1. What this covers
This policy describes how CaratOS handles data for shops and staff using the Service: inventory, customer records, invoices, cash flow and related business data.
2. Data we store
- Shop account and staff login details (email, hashed password, assigned role and permissions).
- Business data you enter: inventory, customers, invoices, cash flow, kitty plans and job-work records.
- Optional integration data, such as a connected WhatsApp business number, only if you configure it.
3. Data isolation
Each shop’s data is isolated from every other shop’s account. Staff accounts within a shop see only what their assigned role permits.
CaratOS support staff can open a shop’s account only when the shop switches support on. Each visit ends after 2 hours and is logged in the shop’s Settings.
4. How we use data
Business data is used solely to operate the Service for your shop: displaying inventory, generating invoices, syncing across your devices and powering features you turn on. We do not sell business data to third parties.
Izara Gems Pvt. Ltd. runs CaratOS. Its jewellery businesses, Izara Gems and RareCut, never use your shop’s data, not even with names removed.
5. Third-party processors
Certain functionality relies on third-party services, for example cloud database hosting, and optionally WhatsApp when a shop connects that integration. Data shared with these services is limited to what’s required for the feature to work.
6. Data retention
Business data is retained for as long as the shop account remains open. If a shop account is closed, we delete its business data. Records we must keep by law, such as the invoices for your CaratOS subscription, are kept only as long as the law requires.
7. Security
Access to shop data requires authentication, and staff permissions are scoped by role. Passwords are stored hashed, not in plain text.
8. Your choices
Shop administrators can manage staff access and permissions directly within CaratOS. For questions about data associated with your shop account, reach out through your CaratOS account.
9. Call requests and lead forms
When you book a call on the Talk to us page, we use the details you give (your name, shop name and mobile number, and anything else you choose to add) only to arrange and prepare for your call.
When you submit an enquiry through a CaratOS ad on Meta platforms (Facebook or Instagram Lead Forms), Meta shares the information you provide in that form with us, typically your name, phone number, business name and city. We use this solely to follow up about CaratOS and schedule a demo. We do not sell this information, and it is handled under the same protections described in this policy.
10. Changes to this policy
We may update this policy as the Service evolves. Material changes will be reflected here with an updated date.