Privacy Policy

We collect information that you provide directly to us when you:

• Create an Account: Name, email address, phone number, and password.
• Set Up a Store: Business name, logo, brand colors, product information, pricing, and images.
• Make a Payment: Billing address and payment method details (processed securely via Razorpay/Cashfree — we never store your card number).
• Contact Support: Any information you provide in support tickets, emails, or WhatsApp messages.

We also automatically collect:

• Usage Data: Pages visited, features used, time spent on the platform.
• Device Data: Browser type, operating system, screen resolution, and IP address.
• Cookies: Essential cookies for authentication and session management. We do not use third-party advertising cookies.

Your data is used strictly to:

• Provide, maintain, and improve the Vaarinya platform.
• Process payments and generate invoices with GST compliance.
• Send transactional notifications (order confirmations, payment receipts, renewal reminders).
• Provide customer support and respond to your inquiries.
• Detect and prevent fraud, abuse, or security incidents.

• Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256).
• Hosting: Our servers and databases are hosted on secure, SOC 2 compliant infrastructure.
• Access Control: Only authorized Vaarinya engineers have access to production databases, governed by strict role-based access policies.
• 2FA Protection: We offer Google Authenticator-based Two-Factor Authentication to protect your account from unauthorized access.
• Backups: Automated daily backups ensure your data is recoverable in case of system failures.

Under the Digital Personal Data Protection (DPDP) Act, 2023 and GDPR, you have the right to:

• Access: Request a copy of all personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request complete deletion of your personal data ("Right to be Forgotten").
• Portability: Request your data in a machine-readable format (CSV/JSON).
• Withdraw Consent: Withdraw your consent for data processing at any time.
• Grievance Redressal: File a complaint with our Data Protection Officer if you believe your data has been mishandled.

To exercise any of these rights, contact us via WhatsApp at +91 83838 78187 or email privacy@vaarinya.in.

When your subscription plan expires or is cancelled:

• 30-Day Grace Period: Your storefront goes offline, but all data (products, customers, orders, images, configurations) is securely retained for 30 days. Reactivate anytime during this window to resume where you left off.
• Data Export Window: During the grace period, you may request a full data export in CSV/JSON format via support.
• Permanent Deletion: After 30 days, all storefront data is permanently and irreversibly deleted from our servers.
• Account Credentials: Your Vaarinya login (email, name) remains active even after data deletion, so you can create a new store in the future.
• Legal Records: Financial records (invoices, transactions, GST filings) are retained for up to 7 years as required by Indian tax law.

For any privacy-related questions, data requests, or complaints: