Privacy Policy

1. Information we collect

• Account information — name, email, phone and the role you register with (customer or business owner).
• Business listing information — business name, contact details, category, subcategory, location, services, pricing, photos and links you publish on your profile.
• Customer requirement information — requirement details, category, location, budget, timelines and messages you submit.
• Verification documents — GST, Udyam/MSME and FSSAI certificates uploaded by businesses for review.
• Payment and billing information — membership plan, billing details, GSTIN, amount, applicable GST, invoice details and payment reference. Card and banking details are handled by our payment gateway and are not stored by us.
• Technical and usage data — basic log, device and cookie data required to operate and secure the platform.

2. How we use information

• To create and operate accounts, listings and dashboards.
• To authenticate accounts and provide email or mobile verification, including OTP-based verification.
• To send transactional communications such as verification codes, payment confirmations, invoices, membership updates and important account notices.
• To make approved business profiles discoverable in search, categories and locations.
• To match customer requirements with relevant businesses and enable enquiries and responses.
• To deliver enquiries and leads to the relevant business.
• To review verification documents and set verification status.
• To process membership payments, generate invoices and provide support.
• To prevent misuse, fraud and spam, and to comply with legal obligations.

3. Verification documents

GST, Udyam and FSSAI documents, where applicable, are collected for business verification and review purposes. They are stored in private storage, are never shown publicly, are not included in the sitemap and are not indexable. They are accessible only to the business that uploaded them and to authorised platform administrators, through short-lived secure links. Public profiles display verification status only — never the documents themselves.

4. Sharing of information

Public business profile information is visible to anyone using the platform. When you submit an enquiry or requirement, the details you provide are shared with the relevant or matched businesses so they can respond. We also use trusted third-party service providers for hosting, database, storage, authentication, OTP delivery, email communications and payment processing. These providers may process information on our behalf as necessary to provide their respective services, subject to applicable contractual, security and legal requirements. We do not sell personal information. We may disclose information where required by law.

5. Cookies and analytics

We may use cookies and similar technologies that are necessary for authentication, security and operation of the platform. Where analytics or similar tools are enabled, they may collect usage and technical information to help us understand how the platform is used, improve our services and maintain platform performance. The use of such technologies is subject to applicable law and our data practices described in this Privacy Policy.

6. Data security

Access to data is controlled through authentication, role-based permissions and database-level access rules. Sensitive verification documents are stored in private storage and access is restricted to the business that uploaded them and authorised platform administrators. Where applicable, access to private documents is provided through short-lived secure links. We use reasonable technical and organisational safeguards designed to protect information against unauthorised access, misuse, alteration or disclosure. However, no online service or method of electronic storage can guarantee absolute security.

7. Data retention

Account, business listing, requirement, enquiry, membership, payment and invoice records are retained for as long as necessary to provide the platform's services and to meet applicable legal, tax, accounting, fraud-prevention and audit requirements. Verification documents may be retained for authorised verification and administrative purposes. Where a user requests account deletion, information that is not required to be retained for legal, regulatory, security or legitimate record-keeping purposes may be deleted or anonymised in accordance with applicable requirements.

8. Your rights and requests

You can access and update certain account and business information through your dashboard. You may contact us to request access to, correction or deletion of your personal information, withdrawal of consent where processing is based on consent, or to raise a privacy-related concern. Certain information may be retained where necessary to comply with applicable legal, tax, accounting, fraud-prevention, security or record-keeping requirements. We may need to verify your identity before processing certain requests and will handle eligible requests in accordance with applicable data protection and privacy laws.

9. Children

VYAPARKhoj is intended for users who are 18 years of age or older. We do not knowingly collect personal information from children under 18. If we become aware that personal information has been collected from a child in a manner inconsistent with applicable law, we will take appropriate steps to address it, which may include deleting the information or restricting the relevant account.

10. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to our platform, services, legal requirements or data practices. The latest version will be published on this page. Where appropriate, we may also provide notice of material changes through the platform or other available communication channels.

11. Contact

For privacy questions, write to support@vyaparkhoj.com or use our contact form.