Privacy policy

Who we are and what this covers

OilMill ERP is provided by Axellon E-commerce (“we”, “us”), Akshardham Residency, Near D-Mart, Nikol, Ahmedabad, Gujarat 382350 (GSTIN 24FCLPB7578E1ZF). You can reach us at oilmillerp@gmail.com.

This policy covers this website (oilmillerp.com) and its demo and contact forms, subscription administration, customer support, and the OilMill ERP application at app.oilmillerp.com. It is written for India’s Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules. The application shows a matching policy at app.oilmillerp.com/privacy.

Our role and yours

For account, enquiry, billing and support information, Axellon E-commerce decides how it is used.

For the records a customer enters into its OilMill ERP workspace — purchases, stock, production, invoices, payments, and the names, phone numbers, addresses and GST numbers of its own customers and suppliers — the customer decides what goes in and why. We store and process that data only to provide the contracted service and follow the customer’s lawful instructions. If one of a customer’s own customers asks about their data, the customer answers them, and we help it do so.

Information we collect

Website enquiries: when you request a demo or contact us, we collect your name, mobile number, email address (optional), mill or company name, city, state, the crops you process, and anything else you choose to tell us, such as capacity, current system, a preferred time to call and your message.

Accounts: the name, email address and role of each person who uses the application, and a password. We never store the password itself — only a one-way scrambled (hashed) version of it that cannot be turned back into the password.

Company details entered in the application’s settings: company name, addresses, GSTIN, PAN, the bank account details printed on invoices, and the logo and signature image.

Business records: everything a mill records in the application, and an activity log of who created or changed which record and when, which the mill’s administrators can see.

Technical information: sign-in times, IP address (used to protect sign-in against repeated password guessing and to limit abuse), browser type and request status, including the security and operational logs our hosting providers keep.

Error reports: when something fails in the application, we record what failed, on which screen, and the user ID and company ID. Names, email addresses, phone numbers, tokens and anything typed into forms are removed before an error report is stored.

Billing: the plan, billing period, payment reference and status, and the invoice and tax details needed to administer the subscription. Full card or bank-account credentials are handled by the payment provider and are not stored by us.

Messages you send us by email, phone, WhatsApp or the application’s Feedback screen.

How we use information

We use information to answer enquiries and arrange demos; create and secure accounts; provide the application, its documents and reports; manage subscriptions, user limits and renewals; give support; detect misuse and repeated failed sign-ins; find and fix errors; maintain audit records; and meet tax, accounting and other legal obligations, including when a court or authority lawfully requires it.

We do not sell personal data or customer business data, we do not show advertising, and we do not use a mill’s business records for any purpose other than providing and supporting the service.

Where we rely on consent, you may withdraw it by contacting us. Withdrawing consent does not affect processing already completed and may stop us providing a feature that needs the information. Service and legal messages may still be sent where necessary to run the account or comply with law.

Where data is stored

Application data is stored and processed in Mumbai, India: the production database (Supabase Postgres, region ap-south-1) and the servers that run the application (Vercel, Mumbai region) are both located there.

The application’s web pages, which hold none of a mill’s records, and this website are delivered through global networks so they load quickly. Providers may process limited account, communications, payment, security or technical data in other locations under their own agreements and safeguards.

Service providers and disclosures

We use a small number of providers, each handling data only to do its job for us: Supabase (the database, in Mumbai); Vercel (the application’s servers, in Mumbai, and hosting for this website); Netlify (delivers the application’s web pages, without receiving business records); Resend (sends the emails generated by this website’s demo and contact forms); and Google Fonts and cdnjs (supply the application’s typefaces and PDF tools and, like any website, see the visitor’s IP address when the browser fetches them).

Some providers are involved only when a feature is switched on: Google Drive or email, when a customer’s administrator turns on scheduled backups (the backup goes to the account the administrator chooses); and Sentry, an error-tracking service, if we enable it — it receives the same scrubbed error reports described above. Payment and communications providers are used where needed to collect payments and talk to customers.

When a user shares a document on WhatsApp, it goes from their own device to WhatsApp under WhatsApp’s terms; we do not send it for them.

We may disclose information to government or law-enforcement authorities when the law requires it, or in a genuine merger, acquisition or reorganisation subject to confidentiality and legal safeguards. One customer’s data is never made available to another customer.

Security

All connections are encrypted (HTTPS). Passwords are stored only in hashed form. Each company’s records are separated inside the database itself, so one mill cannot read another’s. Access within a mill follows the roles its administrator assigns, important changes are recorded in the activity log, sign-in is protected against repeated password guessing, and access tokens for backup destinations are stored encrypted.

Customers must protect their passwords, give users only the access they need and tell us promptly about suspected misuse. No internet service is completely secure; if a personal-data breach occurs, we will inform affected customers or individuals and the relevant authority as the law requires.

Cookies and browser storage

This website does not use advertising or analytics cookies. Our hosting provider may keep limited security and operational logs needed to deliver the site.

The OilMill ERP application does not use advertising or tracking cookies. It keeps a few items in the browser’s storage so it works — the user’s sign-in, their email address if they tick “Remember my email”, and screen preferences such as a collapsed menu. Signing out removes the sign-in.

Retention and deletion

Account and workspace data is kept while the subscription is active or read-only. If a subscription is not renewed or a payment fails, the account becomes read-only and its users can still view and export everything.

When a subscription is cancelled, application access ends immediately. Customer business data is kept for 30 calendar days and then scheduled for permanent deletion, except where longer retention is required by tax, accounting, dispute-resolution or other applicable law. During those 30 days the customer may request an available export by emailing oilmillerp@gmail.com; an export request does not restore access. Residual copies in protected backups expire with the backup cycle and are not restored except for disaster recovery.

When a customer’s administrator removes a user, that person can no longer sign in, but their account is kept on file so the mill’s records still show who entered them.

Enquiry, support and error records are kept only as long as reasonably necessary for their purpose, security, record keeping or legal compliance.

Indian tax law requires businesses to keep their accounts for several years; that obligation is the customer’s. Customers should keep their own copies, using the application’s report exports and its Backup & Restore settings while their account is active or read-only.

Your rights

Under the Digital Personal Data Protection Act, 2023 and other applicable law, you may ask us for a summary of the personal data we hold about you and how it is used; ask us to correct, complete or update it; ask us to erase it where we are no longer required to keep it; withdraw consent; nominate another person to exercise these rights for you; and raise a grievance.

Send requests to oilmillerp@gmail.com from your registered email address, describing the account and the request. We may verify identity and authority before responding. If your information was entered by a mill you do business with — for example, as one of its customers — please ask that mill first, as it controls those records; we may refer the request to its administrator.

If you are not satisfied with our response, you may complain to the Data Protection Board of India.

Children

OilMill ERP is a business service and is not meant for anyone under 18. We do not knowingly collect children’s personal data, and customers must not submit it unless they have a lawful and necessary business reason and all required permissions.

Changes to this policy

If we change this policy, we will update the effective date on this page. For material changes we will also tell registered customers’ administrators in the application or by email before the change takes effect.

Grievance Officer and contact

Grievance Officer: Raj Patel, Axellon E-commerce.

Email: oilmillerp@gmail.com · Phone: +91 8160883543 · WhatsApp: +91 9558450801 · Address: Akshardham Residency, Near D-Mart, Nikol, Ahmedabad, Gujarat 382350 · GSTIN: 24FCLPB7578E1ZF.

We will acknowledge a complaint within 48 hours and aim to resolve it within 30 days.