduled cleanup. Referenced files remain associated with their records and access permissions. A failed cleanup can require a later retry.

How long information remains

Account and business records remain available while needed to operate your account and maintain the history you record. Editing, voiding or withdrawing an entry can preserve its transaction or audit history. Community posts leave the ordinary shared feed after 72 hours; this visibility limit does not automatically erase stored history, referenced files or moderation evidence.

Deletion removes private data through the process below. Shared invoices, dispatch, payment and debt history, clinical records, received messages and group copies, safety reports, supporting files and identifiers needed to keep retained records valid can remain to preserve other parties' records, outstanding obligations, security or audit evidence. These retained shared and audit records currently have no automatic expiry date. Contact support@poultryflow.in to request a review of a particular record's purpose, retention or deletion; removal can be limited by another party's records or an applicable obligation.

Account deletion

My Businesses offers separate Archive and Delete choices. Archiving hides a business from active work and discovery while preserving its records for restoration. After reviewing and confirming deletion, an owner can permanently remove a business and its private records even when it has saved activity. Shared invoices, payments, delivered messages and other records needed by participating businesses or required for security and audit history may remain. The allocated Business ID stays reserved. Managing one business leaves your login and other businesses in place.

You can delete your account from the account menu or at poultryflow.in/account-deletion in a browser, without reinstalling the app. Sign in, review the scope and retained record categories, and confirm with your current password. An owner deletes their account and private data across all owned businesses and removes team access. A team member deletes their individual sign-in and access; the owner's farm and business records remain. Contact support@poultryflow.in if you cannot access your account.

Confirmed deletion disables ordinary account access and starts a tracked, resumable cleanup of private workspace and profile information, publication content, recovery data and unshared files. File or authentication-provider failures remain pending and are retried. Required cleanup must succeed before deletion is shown as complete. Recently issued upload links must expire before related temporary originals can be finally removed. Completion depends on those expiry times, scheduled work and successful provider operations; it is not instant. The deletion page shows progress using a private receipt on your browser.

The retained categories above, provider security records and backups can outlast account access. Disabling or deleting a sign-in does not mean every provider trace is immediately physically erased. Deletion does not settle or cancel debts. Review and export important records before confirming.

Deletion attempts to clear recognized account-specific saved drafts and pending requests on the browser used to confirm it. Browser storage errors, unrecognized local copies, other devices and downloaded files may require separate clearing. Clear site data on other devices and remove downloaded copies yourself. A deletion request does not automatically send an email or WhatsApp message; its status is recorded in the deletion process itself.

Your choices and privacy requests

Use account, business, team and sharing settings to review or correct information and control access. Use available print, download and CSV controls to obtain copies of selected records. You can contact support@poultryflow.in about access, correction, retention, deletion or other privacy rights applicable to you. We may need to verify your identity and authority over the affected account or business before acting. Some changes must preserve another party's transaction history or applicable obligations.

Recovery and changes to this notice

Database recovery and uploaded-file recovery are separate. Restoring database records alone does not restore missing files. Printed reports and CSV files are copies of selected records, not a complete account or uploaded-file backup. Keep independent copies of important information. Source-control history preserves application code and does not itself restore customer records or files. Recovery configuration and successful restoration still need verification; this notice does not guarantee recovery.

This notice describes the current application as of the date shown. Updated notices will be published here when relevant service practices change.