Sarang Business OS Lite
Last updated: September 2026. Applies to Sarang Business OS Lite (the desktop application), its licensing, and the Sarang pages on aszurex.com.
Sarang the application on your computer, this website, and the small amount of licensing information the application and our payment partners exchange with us behave differently, so they are explained separately. AszureX ("we", "us") is the data controller (in India's terms, the data fiduciary) for the personal data described in sections 2 and 3.
Sarang is offline-first. Every invoice, customer, product, patient or student record, and report you create is stored on your own computer, in a database under your Windows user profile. We do not receive it, store it or have access to it. There is no cloud sync and no remote database.
Using Sarang on more than one PC or phone. If you switch on multi-user mode, other PCs on your own network talk directly to your shop PC, protected by the shared secret you set. Features such as customer QR ordering, waiter view, Kitchen Display and Doctor Pad let phones and tablets on your Wi-Fi open pages served by your shop PC. In all of these, data moves only inside your own network; none of it passes through us.
What the application does send to us. Only when the computer happens to be online, and never in a way that stops Sarang from working offline:
These hashes are not anonymous to us: because we issued your key, we can match its hash to the details you gave when you downloaded or paid. So we treat them as personal data and protect them accordingly. No invoice, customer, product, patient, student or other business data is ever sent. Sarang contains no advertising and no analytics tools.
Download form. Before downloading Sarang we ask for your name, email address, phone number, business name, business type and country (state and city are optional). Suggestion box. If you send a suggestion, we receive your message and the email address if you choose to give one. Payments. When a license payment is made, our payment partner tells us the buyer's email address, region and the outcome, so we can send the key. We never receive your card or bank details.
Why, and on what basis. To send your download link and license key (needed to perform our agreement with you), to give support, to prevent forged or shared keys, to send you notices about your license (such as renewal reminders), and to keep records the law requires. Product news: the download form has an unticked box for occasional news about Sarang; we send these only if you ticked it, and you can ask us to stop at any time. We do not sell your information and do not share it with anyone for their marketing.
Website analytics. Our pages use Google Analytics, which sets cookies and records visits (pages viewed, approximate location, device type). It only runs if you click "Accept" on the cookie banner shown on your first visit; declining means it never loads, and the site and the download still work exactly the same. On the Sarang page we also record when the download form is opened and started, with the country and business type chosen; never your name, email or phone.
Companies that process data for us. Zoho Mail (email, India), Google (Google Sheets, where we keep a log of downloads, suggestions, licenses and usage; Google Analytics; Google Fonts, which loads the page's font), Render (hosts the website and its server), Razorpay and Lemon Squeezy (payments), GitHub (updates), and Unsplash (some images on our pages, which can see your IP address). They handle data only to provide their service to us, under their own privacy terms. Some of them store data outside India, so your information can be processed in other countries.
How long we keep it. Download and license records: for as long as you have a current or recently expired license, then for up to three years for support and disputes, and longer only where the law requires (for example, tax records). Suggestions: for up to two years. Usage and license-check records: for as long as the license they belong to is kept. Then we delete or anonymise them.
You can ask us to tell you what we hold about you, correct it, delete it, or stop using it for marketing, and you can withdraw a consent you gave. You can also nominate someone to exercise these rights for you if you die or become unable to. Write to contact@aszurex.com from the email address you gave us; we may ask you to confirm it is you. We will reply within 30 days. Deleting a license record means we can no longer confirm that key to you or reissue it.
These rights are the ones India's Digital Personal Data Protection Act, 2023 gives you, and, if you are in the European Union, European Economic Area or United Kingdom, the rights under the GDPR for the data described in section 2. Complaints: write to the same address with the word "Grievance" in the subject, and we will answer within 30 days. If you are still not satisfied, you may complain to the Data Protection Board of India, or to your own country's data protection authority.
During setup, Sarang generates a one-time Password Recovery Code entirely on your own device. AszureX never sees, receives or stores this code. Because Sarang works fully offline, there is no email or SMS reset: if you lose this code and also forget your password, that account is permanently locked, and we have no way to recover it. Save it somewhere safe the moment it is shown.
License payments in India are processed by Razorpay. International payments are processed by Lemon Squeezy, which acts as merchant of record, so your statement shows its name and not ours. They handle your card or bank details under their own privacy policies. License payments are non-refundable except in the cases in our Refund & Cancellation Policy.
Security. Our servers use encrypted connections, and access to the records above is limited to us and the people who help us support you. If personal data we hold is ever breached in a way that harms you, we will tell you and the authorities as the law requires. The security of the data on your own PCs is yours to keep (passwords, backups, updates, who can use the PC).
Children. Sarang and this website are for businesses. They are not meant for people under 18, and we do not knowingly collect their data. If you think a child has given us information, write to us and we will delete it. If you keep children's records in Sarang (for example a school, clinic or coaching class), those records stay on your own computer and you are responsible for handling them as the law requires.
Changes. If we change this policy in a way that affects you, we will post the new version here with its date and, where we have your email, tell you before it applies.
Questions, requests and grievances: contact@aszurex.com. Support hours: Monday to Friday, 10:00 to 18:00 IST.