PharmaSoft Privacy Policy

Last updated: 27 October 2026

PharmaSoft is pharmacy billing and stock software for India ("PharmaSoft", "we", "us"). This policy explains what personal data PharmaSoft collects, why, who it is shared with and how long it is kept.

1. Who is responsible for which data

• Your account and your pharmacy's subscription: PharmaSoft decides how this data is used and is responsible for it.
• Data your pharmacy enters about its customers, patients, doctors, suppliers and staff (bills, prescriptions, customer details): your pharmacy decides what to record and why. PharmaSoft stores and processes it only to run the service for your pharmacy. Questions about that data should go to the pharmacy first.

2. What we collect

When you create an account

• Your name, email address, username and password. The password is stored only as a secure hash; we never see it.
• A one-time code we email to you to check the address. Only a hash of the code is stored, and it expires after 10 minutes.
• The IP address the sign-up came from, to limit abuse (too many sign-ups or codes from one place).
• An unfinished sign-up is deleted automatically after 7 days.

Your pharmacy

• Legal name, trade name, PAN, state, branch names and codes. Later, if you add them: GSTIN, drug licence numbers, addresses and contact details.
• Your plan and add-ons, PharmaSoft invoices, and the payment references you report (for example UPI transaction IDs).

Using the app

• Staff accounts your pharmacy creates: names, usernames, roles and the branches they work in.
• Sign-in records for security: time, IP address and device/app information. Important changes are kept in an audit log (who changed what, and when).
• Business records your pharmacy enters: products, stock, purchases, sales bills, returns and, where your plan includes them, customers (name, phone, email, address, GSTIN) and prescription details (doctor and patient names required for the Schedule H register).
• Photos of prescriptions or labels that are read on our server are processed in memory and never stored; only the details the pharmacist confirms are saved. Barcode scanning, and label reading where the device supports it, happen on the device.

Ads (PharmaSoft Free plan only)

• The Free plan shows ads through Google AdMob. On Free, the Google Mobile Ads SDK collects the device's advertising ID, device and diagnostic information, and may infer an approximate location from the IP address, to show ads, measure them and prevent fraud. See how Google uses information from apps that use its services.
• We request non-personalised ads only. No pharmacy, medicine, customer, patient or sales data is sent to the ads.
• Paid plans do not load the ads software at all.

3. Why we use it

• To create and secure your account and check your email address.
• To run the service: billing, stock, purchasing, reports and the features your plan includes.
• To bill your subscription, verify your payments and send renewal reminders.
• To keep the service secure and prevent abuse (sign-in records, rate limits, audit log).
• To show ads on the Free plan.
• To meet legal record-keeping duties (for example GST and drugs record-keeping rules).

We do not sell personal data.

4. Who we share it with

• Hosting: our servers are run by Hostinger on a virtual server in Mumbai, India.
• Email: sign-up codes and service emails are sent through Google (Gmail).
• Google AdMob: on the Free plan only, as described above.
• AI providers: the optional AI assistant is off unless your pharmacy switches it on. If it is switched on, the text you send it goes to the chosen provider, and patient details on a prescription are sent only with the patient's consent.
• Authorities: when the law requires it.

5. How long we keep it

• Unfinished sign-ups: 7 days. Sign-up codes expire after 10 minutes.
• In-app notifications: 90 days.
• Your account and pharmacy data: while your pharmacy uses PharmaSoft. When a pharmacy stops using PharmaSoft, its data can be deleted on request, except records that tax, drugs or other laws require to be kept, which are kept for the required period (sales bills, for example, cannot simply be deleted).
• The Free plan shows only the last 12 months of history; older records are hidden, not deleted, and come back if the pharmacy upgrades.
• Backups are kept for a limited time and then overwritten.

6. Security

• All traffic between the app and our servers is encrypted (HTTPS only).
• Passwords and sign-up codes are stored only as hashes. Archived old records are encrypted.
• Each pharmacy's data is kept separate from other pharmacies'; staff see only what their role and branch allow.
• No system is perfectly secure. If we learn of a breach that affects you, we will tell you and the authorities as the law requires.

7. Your choices and rights

• You can see and correct your account and pharmacy details in the app (Settings).
• You can ask for a copy of your data, a correction, or deletion of your account by emailing pharmasoft.tech@gmail.com. Some records must be kept by law (section 5); we will tell you what can and cannot be deleted.
• A pharmacy's customers should contact that pharmacy about the records it keeps about them.

8. Children

PharmaSoft is a business tool for pharmacies and is not meant for anyone under 18.

9. Changes

We will update this page when PharmaSoft changes how it uses personal data, and change the "Last updated" date.

10. Contact

PharmaSoft
Email: pharmasoft.tech@gmail.com