Privacy Policy

Last Updated: September 29, 2026  |  Effective for SRB Power App (Android & iOS)

Welcome to SRB Power. We are committed to protecting your privacy and being transparent about how your personal information is collected, used, stored, and shared when you use our mobile application and associated web services (collectively referred to as the "Service").

By using the SRB Power App, you agree to the practices described in this Privacy Policy. Please read it carefully.

1. Who We Are

SRB Power is a solar energy company operating in India. Our mobile application is an internal employee management and business operations tool used by our staff, field agents, and authorized business partners. Our registered office is located in Jaipur, Rajasthan, India.

For privacy-related inquiries, you may contact us at: privacy@srbsolar.com

2. Information We Collect

We collect only the information necessary to provide our services effectively and securely. This includes:

a) Account & Identity Information

• Full name, employee ID, designation, and department
• Email address and mobile phone number
• Login credentials (passwords are never stored in plain text)
• Profile photograph (optional, if provided)

b) Attendance & Location Data

• GPS coordinates captured at the moment of check-in and check-out to verify on-site presence
• Timestamps of attendance events
• We do not track your location continuously or in the background

c) Device & Technical Information

• Device model, operating system, and OS version
• Unique device identifiers (used for session management only)
• App version and crash/error logs
• IP address and network type at time of login

d) Business & Transactional Data

• Sales orders, purchase records, and inventory data you create within the app
• Leave applications, payslip information, and HR-related records
• Documents you upload or attach (such as receipts or site photos)

e) Usage Data

• Features accessed within the app and frequency of use
• Session duration and navigation patterns
• This data is used solely to improve usability and fix bugs

3. How We Use Your Information

We use the information we collect for the following purposes:

• Authentication & Security: To verify your identity and provide secure access to company systems and resources.
• Attendance Management: To accurately record employee presence, overtime, and leave records for payroll processing.
• Business Operations: To facilitate day-to-day operations including sales tracking, inventory management, and task assignment.
• Communication: To send you important notifications about your account, attendance status, approvals, or company announcements.
• Compliance & Audit: To maintain proper records as required under Indian labor laws and company policy.
• App Improvement: To analyze usage patterns and fix bugs to improve the app experience.
• Legal Obligations: To comply with applicable laws, regulations, court orders, or lawful government requests.

We do not use your data for advertising, third-party marketing, or selling to data brokers.

4. Data Sharing & Disclosure

We do not sell, rent, or trade your personal data to any third party. We share your information only in the following limited circumstances:

• Internal Teams: HR, Finance, and Operations teams who require access to perform their job functions.
• Cloud Service Providers: Amazon Web Services (AWS) hosts our servers and databases. AWS processes data strictly as a data processor under a binding agreement and does not access your data independently.
• Technical Service Providers: Frappe Technologies (developers of the ERP framework) may provide support access in limited troubleshooting scenarios, under confidentiality obligations.
• Legal Authorities: We may disclose information if required by law, court order, or to protect the rights, property, or safety of SRB Power, its employees, or the public.

5. Data Retention

We retain your personal data for as long as you maintain an active account or employment relationship with SRB Power. When your account is closed or employment ends:

• Operational data (attendance, payroll) is retained for up to 5 years as required by Indian labor and tax regulations.
• Login credentials and device information are deleted within 30 days of account closure.
• Upon a formal account deletion request, all personal identifiers are removed within 90 days, except where legally required to be retained.

6. Data Security

We implement industry-standard security measures to protect your information:

• All data in transit is encrypted using TLS 1.2 / 1.3 (HTTPS)
• Data at rest is stored on AWS encrypted EBS volumes
• Access to production systems is restricted to authorized personnel only
• Passwords are stored using one-way bcrypt hashing
• Regular security reviews and access audits are conducted

While we take every reasonable precaution, no method of electronic transmission or storage is 100% secure. We encourage you to keep your login credentials confidential.

7. Your Rights

As a user of our services, you have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Correction: Request correction of any inaccurate or incomplete data.
• Right to Deletion: Request permanent deletion of your account and personal data.
• Right to Restrict Processing: In certain circumstances, request that we limit how we use your data.
• Right to Data Portability: Request a machine-readable export of your data.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please visit our Account Deletion & Data Request page or email us at privacy@srbsolar.com. We will respond within 30 business days.

8. Location Data

The SRB Power app uses your device's GPS location only at the exact moment you tap Check-In or Check-Out. This is done to verify your physical presence at a work location. We do not track your location continuously, in the background, or outside of these explicit attendance events.

You can revoke location permission at any time from your device settings. This will prevent attendance-based features from working but will not affect other app functionality.

9. Cookies & Similar Technologies

Our mobile app does not use advertising cookies or third-party tracking. We use session tokens (secure HTTP cookies) solely to maintain your authenticated login state. These are automatically cleared when you log out or the session expires. You may also clear them through your device settings.

10. Third-Party Links

Our app may contain links to external websites or resources. We are not responsible for the privacy practices of those third-party sites. We encourage you to review their privacy policies independently.

11. Children's Privacy

SRB Power services are intended exclusively for employees, business partners, and professionals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18. If you believe a minor has submitted data through our service, please contact us immediately.

12. Changes to This Policy

We may revise this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable laws. When we make material changes, we will notify you via the app or email at least 7 days before the changes take effect. The "Last Updated" date at the top of this page will always reflect the most recent revision.

Continued use of the app after the effective date constitutes your acceptance of the revised policy.

13. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of India, including the Information Technology Act, 2000 and applicable rules thereunder. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts in Jaipur, Rajasthan.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: