Skip to content

    Effective 13 April 2026

    Privacy policy

    This privacy policy describes how Navkardeep Steel Pvt Ltd (“Navkardeep”, “we”, “our”, or “us”) collects, uses, and safeguards information provided by users of the Navkar One ERP mobile application, the erp.navkardeep.com web application, and the navkardeep.com marketing website (collectively, the “Services”).

    Who we are

    Navkardeep Steel Pvt Ltd is a stainless steel manufacturer headquartered in Gujarat, India. We design and operate Navkar One ERP for our own manufacturing operations and supply chain partners.

    Registered contact: info@navkardeep.com

    Information we collect

    We collect only the minimum information required to operate the Services:

    • Phone number — used as the primary login identifier for WhatsApp OTP authentication. Only phone numbers pre-registered by an authorised administrator can log in.
    • Name, role, department, and unit — pulled from our internal employee, customer, or supplier master records once you are recognised by the system.
    • Production and operational data that you submit as part of your job — heats, casts, lots, inspection reports, goods receipts, dispatches, time stamps, and calculated quality metrics.
    • Device information — device name, operating system, and an application-generated session token used to keep you signed in and to enforce the “one active device per user” security rule.
    • Location data (future feature) — if you grant permission, we may in future record GPS coordinates attached to specific field actions such as delivery confirmation or gate entry. This feature is not active at the time of writing and will only be enabled with explicit in-app consent.
    • Camera and photo library access (on request) — used only when you tap a “take photo” or “scan QR code” action inside the Navkar One ERP mobile app.

    How we use the information

    Collected data is used exclusively to:

    • Authenticate you and maintain your session.
    • Record, display, and audit production, procurement, sales, and dispatch activity within our internal ERP.
    • Send you operational notifications (such as new task alerts or OTPs) via WhatsApp and in-app push notifications.
    • Generate invoices, delivery challans, test certificates, and other business documents that are shared with the appropriate counter-party.
    • Improve reliability, diagnose errors, and protect the Services against unauthorised access.

    Sharing and disclosure

    We do not sell, rent, or trade your personal information to any third party. We share data only in these narrow circumstances:

    • Service providers we depend on: Supabase (database and authentication), Anthropic (AI metallurgist assistance with production data de-identified to grade and quantities), and AIsensy / WhatsApp Business API (for OTP delivery). Each of these providers operates under their own published privacy policies and is bound to process data solely on our instructions.
    • Legal obligation: where required by applicable Indian law, court order, or governmental authority.
    • Business counterparties: when you deliberately generate a document (invoice, test certificate, etc.) intended to be shared with a specific customer or supplier.

    Data retention

    Operational records are retained for as long as required for accounting, tax, and warranty compliance under Indian law (typically eight years). Session tokens and one-time passwords are retained only as long as needed for security auditing (up to 90 days), after which they are automatically purged.

    Your rights

    You may, at any time, contact us at info@navkardeep.com to:

    • Request a copy of the personal information we hold about you.
    • Correct any information you believe is inaccurate.
    • Request that your access be deactivated.
    • Raise a concern about how your data is being handled. We will respond within 30 days.

    Please note that production records you created while performing your duties may need to be retained for the retention periods listed above, even after your access is deactivated.

    Children

    The Services are intended for use by Navkardeep employees and authorised business partners only, all of whom are adults. We do not knowingly collect information from anyone under the age of 18.

    Security

    We use industry-standard safeguards including TLS encryption in transit, row-level security on our database, hashed one-time passwords, and device-bound session tokens. No system is perfectly secure — if you suspect that your account has been compromised, contact us immediately.

    Changes to this policy

    We may update this policy from time to time. Material changes will be announced via in-app notification and the updated effective date will be shown at the top of this page.

    Contact

    Questions, concerns, or data requests: info@navkardeep.com.

    Navkardeep Steel Pvt Ltd
    Gujarat, India