Last updated: [Date to be finalized]

Privacy Policy

Draft — pending legal review. This document was drafted to cover the points a careful reader would expect before paying, using reasonable, common practice. It is not a substitute for review by a qualified lawyer, and bracketed fields like [City, State] need to be filled in with Mera Khet's actual registered details before this is relied on as a binding agreement.

This Privacy Policy explains what personal information MK Farms ("Mera Khet," "we," "us") collects through this website and dashboard, and how it's used.

1. What we collect

Account details: full name, email address, phone number, and password (stored securely, hashed — we never see or store your plaintext password)
Membership details: which plots and plans you've purchased, your harvest delivery preference, and your farm visit requests
Payment details: transaction ID, amount, and status from our payment processor (Razorpay). We do not store your card, UPI, or bank account details — those are handled entirely by Razorpay
Messages: anything you submit via the contact form, WhatsApp, or the in-dashboard support form
Usage data: basic technical logs (e.g. sign-in times) generated automatically by our infrastructure providers

2. How we use it

To create and manage your account and plot allocation
To process payments and issue your membership certificate
To send farm updates, delivery notifications, and respond to your messages — by email and/or WhatsApp, using the contact details you provide
To improve the site and diagnose technical issues

We do not sell your personal information to third parties.

3. Who we share it with

We use the following service providers to run Mera Khet, each of whom processes your data only as needed to provide their service to us:

Supabase — database hosting and account authentication
Razorpay — payment processing
Resend — transactional email delivery
Meta (WhatsApp Business Platform) — WhatsApp messages you receive from us

We don't share your information with other members, and camera access is scoped so members only ever see their own plot's camera, never another member's.

4. Data retention

We retain account and membership data for as long as your account is active, and as needed to meet our legal and accounting obligations after a season ends. You can request deletion of your account by contacting us (Section 6).

5. Your rights

You can:

Access and update your profile information from your dashboard at any time
Request a copy of the personal data we hold about you
Request deletion of your account, subject to any records we're legally required to keep (e.g. payment records)

6. Contact

For any privacy question or request, reach us via our contact form. [If required for your business under applicable rules, name a designated Grievance Officer and their contact details here.]

7. Changes

We may update this policy from time to time; the "last updated" date above will reflect the most recent change.