Privacy Policy
Last updated: June 2026
1. Introduction
VyapaarSaathi ("we", "us", "our") is committed to protecting your personal and business data. This Privacy Policy explains how we collect, use, store, and protect your information in compliance with the Digital Personal Data Protection Act, 2023 (DPDPA) and applicable Indian laws.
2. Data We Collect
Business Owners: Name, phone number, email, business name, GST number, address, bank account details (for invoice display), logo, signature image.
Customers (via Portal): Name, phone number, email, business name, GST number, address, payment records.
Transaction Data: Orders, invoices, payments, shipments, inventory records, product catalogs.
Automatically Collected: IP addresses, browser type, device information, usage analytics.
3. Purpose of Data Processing
We process your data for: providing the VyapaarSaathi trade management service, generating invoices and financial reports, facilitating payments between businesses, sending transactional notifications (WhatsApp, email), improving our service, and complying with legal obligations including GST compliance.
4. Data Storage & Security
Your data is stored on Supabase infrastructure with row-level security (RLS) enforced. Sensitive data like bank details are only used for display on invoices and are not shared with third parties. We use HTTPS encryption for all data in transit.
5. Data Sharing
We do not sell your data. We share data only with: Razorpay (for payment processing), Supabase (for data hosting), and as required by Indian law. Business owners may share customer data with their customers via the customer portal feature.
6. Your Rights (DPDPA)
Under the Digital Personal Data Protection Act, 2023, you have the right to: access your personal data, correct inaccurate data, erase your data (subject to legal retention requirements), withdraw consent at any time, and lodge a grievance with the Data Protection Board of India.
7. Data Retention
We retain your data for as long as your account is active, plus a reasonable period for legal compliance. Financial records (invoices, payments) may be retained for a minimum of 8 years as required by Indian tax laws. You may request deletion of non-essential data at any time.
8. Cookies & Analytics
We use essential cookies for authentication and session management. We may use analytics tools to understand usage patterns. You can control cookie settings in your browser.
9. Children's Privacy
VyapaarSaathi is a business service and is not intended for use by individuals under 18 years of age.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified through the application. Continued use of the Service after changes constitutes acceptance of the updated policy.
11. Grievance Officer
For privacy-related concerns or data access requests, contact our Grievance Officer at: [email protected] or +91-9741683447.