Counter

Privacy policy

Last updated: [EFFECTIVE DATE] · Operated by Novaan Technologies ([REGISTERED ENTITY])

This policy explains what data Counter collects, how we use it, and the choices you have. It applies to the Counter application and our website. Please read it alongside our Terms of Service.

1. Who we are

Counter is operated by Novaan Technologies ([REGISTERED ENTITY], [REGISTERED ADDRESS]). For any privacy question or to exercise your rights, contact us at hello@novaan.in. Our grievance officer under India's Digital Personal Data Protection Act, 2023 is [GRIEVANCE OFFICER NAME], reachable at [GRIEVANCE OFFICER EMAIL].

2. Our role, and yours

For the account and business information you provide about your own organisation, we act as the data fiduciary. For the records you enter into Counter about your customers and suppliers, we act only as a data processor on your behalf — you remain responsible for that data, including having a lawful basis and any consent required to store it in Counter.

3. What we collect

  • Business and account data: your business legal name, GSTIN, state, and address; and each staff login's email address, role, and a securely hashed password.
  • Records you create: products, invoices, payments, purchases, and the customer and supplier details you enter (such as name, phone, email, address, pincode, and GSTIN).
  • Technical and security data: IP addresses and log data used for sign-in security, rate limiting, and troubleshooting.

We do not collect or store payment card numbers — Counter does not process card payments.

4. How we use your data

  • To provide, operate, and support Counter.
  • To secure accounts — sign-in protection, rate limiting, and fraud prevention.
  • To improve the product, using aggregated and de-identified usage patterns.
  • To meet legal, tax, and regulatory obligations.

We do not sell your data, and we do not use it for third-party advertising.

5. Cookies and analytics

We use strictly necessary cookies to keep you signed in; these are stored as secure, HttpOnly cookies. Our website uses a privacy-friendly, cookieless analytics tool to understand aggregate traffic. We do not use advertising or cross-site tracking cookies.

6. Service providers we share with

We share data only with providers that help us run Counter, under contract and only as needed:

  • Hosting: Hetzner, which provides the servers where Counter and its database run.
  • Website analytics: Vercel Analytics, for aggregate, cookieless traffic measurement.
  • Error monitoring: Sentry, where enabled, to capture technical error reports.

7. Where your data is stored

Your data is currently stored on servers located in the European Union (provided by Hetzner). If you access Counter from India, your data is transferred to and stored on these servers. We apply the same protections described here wherever your data is processed.

8. How we protect your data

We use reasonable technical and organisational safeguards, including encryption in transit (TLS), password hashing, secure HttpOnly session cookies, short-lived access tokens, sign-in rate limiting and lockout, role-based access controls, activity audit logs, and per-workspace data isolation so one business's records are not accessible to another. No system can be guaranteed to be completely secure, and we cannot promise absolute security.

9. How long we keep it

We retain your data for as long as your account is active, and for a limited period afterwards to meet legal and operational needs, after which it is deleted. Deleting your account removes its associated records from active systems.

10. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, and you may raise a grievance with our grievance officer. To make a request, email hello@novaan.in. Depending on your plan, a support data export can also be provided on request.

11. Your customers' data

When you store your customers' or suppliers' details in Counter, you are responsible for informing them and obtaining any consent the law requires. We process that data only to provide the service to you, as described in our Terms of Service.

12. Children

Counter is a business tool and is not directed to children. We do not knowingly collect personal data from children.

13. Data breaches

If a personal data breach affects you, we will notify you and the relevant authorities as required by applicable law, using the contact details on your account.

14. Demo workspaces

Demo workspaces use shared sample data that may be visible to other demo visitors and resets periodically. Do not enter real personal or business data into a demo workspace.

15. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above, and where appropriate we will notify you.