This policy explains how Siddhi LLC (1255 Mirabeau Ln, San Jose, CA 95132, USA) collects and uses personal information through siddhi.today, pharma-manufacturing.today and our Services.
Information we collect
- Account information: name, work email address, company, role and sign-in records of the people who use the Services.
- Records your organization creates: batch records, logbook entries, electronic signatures (name, time and meaning), documents uploaded and similar data. We process these on behalf of your organization, which controls them.
- Billing information: the company's billing name, address, tax identifier and accounts-payable contact. Card and bank details are entered on Stripe's (or, in India, Razorpay's) payment pages and are handled by them; we do not receive or store card numbers.
- Pharmacy platform information: the business, licence and contact details pharmacies and stock owners provide when they register, and the documents they upload.
- Technical information: IP address, browser and device type, and logs needed for security and audit trails. We use only the browser storage needed to keep you signed in; we do not use advertising or tracking cookies.
How we use it
To provide, secure and support the Services; to keep the audit trails regulated customers rely on; to invoice and collect payment; to communicate with you about the Services; and to meet legal obligations. We do not sell personal information and do not share it for cross-context behavioral advertising.
Who we share it with
Service providers that run parts of the Services for us, under contracts that limit their use of the data: database and authentication hosting (Supabase), web hosting (Netlify), payment processing (Stripe; Razorpay in India), and email delivery. In India, Atachi Software Systems Private Limited invoices and supports customers. We may disclose information when the law requires it.
How long we keep it
For as long as the account or subscription is active, and afterwards for as long as needed to meet legal, regulatory and audit obligations. Regulated records are kept as your organization's retention requirements and the law require.
Security
Encryption in transit, access controls, per-company separation of data, and audit trails of changes and signatures.
Your choices and rights
You can ask to access, correct or delete your personal information. California residents have the rights given by the California Consumer Privacy Act, including to know, delete and correct personal information, and not to be discriminated against for using them. Where a record belongs to your employer's regulated records, we will refer your request to your employer. Write to support@siddhi.today.
Children
The Services are for businesses and are not directed to children under 16.
Changes
We will post changes to this policy here with a new date.