Privacy Policy

1. About MRP Scan

MRP Scan is a business-focused jewellery management and pricing application intended for jewellery businesses and their authorised users.

The Service may provide functionality including:

• Jewellery tag scanning and OCR
• AI-assisted jewellery information extraction
• Gold-rate and pricing information
• Jewellery pricing and MRP calculation
• Business and employee management
• Credit/wallet-based scan usage
• Application licensing and subscriptions
• Credit recharge and payment functionality
• Business configuration and pricing settings

2. Information We Collect

MRP Scan is designed primarily around mobile-number-based authentication.

We may collect the following categories of information.

2.1 Mobile Number

Your mobile number may be collected when you:

• Register for an account
• Log in
• Verify your identity using OTP
• Access business functionality
• Create or manage an employee account

The mobile number may be used as your primary account identifier.

MRP Scan does not require an email address as the primary identifier for application authentication.

2.2 Account and Business Information

Depending on the features used, we may collect information such as:

• Name of the business or organisation
• Business configuration
• User role
• Employee information
• Application settings
• Pricing configuration
• Gold-rate configuration
• Other information voluntarily entered into the application

2.3 Jewellery Tag Images

When you use the scanner, you may upload or capture photographs of jewellery tags.

These images may contain information including:

• Gross weight
• Net weight
• Gold purity
• Diamond weight
• Diamond pieces
• Diamond shape
• Diamond colour
• Diamond clarity
• Colour-stone information
• Packet codes
• Product or stock identifiers
• Other information printed on jewellery tags

These images are processed to provide the jewellery scanning and information-extraction functionality of MRP Scan.

2.4 Extracted Jewellery Information

The Service may process information extracted from jewellery tag images, including:

• Weight information
• Purity
• Diamond information
• Colour-stone information
• Packet codes
• Product identifiers
• Other recognised tag information

Automated extraction may not always be accurate. Users should review extracted information before relying upon it for commercial, pricing, inventory, or other business decisions.

2.5 Usage and Technical Information

We may collect technical and operational information such as:

• Scan activity
• Scan timestamps
• Application events
• Authentication events
• Error logs
• Diagnostic information
• Device/application information where technically required
• Credit usage
• Subscription/license status
• Payment transaction status

This information helps us operate, secure, troubleshoot, and improve the Service.

3. OTP and Authentication

MRP Scan uses mobile-number-based authentication and OTP functionality.

When you request an OTP, your mobile number and relevant authentication information may be transmitted to an SMS/OTP service provider for delivery and verification.

OTP information is used for authentication and account-security purposes.

You should never disclose an OTP to another person.

MRP Scan will not intentionally request your OTP for purposes unrelated to authentication or account security.

4. Jewellery Images and AI/OCR Processing

MRP Scan may use OCR and artificial intelligence technologies to process jewellery tag images.

When you submit an image for scanning:

1. The image is received by the MRP Scan service.
2. The image may be transmitted to an AI/OCR processing service.
3. Visible information from the jewellery tag is analysed.
4. Relevant information is extracted into structured fields.
5. The extracted information is returned to the application.
6. The information may be used for pricing, review, and related application functionality.

The AI/OCR system is designed to identify information visible in the submitted image.

It should not be treated as a substitute for human verification.

MRP Scan does not guarantee that automated extraction will always be accurate.

5. How We Use Information

We may use information collected through MRP Scan to:

• Create and maintain user accounts
• Authenticate users
• Send and verify OTPs
• Provide jewellery scanning functionality
• Process jewellery tag images
• Perform OCR and AI-assisted extraction
• Provide pricing and MRP-related functionality
• Manage business accounts
• Manage employee access
• Manage application settings
• Manage application licenses
• Manage free trials
• Manage credit wallets
• Calculate scan-related credit deductions
• Process credit recharges
• Process application purchases
• Maintain payment and transaction records
• Provide customer support
• Detect and troubleshoot technical problems
• Maintain security and prevent abuse
• Monitor system performance
• Maintain operational logs
• Comply with applicable legal obligations

We will process information only for legitimate purposes connected with providing, securing, maintaining, and improving the Service, or as otherwise permitted or required by applicable law.

6. Credit Wallet and Scan Usage

MRP Scan may operate a credit-based usage system.

Credits may be used for application functionality such as jewellery scanning.

We may maintain records of:

• Current credit balance
• Credits granted
• Credits purchased
• Credits consumed
• Scan-related deductions
• Recharge transactions
• Transaction timestamps
• Payment status

Scan usage may be associated with the relevant business or organisation account.

Where an organisation has employee accounts, scans performed by employees may result in usage being recorded against the organisation's applicable credit balance.

7. Application License and Subscription Information

MRP Scan may provide free trials and paid application licenses.

We may process information relating to:

• Trial activation
• Trial duration
• Trial expiry
• Application license purchase
• License status
• License validity
• Promotional credits
• Bonus credits
• Wallet balance
• Credit recharge
• Payment status

This information is necessary to provide and manage access to the application's licensed functionality.

8. Payment Processing

MRP Scan may use third-party payment providers, including Razorpay, to process application purchases and credit recharges.

Payment providers may process information necessary to complete a transaction.

MRP Scan may receive and retain transaction-related information such as:

• Transaction identifier
• Payment status
• Amount
• Currency
• Payment date/time
• Order identifier
• Related application account information

MRP Scan does not intend to store complete payment-card credentials such as your full card number, CVV, or banking credentials on its own servers when those credentials are processed directly by the payment provider.

Payment providers may process information according to their own terms and privacy policies.

9. Business and Employee Accounts

MRP Scan may allow a business or organisation to create multiple user accounts.

The organisation administrator may control employee access to the application.

Employee activity may include:

• Application login
• Jewellery scans
• Application usage
• Credit-consuming activities

Such activity may be associated with the organisation account for billing, security, auditing, and operational purposes.

Organisation administrators are responsible for ensuring that employees using MRP Scan are authorised to access the relevant business information.

10. Information Sharing

We may share or provide access to information to service providers that help us operate MRP Scan.

Depending on the functionality being used, these providers may include services supporting:

• OTP/SMS delivery
• AI/OCR processing
• Cloud hosting
• Database infrastructure
• File/image processing
• Payment processing
• Application monitoring
• Security and diagnostics

Third-party service providers may process information on our behalf to provide their contracted services.

We do not sell personal information as a product to third parties.

We may also disclose information when reasonably necessary to:

• Comply with applicable law
• Respond to lawful government or regulatory requests
• Protect our rights or property
• Investigate suspected fraud or abuse
• Protect the security of the Service
• Prevent misuse of the application
• Protect users or other persons from serious harm
• Enforce applicable agreements or terms

11. Data Security

We take reasonable technical and organisational measures designed to protect information against unauthorised access, alteration, disclosure, loss, or destruction.

Depending on the nature of the information and Service functionality, safeguards may include:

• Authentication controls
• Access controls
• Secure communication mechanisms
• Role-based access
• Server-side security controls
• Operational logging
• Monitoring and diagnostic controls

However, no internet-based system or electronic transmission can be guaranteed to be completely secure.

Users are also responsible for protecting:

• Their mobile device
• Their account access
• OTPs
• Organisation credentials
• Employee account access

12. Data Retention

We retain information for as long as reasonably necessary to:

• Provide the Service
• Maintain accounts
• Maintain business records
• Process transactions
• Maintain security
• Resolve disputes
• Investigate abuse or fraud
• Comply with legal and regulatory obligations
• Fulfil legitimate operational requirements

Different categories of information may have different retention requirements.

Where information is no longer required for a legitimate purpose or legal obligation, it may be deleted, anonymised, or otherwise appropriately disposed of in accordance with applicable practices.

Specific retention periods may vary depending on the type of information and the functionality through which it was collected.

13. Your Privacy Rights

Subject to applicable law, you may have rights relating to your personal information, including rights to:

• Request access to applicable personal information
• Request correction of inaccurate information
• Request deletion where legally applicable
• Withdraw consent where applicable
• Raise a privacy-related grievance
• Request information regarding the processing of your personal data

We may need to verify your identity before processing certain requests.

Some requests may be subject to applicable legal, contractual, security, accounting, or operational requirements.

14. Account and Data Deletion

If you want to request deletion of your account or personal information, contact us using the contact details provided in this Privacy Policy.

We may ask you to verify ownership of the account before processing the request.

Certain information may be retained where necessary or required for:

• Legal compliance
• Accounting or financial records
• Fraud prevention
• Security
• Dispute resolution
• Enforcement of contractual rights

Deletion of an account may also affect access to associated application functionality, credits, licenses, and business records.

15. Children's Privacy

MRP Scan is designed for business and professional use.

The Service is not intended to knowingly collect personal information from children where applicable law requires parental consent or additional safeguards.

If you believe that a child has provided personal information to us in circumstances where such collection was inappropriate, please contact us.

16. Cookies and Similar Technologies

Where applicable, MRP Scan may use technically necessary cookies, local storage, session identifiers, or similar technologies to:

• Maintain authentication sessions
• Maintain application functionality
• Protect application security
• Remember necessary application settings
• Support technical operations

Such technologies are intended primarily to support the operation and security of the Service.

17. Third-Party Services

MRP Scan may integrate with or rely upon third-party services.

These services may have their own privacy policies, terms, and data-processing practices.

Examples may include services supporting:

• SMS/OTP delivery
• AI/OCR processing
• Payment processing
• Hosting
• Cloud storage
• Infrastructure
• Monitoring

We encourage users to review the privacy practices of relevant third-party providers where appropriate.

18. Business Data and Confidential Information

MRP Scan may process information that a business considers confidential or commercially sensitive, including jewellery tag information, pricing configurations, product identifiers, and business settings.

Users should only upload information that they are authorised to provide to the Service.

You are responsible for ensuring that you have the necessary rights, permissions, and authority to submit business information and jewellery tag images for processing.

19. Accuracy of AI-Generated Information

MRP Scan may use automated AI/OCR systems.

AI-generated or OCR-extracted information may contain errors caused by:

• Image quality
• Lighting
• Tag damage
• Handwriting
• Printing quality
• Unusual abbreviations
• Jewellery-specific terminology
• OCR limitations

The extracted information should therefore be reviewed by the user before being used for financial, commercial, inventory, pricing, or customer-facing purposes.

MRP Scan is not responsible for business decisions made solely on the basis of unverified automated extraction.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Changes may be made because of:

• New application features
• Changes in our data-processing practices
• Changes to third-party services
• Security improvements
• Changes in applicable law
• Regulatory requirements

When material changes are made, we may provide notice through the application or another appropriate method.

The Last Updated date at the beginning of this policy will indicate when the policy was most recently revised.

21. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or the handling of your information, please contact us.

When submitting a privacy request, please provide:

• Your registered mobile number
• Your organisation/business name, where applicable
• A description of your request or concern

We may contact you to verify your identity before processing a privacy-related request.

22. Consent and Acknowledgement

By registering for, accessing, or using MRP Scan, you acknowledge that you have read and understood this Privacy Policy.

Where applicable law requires consent for a particular processing activity, we will obtain such consent through an appropriate mechanism.

You may withdraw consent where legally applicable; however, withdrawal of consent may affect our ability to provide certain functionality or services.