Privacy Policy
Last updated: 1 August 2026
1. Who this applies to
This policy explains how Abrobot Technologies Private Limited(“we”, “us”) collects and uses personal information when you use YarnTally or visit yarntally.vercel.app.
2. What we collect
Account data — name, email, phone, organisation name, role, password hash.
Business data you upload — customers, suppliers, invoices, stock, purchase orders, etc. This is your data; we hold it on your behalf.
Usage data — pages visited, features used, error logs, device / browser type. Used to improve the product and diagnose issues.
Payment data — handled by our payment gateway (Cashfree Payments). We never see your full card / UPI credentials. We only receive the transaction result and last-4 digits for reconciliation.
Support conversations — WhatsApp / email threads with our team, retained to provide continuity of service.
3. How we use it
- To provide the Service you signed up for
- To process payments and issue GST invoices
- To send operational emails (password resets, receipts, weekly digests, incident notices)
- To send marketing emails you opted in to — you can unsubscribe from any of them with one click
- To improve the product, diagnose bugs, and prevent abuse
- To comply with legal obligations under Indian law
We do not sell your personal data. We do not use your business data to train third-party AI models.
4. Where your data lives
Your data is stored on Supabase infrastructure in the Mumbai (ap-south-1) region. Daily automated backups are retained for 7 days. Attachments (files uploaded to customer / sale records) live in an S3-compatible bucket in the same region.
AI features send prompt text to third-party model providers (via the Zen / OpenCode API). Customer-identifying data is automatically redacted before being sent to free-tier models. Premium AI calls use models with a no-training data processing agreement.
5. Who we share with
- Supabase — database + auth hosting (Mumbai, India)
- Vercel — application hosting (global edge)
- Resend — outbound transactional and marketing email
- Cashfree Payments — payment processing
- Zen / OpenCode — AI model inference for insights and drafts
- Google Cloud Vision — OCR of mill labels and FIRC uploads, when you use those features
Each of these processors is under a written data-processing agreement and processes data only on our instructions.
6. Your rights
You can, at any time:
- Export a full JSON snapshot of your data (Settings → Own Your Data)
- Correct any personal information from your profile page
- Delete your account by emailing contact@mnbresearch.com— we'll delete within 30 days, subject to legal retention requirements (invoicing records are retained for 7 years under Indian tax law).
- Unsubscribe from marketing emails via any email footer
- Request the list of processors we share your data with
7. Security
- TLS 1.2+ for every request in transit
- Row-level security enforced at the database layer — one tenant cannot see another's data even in the event of an application bug
- Passwords hashed with bcrypt via Supabase Auth
- API keys and third-party secrets encrypted at rest with AES-256-GCM
- Immutable audit log of every admin action
- Daily backups retained for 7 days; disaster recovery documented
8. Cookies
We use only essential cookies for authentication and session management. We do not use third-party advertising cookies or cross-site trackers.
9. Children
YarnTally is a B2B tool. We do not knowingly collect data from anyone under 18. If you believe we have, contact us and we'll delete it immediately.
10. Changes to this policy
We'll email registered admins at least 15 days before any material change takes effect. The current version is always at yarntally.vercel.app/privacy.
11. Contact / Grievance Officer
Grievance Officer: Mridul Nanda
Email: contact@mnbresearch.com
Phone / WhatsApp: +91 97114 88481
Postal: Abrobot Technologies Private Limited, Delhi, India