At Sumnima Agriculture and Research Pvt. Ltd. (“Sumnima Group”, “we”, “our”, or “us”), we respect your privacy and are committed to protecting any personal and organizational data entrusted to us. This Privacy Policy details our practices concerning data collection, usage, storage, and our explicit compliance with external services including the Google API Services User Data Policy.
1. Information We Collect
We collect information in the following contexts:
- Commercial & Dealership Inquiries: When prospective distributors, farmers, or business partners submit an inquiry via our website forms or WhatsApp link, we collect contact information including your full name, organization/farm name, phone number, email address, district/location, and message contents.
- Technical & Browsing Data: Standard server logs, IP addresses, browser types, language preferences, and page request timestamps to optimize website delivery, ensure server security, and monitor performance.
- Administrative Integration Credentials: For authorized system administrators managing media assets, our platform securely processes OAuth credentials authorized strictly by our designated storage account to upload and stream corporate documentary videos.
2. Use of Information
Collected information is used exclusively to:
- Respond to agricultural produce inquiries, dealership requests, and Himalayan Natural Water distributorship applications.
- Deliver high-performance, secure media playback and streaming across desktop and mobile devices.
- Maintain security, prevent unauthorized access to administrative CMS systems, and troubleshoot technical errors.
- Comply with applicable commercial laws and business regulations of Nepal.
3. Google API Services & Google Drive User Data Policy
Our website and administrative Content Management System (CMS) utilize Google OAuth 2.0 and the Google Drive API v3 to enable corporate video management.
Explicit Scope & Access:
- Our application requests the narrow
https://www.googleapis.com/auth/drive.filescope. This grants access only to files and folders created or explicitly opened by our application. - Our application cannot and does not view, search, read, modify, or delete any personal, private, or unrelated documents or folders residing on the owner's Google Drive.
- We access
https://www.googleapis.com/auth/userinfo.emailstrictly to verify that the authorized account matches our pre-registered administrative storage email.
Data Protection, Encryption & Limited Use Disclosure:
- Storage & Encryption: OAuth refresh tokens are encrypted at rest using server-side AES-256-GCM authenticated cryptographic encryption before being stored in our Neon PostgreSQL database. Secrets are never exposed to browser-facing code or public endpoints.
- No Transfer or Sale: Sumnima Group does not sell, trade, rent, or transfer any Google user data, files, or tokens to third parties or advertising networks.
- No AI Model Training: Google user data and file contents are never used to train generalized artificial intelligence or machine learning models.
- Limited Use Compliance: Sumnima Group’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
4. Media Streaming & Public Video Playback
Videos uploaded to our corporate Google Drive library are streamed publicly through our own website-mediated reverse proxy (/api/public/videos/[slug]/stream). Public visitors stream video bytes without direct access to internal Google Drive file IDs, raw storage URLs, or underlying Google account credentials.
5. Cookies & Local Storage
Our website uses minimal local storage and session storage solely to persist your language preference (Nepali vs. English) and to retain administrative session tokens for authenticated managers. We do not use intrusive third-party cross-site tracking cookies.
6. Data Retention & Revocation of Permissions
Administrators can disconnect Google Drive at any time directly through the Admin CMS panel. Furthermore, access may be revoked at any time via your Google Account Security Settings. Upon revocation or disconnection, stored access tokens are immediately purged.
7. Contact & Official Corporate Details
If you have questions, concerns, or requests regarding this Privacy Policy, please contact our administrative office:
- Company Name: सुम्निमा एग्रिकल्चर एण्ड रिसर्च प्रा. लि. (Sumnima Agriculture and Research Pvt. Ltd.)
- Corporate Group: Sumnima Group
- Registered Address: Sidingwa-7, Surumkhim, Taplejung, Koshi Province, Nepal
- Official Email: sumnimacompany3@gmail.com
- Phone / WhatsApp: +977 9714539947
- Website: https://www.sumnimagroup.com
Related Legal Document: Terms of Service (नियम तथा सर्तहरू)