Lekha+ privacy policy
Last updated: 14 October 2026
Lekha+ is business software made by Shangrila Informatics Pvt. Ltd. This policy explains what the Lekha+ mobile app and web app collect, why, and the choices you have. Write to [email protected] with any question.
Who controls your data
Each business that uses Lekha+ has its own company account. The records a business keeps in Lekha+ belong to that business, which decides who on its staff can see them. Shangrila Informatics Pvt. Ltd. runs the service and processes this data on the business's behalf.
What we collect
- Account details: the name, email address, phone number and password of each user, and the company's registration details (name, PAN, address, contact).
- Business records you enter: customers, suppliers, products, stock, quotations, orders, invoices, bills, payments, bookings, staff and the other records of the workspaces your company uses.
- Files and photos you attach: for example a product photo or an insurance document, only when you choose to add one.
- Activity records: who changed what and when, kept as the audit log of your company.
The app uses the camera only to scan barcodes and ticket QR codes; the picture is read on the phone and not stored. The app has no advertising and no third-party analytics or tracking.
Why we use it
- to run the app: sign-in, the screens your role allows, and keeping the phone and web in step;
- to keep your company's accounts, invoices and reports;
- to secure the service, investigate misuse and keep the audit log;
- to answer you when you contact support.
We do not sell personal data and do not share it with third parties for their own use. Data is shared only when your company asks for it (for example a payment through a payment provider your company sets up) or when the law requires it.
Security
Data travels between the app and the server over encrypted connections (HTTPS). The sign-in token is kept in the phone's secure storage. Each company sees only its own records.
How long we keep it
Records are kept while the company account is active. When an account is deleted, its personal data is removed within 30 days. Accounting records that the law requires a business to keep (invoices, bills, tax records) are kept for the period the law sets, and are then removed.
Your choices
You can see and correct your details in the app. You can ask for a copy of your data or for your account to be deleted: see Delete your Lekha+ account.
Children
Lekha+ is business software for adults and is not meant for children.
Changes
If this policy changes we will update this page and its date.
Contact
Shangrila Informatics Pvt. Ltd., Nepal ยท [email protected]