Privacy Policy

This Privacy Policy explains how Zorvix Infotech Private Limited ("we", "us", "our"), operator of VaanijyaSetu, collects, uses, discloses, and protects your personal information when you use our platform. By using the Service, you consent to the practices described below.

1. Information We Collect

Account information

• Name (individual) or company name (business)
• Email address
• Mobile number
• Address (street, city, state, pincode)
• GSTIN (optional, for GST-registered businesses)
• Password (stored hashed, never in plain text)
• Store domain (for WooCommerce/Shopify integration)

Transaction information

• Order details (products, quantities, customer ship-to address)
• Payment metadata from Razorpay (transaction IDs, payment status — we never receive or store your card details)
• Wallet balance and transaction history

Automatically collected

• IP address, browser type, device information
• Pages visited, features used, time spent
• Cookies and similar technologies (for session management and analytics)

2. How We Use Your Information

• To create and manage your account
• To process orders and payments
• To ship products to your end-customers
• To send transactional emails (OTPs, order confirmations, invoices, password resets)
• To provide customer support
• To send service updates and promotional communications (you can opt out anytime)
• To detect and prevent fraud, abuse, and security incidents
• To comply with legal obligations including GST reporting
• To improve the Service through aggregate analytics

3. Sharing Your Information

We do not sell your personal information. We share it only with:

• Payment processors (Razorpay) — to process subscription and order payments
• Shipping partners — to deliver orders to your end-customers (name, ship-to address, contact only)
• SMS gateway (Fast2SMS) — for OTP delivery to your mobile number
• Email service providers — for transactional and marketing email delivery
• Hosting infrastructure (Hostinger) — where the platform runs
• Legal authorities — when required by law, court order, or to protect our rights

All third parties are contractually obligated to protect your information and use it only for the specified purposes.

4. Data Security

We employ industry-standard measures to protect your data:

• All traffic encrypted via HTTPS
• Passwords hashed using bcrypt
• Database access restricted and audited
• API tokens scoped to specific accounts and domains
• Daily encrypted backups of database and uploaded files
• Rate limiting and CSRF protection on all forms

No system is completely secure. In the event of a data breach, we will notify affected users within 72 hours and the relevant authorities as required by Indian law.

5. Data Retention

We retain your information for as long as your account is active, plus the periods required for:

• Tax compliance (GST records: 8 years per Indian law)
• Dispute resolution (3 years from last transaction)
• Legal obligations

You may request deletion of your account; we will delete personally identifiable data within 30 days of confirmation, except where retention is legally required.

6. Your Rights

Under applicable Indian privacy laws, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — update inaccurate information (most fields are editable in your dashboard)
• Deletion — request removal of your account (subject to legal retention)
• Data portability — receive your data in a machine-readable format
• Withdraw consent — opt out of marketing emails via the unsubscribe link in any email, or by emailing us

To exercise these rights, contact support@vaanijyasetu.com.

7. Cookies

We use essential cookies for session management (login state, CSRF protection) and optional cookies for analytics. You can disable non-essential cookies in your browser settings; essential cookies cannot be disabled as they are required for the Service to function.

8. Children

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have done so, please contact us for immediate removal.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or platform notice 14 days before taking effect.

10. Contact Us

For privacy-related questions or to exercise your rights, contact: