Privacy & Data Protection — Data Sovereignty Policy
Summary of architectural principles governing local pharmacy record storage and central licensing entitlement validation.
1. Architectural Data Sovereignty
IndiMarg Pharma ERP is engineered as an on-premise, offline-first desktop application. Under the software design specifications:
- Customer pharmacy business records, sales ledgers, customer/patient names, prescribing doctor records, and purchase invoices are stored in local database files (SQLite) on the pharmacy’s local desktop computer.
- The central licensing platform does not operate as a cloud multi-tenant database for daily counter pharmacy operations.
- Day-to-day counter billing, inventory management, and receipt printing function independently of internet connectivity.
2. Central Licensing Telemetry
To validate annual subscription entitlements, prevent unauthorized copying, and manage installation seats across authorized counters, the desktop application periodically communicates with the central License Authority over HTTPS:
- Entitlement Identifiers: License key hash, issued customer identifier, and software application version.
- Device Binding Metadata: A generated installation identifier used to enforce concurrent counter seat limits.
- Timestamp Synchronization: Authoritative server time to enforce the 60-day offline policy and detect local clock rollback.
3. Data Protection & Responsibility
Because pharmacy business data resides on local desktop hardware, pharmacy owners maintain full custody and ownership of their records. Pharmacies are advised to maintain secure operating system credentials, routine off-site disk backups, and standard antivirus protections.
4. Web Inquiries & Contact Submissions
Information submitted via the website (such as product demo requests or authorized agent inquiries) is utilized solely for customer evaluation, licensing communication, and partner qualification. Information is not sold or rented to third-party marketing brokers.