Privacy policy

What we collect

• Your mobile number. It is how you sign in — there is no password.
• Your shop details. Name, owner name, address, pincode and transporter preference.
• Your GSTIN. Indian law requires it on a tax invoice, and it decides whether your order is charged CGST + SGST or IGST.
• Your orders. What you ordered, when, for how much, and their delivery and payment status.
• For agents: your referral code, the shops you onboard, and the commission you earn.

What we do not collect

No location, no contacts, no photos, no device identifiers for advertising. There is no advertising network and no third-party analytics in this app. We do not sell or rent your data to anyone, for any purpose.

Why we hold it

To take and fulfil your orders, to raise a compliant GST invoice, to calculate agent commission, and to contact you about an order. Nothing else.

Who else sees it

• The wholesaler you are ordering from, and their staff.
• The agent who onboarded your shop, if any — they see your shop name and your order totals, because their commission depends on them.
• Supabase, which hosts the database, and the SMS provider that delivers your one-time code. Both process data on our instructions only.
• A tax authority, if we are legally required to produce records. Nobody else.

How long we keep it

Invoices and the order records behind them are kept for eight years, because the GST Act requires it. Everything else is deleted within 90 days of you closing your account. One-time codes are discarded after ten minutes.

Your rights

Under the Digital Personal Data Protection Act 2023 you may ask us for a copy of your data, ask us to correct it, or ask us to delete your account. Write to the address below and we will respond within 30 days. Records we are legally required to retain are the one exception, and we will tell you which those are.

Security

Traffic is encrypted in transit. Access is enforced per row in the database, so one shop cannot read another shop's orders. One-time codes are stored hashed, never in the clear.

Children

VYAARO is a wholesale trading tool for registered businesses. It is not intended for anyone under 18, and we do not knowingly collect their data.

Contact

Grievance Officer, VYAARO — privacy@vyaaro.com