Privacy Notice
This notice explains what personal data S360 Plot Watch collects, why we use it, who processes it for us, how long we keep it, and how you can exercise your rights.
1. Who we are
S360 Plot Watch (sat.s360.earth) is operated by S360 Earth Private Limited, A102, NCL Sindhu, Petbasheerabad, Qutubullapur, Ranga Reddy, Hyderabad, Telangana 500067, India (“S360”, “we”). For your account data, S360 is the Data Fiduciary under India’s Digital Personal Data Protection Act, 2023 (“the DPDP Act”).
Questions about this notice or your data can be sent to our grievance officer, [Name to be appointed], at hi@s360.earth or +91 80085 12341.
2. Our role for the data in your files
The plot files you upload can contain personal data about other people, such as farmers’ or producers’ names and the location of their land. You decide what goes into those files and why. For that data, you (or your organisation) are responsible for having a lawful basis to collect and share it, and S360 processes it on your behalf only to provide the service to you. Our terms set out what you confirm when you upload such files.
If you are a farmer or producer and think your data is in an account on Plot Watch, you can write to us. We will pass your request to the account holder and help them deal with it, and where the law requires us to act directly, we will.
3. Data we collect
| Category | What it includes | Where it comes from |
|---|---|---|
| Account details | Email address; WhatsApp or mobile number; name and organisation if you add them; account settings. | You |
| Sign-in records | Records of one-time codes sent and used (not the code itself once it has expired), time of sign-in, IP address, browser and device type. | You and your browser |
| Plot data | Plot boundaries and locations; plot names and identifiers; any other columns in your files, which may include the names of farmers or producers, village or district, and similar details. | You (and, through you, the people your files describe) |
| Check data | Dates chosen, plot area, imagery used, screening results, change maps, PDF reports and exports. | Generated by the service |
| Report sharing and verification | Email addresses you send a report to; on the public verify page, the email address someone enters to get a download code, and a record of each download (time, IP address and browser). | You, and people who verify or download your reports |
| Purchase and billing records | Pack bought, amount, tax, credits added and used, Razorpay order and payment IDs, payment status; billing state; GSTIN, billing name and address if you give them; GST tax invoices and credit notes. | You, Razorpay and the service |
| Messages | Emails, WhatsApp messages and other messages you send us, and our replies. | You |
| Technical logs | Request logs, error logs and security events, including IP address and browser information. | Your browser and our providers |
We do not ask for or knowingly collect government ID numbers, bank account or card numbers, or health data. Please do not include them in uploaded files.
4. Why we use it
| Purpose | Data used | Basis |
|---|---|---|
| Create your account and sign you in with one-time codes | Account details, sign-in records | Your consent |
| Run checks, produce maps, reports and exports, and keep your plot library | Plot data, check data | Your consent (for your own data) and your instructions (for data about other people that you upload) |
| Verify a WhatsApp number for the second free check, and prevent abuse of free checks | Account details, sign-in records | Your consent |
| Take payment, add credits, issue invoices and handle refunds | Purchase and billing records, account details | Your consent; and compliance with tax and company law (a use permitted under section 7 of the DPDP Act) |
| Send service messages, such as receipts, check completion and security alerts | Account details | Your consent |
| Answer questions and complaints | Messages, and whatever data the question concerns | Your consent |
| Keep the service secure, investigate faults and prevent fraud | Sign-in records, technical logs | Your consent; and legal obligations |
| Meet legal obligations and respond to lawful requests from authorities | Any category, only as required | Legal obligation (section 7 of the DPDP Act) |
We do not sell personal data, use it for advertising, or use your uploaded plot data to build products for other customers.
5. Consent and withdrawing it
When you create an account we ask for your consent to the uses described in this notice. You can withdraw consent at any time, as easily as you gave it: delete your account from the Account page, or write to hi@s360.earth. Withdrawal does not affect processing that happened before it. After withdrawal we stop processing your data for the purposes that relied on consent, which means we cannot keep providing the service, and we erase your data except for records the law requires us to keep (see section 8).
6. Who processes it for us
We use the following providers to run the service. They act on our instructions and may use the data only to provide their service to us.
| Provider | What it does for us | Data involved | Location |
|---|---|---|---|
| Supabase | Database, sign-in and server functions | All categories stored by the service | Data stored in Mumbai, India (AWS ap-south-1) |
| Cloudflare | Hosting the app and delivering it securely | Technical logs; data passing through on its way to you | Global network, including India |
| Resend | Sending emails, including one-time codes, receipts and invoices | Email address, message content | May be processed outside India |
| Meta Platforms (WhatsApp Business Platform, Cloud API) | Sending one-time codes and service messages on WhatsApp | Phone number, message content | May be processed outside India |
| MSG91 | Sending one-time codes by SMS | Phone number, message content | India |
| Razorpay | Taking payments and processing refunds | Amount, order details, contact details; card, UPI and bank details are entered with Razorpay, not with us | India |
| Microsoft Planetary Computer | Finding and supplying Sentinel-2 imagery | Plot coordinates or the area around them, and dates. Names and other columns from your files are not sent. | May be processed outside India |
We may also share personal data with our professional advisers (such as our chartered accountant or lawyers) where needed, and with courts, regulators or law enforcement when the law requires it.
7. Transfers outside India
Our main database is in India. Some providers listed above process data in other countries, as shown in the table. We transfer data only as needed to provide the service, and will not transfer it to any country to which the Government of India has restricted transfers under the DPDP Act.
8. How long we keep it
| Data | How long we keep it |
|---|---|
| Account details | While your account is open. Erased within [30] days of account deletion, except where kept in invoices (below). |
| Plot data and check data, including reports | Until you delete them or delete your account. Erased from the live database straight away; removed from backups within [N] days. |
| One-time codes | Codes expire within minutes. Records that a code was sent are kept for [N] months for security and to prevent abuse. |
| Invoices and payment records | At least 72 months from the due date of the annual GST return for the year concerned (section 36 of the CGST Act, 2017), or longer where company or income-tax law, or a pending dispute, requires it. These records are kept after account deletion. |
| Messages and complaints | [24] months after the matter is closed, unless needed longer for a dispute. |
| Technical and security logs | At least one year where the law requires it, and otherwise no longer than [12] months. |
What happens when you delete your account
Deleting your account from the Account page erases your plots, checks, reports and exports, and your account details, within the periods above. Invoices and payment records are kept for the tax retention period, because the law requires it, and then deleted. Unused credits are lost when an account is deleted.
9. Browser storage and cookies
- The app uses your browser’s local storage to keep you signed in, to hold your plot library and unsaved work on your device, and to remember settings such as display preferences. This data stays on your device until you sign out, clear it, or remove the plot from your library.
- We do not use cookies or similar tools for advertising, tracking or third-party analytics.
- Our hosting provider may set a strictly necessary security cookie to protect the service from automated attacks. Razorpay sets its own cookies in its payment window; its privacy policy applies to them.
10. Your rights
Under the DPDP Act you have the right to:
- access a summary of the personal data we process about you, the processing activities, and who we have shared it with (section 11);
- correct, complete or update your personal data, and have it erased when it is no longer needed and no law requires us to keep it (section 12);
- withdraw consent at any time (section 6);
- have a grievance about our handling of your data dealt with (section 13); and
- nominate another person to exercise your rights if you die or become unable to do so (section 14).
How to exercise them
- In the app: the Account page lets you download an export of your data and delete your account. You can edit or delete plots in your plot library at any time.
- By email: write to hi@s360.earth with the subject “Data request” and say what you want. To nominate someone, send their name and contact details. We may ask you to confirm a one-time code to check it is you.
We respond to requests within [30] days, and in any case within the period set by the DPDP Rules, 2025.
11. Grievance officer and complaints
- Grievance officer
- [Name to be appointed], S360 Earth Private Limited
- hi@s360.earth (subject: “Grievance”)
- Phone
- +91 80085 12341
- Post
- S360 Earth Private Limited
A102, NCL Sindhu, Petbasheerabad
Qutubullapur, Ranga Reddy
Hyderabad, Telangana 500067
India
We acknowledge grievances within 48 hours and aim to resolve them within one month. If you are not satisfied with our response, you can complain to the Data Protection Board of India once you have used our grievance process, as the DPDP Act requires.
12. Children
Plot Watch is for adults using it for work. You must be 18 or over to create an account, and we do not knowingly process the data of children as account holders. If you think a child has created an account, tell us and we will delete it.
13. Security
We protect data with measures that include encryption in transit, access controls in the database so that each account can reach only its own data, sign-in by one-time codes rather than stored passwords, and limited staff access. No system is completely secure. If a personal data breach affects you, we will tell you and the Data Protection Board as the law requires.
14. Changes to this notice
We will update this notice when our processing changes, and show the new date at the top. If a change materially affects how we use your data, we will tell you by email or in the app before it takes effect, and ask for fresh consent where the law requires it.