Security & Data Privacy

1. Desktop-First Architecture

All your business data is processed and stored locally on your PC. No cloud database. No server uploads. No third-party data storage. Works offline for daily operations.

2. Why Desktop-First?

• Trust: MSME owners control their own data
• Compliance: Simplifies DPDP Act compliance
• Reliability: No internet dependency for daily operations
• Cost: No cloud storage fees

3. Read-Only Connections

The software reads Tally through Tally's own interface, with nothing installed in Tally. It reads databases through a login you can make read-only, and checks every query before it is sent. Zoho Books is read with read-only access you grant once. Nothing is ever written back.

4. Signed Licences

Each licence is signed with an Ed25519 key that never leaves ShivAI's server. The software checks the signature with a public key and rejects a licence that has been changed. A licence is bound to one PC through a Machine ID derived from Windows, and is time-limited: it renews automatically whenever the PC is online.

5. Service Access

ShivAI support can open a service session on your PC only with a code issued for that PC's Machine ID, valid for at most 8 hours. Every session is recorded in a log on your PC.

6. What We Do NOT Have Access To

• Your items, bills of material, or production plans
• Your financial records, customer dues or bank statements
• Your customer lists, pricing, or sales history
• Your quality records or risk assessments

Your data exists only on your PC.

7. Website & Payment Security

Website hosted on Cloudflare Pages with DDoS protection. TLS encryption. Payments via Razorpay (PCI-DSS Level 1 compliant). No tracking cookies.

8. Contact

Report security concerns to contact@shivaiscsolutions.com.