This policy explains what information Curavo handles, where it is kept, and who can see it. Curavo is pharmacy software made by ARZ Solutions (a partnership firm) ("ARZ", "we"). The pharmacy that uses Curavo is "you".
1. Your pharmacy's data stays on your PC
Curavo runs on your shop's own Windows PC. Your medicines, stock, bills, suppliers, patients and their purchase history are stored in a database file on that PC. Billing, stock and reports work without internet.
2. What reaches ARZ
Daily cloud backup. Once a day Curavo makes a copy of your database, together with your shop's logo and signature, and locks (encrypts) it on your PC before sending it to our cloud server. The server stores the locked file and cannot open it. Two keys can open it: your shop's own key, kept inside your Curavo, and ARZ's recovery key, kept offline by ARZ. We use the recovery key only to restore your data (for example when your PC is lost or damaged), when you ask us to, or when the law requires it. We keep backups for 30 days.
Check-ins. About every 15 minutes Curavo tells our server your shop code, shop name, Curavo version, Windows version, subscription status, database size, free disk space and the number of bills made today. We use this to support you and to see that backups are working.
Error reports. When Curavo crashes it sends a technical report: what failed, where in the program, and which screen. These reports can occasionally contain a short piece of text from your data. We use them only to fix Curavo.
Licence. Your shop code and licence key, so your subscription can be checked and renewed.
Your Curavo account. The shop owner's account on curavo.in: email address, name, shop name, phone, town and GSTIN (if entered), and the password - stored only in scrambled (hashed) form, so nobody at ARZ can read it. If you choose "Continue with Google", Google tells us your name and email address; we never see your Google password.
Owner app. If the owner connects a phone, the shop PC sends a summary (today's sales, stock, expiry, patient credit) locked so that only the owner's connected phones can open it - not our server and not ARZ. Phone notifications say only how many items need attention, never amounts or names, because they pass through Google's notification service.
Website forms. If you book a demo we receive your name, mobile number, shop name and town.
3. Patients' information
Your patients' details belong to your pharmacy. For that information you decide what is collected and why, and ARZ handles it only on your behalf: to keep the locked backups and to restore them. We do not read, sell, share or use your patients' data for anything else, including marketing.
4. Who we share information with
Nobody, except: the hosting company that runs our server (Amazon Web Services; it stores only locked backups and the information in section 2); the email service that sends account emails (confirm your email, reset your password); Google, if you sign in with Google or receive owner-app notifications; a payment provider when you pay online; and authorities when the law requires it.
Where the server is. During the pilot our server runs in Amazon's data centre in Sydney, Australia. We will move it to India before Curavo is offered to everyone and will update this page when we do.
5. Security
Backups are encrypted with AES-256 on your PC before upload. Licence keys and app updates are digitally signed, so they cannot be forged. Access to our server and control panel is limited to ARZ staff.
6. Your choices
You can ask for a copy of what we hold about your shop, ask us to correct it, or ask us to delete your cloud backups and records when you stop using Curavo.
Your data on your PC is yours. You can keep using and exporting it whatever happens to your subscription.
7. Grievance officer
For any question or complaint about privacy, contact our grievance officer, Rausan Sheikh, CEO, at rausansheikh24@gmail.com or WhatsApp +91 69014 74078. Address: Bisandai Pt 1, Golakganj, Dhubri, Assam 783334. We acknowledge every complaint within 2 working days and reply within 7 working days.
8. Changes
If we change this policy we will update this page and the date at the top, and tell you in Curavo if the change matters to you.