Privacy Policy

Nesayo is billing and AI software for Indian pharmacies. This page explains, in plain language, what data we handle and how — in line with India's Digital Personal Data Protection Act, 2023 (DPDP Act).

What we collect

• Your business details — pharmacy name, phone number, and the settings you configure.
• The data you enter to run your shop — bills, stock and batches, customers and their udhaar/credit entries, prescriptions you scan, and the Schedule H1 register generated from your sales.
• Usage events — clicks and errors inside the app, so we can find and fix problems. Phone numbers and emails are masked in these logs.
• Voice recordings — only while you are holding the microphone button for voice billing. See below.

Voice billing

• The microphone is on only while you are using voice billing, and stops the moment you tap it off, save the bill, or leave it idle for 45 seconds. Nothing is recorded at any other time.
• Your browser converts speech to text. In Chrome and Edge, that conversion happens on Google's servers, so the audio of what you say to the microphone passes through Google. This is your browser's own speech feature, not something we add.
• We keep a copy of the recording and what we heard for 90 days, so we can find out why a medicine was misheard and fix it. It is stored with your pharmacy's own data, is never shared, and is deleted automatically after 90 days.
• If you would rather we kept no recordings at all, email [email protected] and we will switch it off for your shop. Voice billing keeps working.

Screen recording for support

So we can see what went wrong when something breaks, Nesayo records a playback of the screens you use in the app — what you clicked and what was shown. PINs, OTPs, phone numbers and email addresses are never captured. This runs on our own servers, not a third-party analytics company, is kept for 90 days and then deleted, and only we can view it. Email [email protected] to have it switched off for your shop.

How your data is used

• To run the product: billing, inventory, GST reports, and the AI agents you enable.
• AI features send the relevant text (for example, a chat question or a prescription image) to our AI provider to generate the answer. It is not used to train models on your identity.
• We never sell your data. We never share your customers' personal information with anyone.
• Aggregated, anonymised market signals (never names, never a single shop's data) are used only if you switch on the data-sharing toggle in your dashboard — it is off by default.

Where it is stored

Your data is encrypted in transit and stored on secure cloud servers with daily off-site backups. Each pharmacy's data is isolated — no other pharmacy can read it.

Your rights (DPDP Act)

• Export — download your bills, stock and reports anytime, on the free plan too.
• Correction — edit your business and customer records directly in the app.
• Erasure — email us and we will delete your account data, except records the law requires a pharmacy to retain (for example, Schedule H1 register entries under the D&C Rules).
• Grievance — write to [email protected]; we respond within 7 days.

Cookies

We use a single session cookie to keep you logged in. No advertising trackers, no third-party analytics cookies.

Changes

If this policy changes materially, we will show a notice inside the app before the change takes effect.