Privacy Policy

1.Who We Are

• Data controller: Vardhman Agencies, Udaipur, Rajasthan, India.
• Platform: VKraya — an e-commerce platform for construction and hardware materials, operated for business customers including retailers, contractors, and related professionals.

2.Information We Collect

We collect information you provide directly and information generated when you use the Platform:

• Account & profile: name, email address, phone number, password (stored securely by our authentication provider), customer role (e.g. retailer or influencer), shop name, owner name, and optional business details such as address, city, state, GST number, PAN, and Aadhaar where required for account verification.
• Delivery addresses: street, city, state, postal code, country, and address labels you save for orders.
• Orders & payments: order history, items purchased, amounts, delivery preferences, payment method selected (e.g. cash on delivery, bank transfer, or UPI), order notes, and payment proof images you upload to confirm payment.
• Device Permissions: To facilitate the upload of payment proofs or product requests, the app may request access to your device's camera or photo gallery. This data is only accessed when explicitly initiated by you.
• Shopping activity: cart contents, wishlist items, product requests, reviews, ratings, and promotional codes applied at checkout.
• Communications: messages sent through in-app chat (including order-related support), contact form submissions, and notification preferences.
• Device & notifications: push notification tokens (FCM) when you enable notifications on the mobile app, used to deliver order updates and messages.
• Technical data: basic usage data needed to operate the Platform (e.g. session identifiers, timestamps, and error logs) through our hosting and backend services.

3.How We Use Your Information

• Create and manage your account and business profile.
• Process, fulfil, and deliver orders; verify payments and resolve disputes.
• Provide customer support, in-app messaging, and order notifications.
• Operate cart, wishlist, reviews, rewards, and product-request features.
• Comply with legal obligations and enforce our Terms & Conditions.
• Improve Platform security, reliability, and user experience.

4.Legal Basis

• We process your data to perform our contract with you (providing the Platform and fulfilling orders), with your consent where required (e.g. push notifications), and for our legitimate business interests (fraud prevention, support, and service improvement), in line with applicable Indian law including the Information Technology Act, 2000 and related rules.

5.Sharing & Third-Party Services

We do not sell your personal information. We share data only as needed to run the Platform:

• Convex: database, authentication, file storage, and real-time backend services.
• Google Firebase Cloud Messaging: to send push notifications to your device when enabled.
• Hosting providers: to serve the website and application (e.g. Vercel or similar).
• Logistics & payment partners: delivery address and order details shared with couriers or payment processors only as required to complete your order.
• Legal requirements: when required by law, court order, or to protect our rights and users' safety.

Third-party services have their own privacy policies. We encourage you to review them where relevant.

6.Data Storage & Security

• Your data is stored on secure cloud infrastructure operated by our service providers. Passwords are handled through our authentication system and are not stored in plain text by us.
• We use reasonable technical and organisational measures to protect your information. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

7.Data Retention

• We retain your information for as long as your account is active and as needed to provide services, comply with legal and tax obligations, and resolve disputes.
• Order and transaction records may be kept for the period required under applicable Indian commercial and tax laws.
• You may request account deletion; we will delete or anonymise data where we are not legally required to retain it.

8.Your Rights & Choices

• Access & correction: update your profile and addresses in the app or by contacting us.
• Account & Data Deletion: You can request the deletion of your account and associated personal data directly within the app settings or by submitting a formal request via email to Vardhmanagencies1998@gmail.com. We will process your request and delete or anonymize your data within the legally mandated timeframe, subject to statutory tax or commercial retention requirements.
• Notifications: disable push notifications in your device settings or notification preferences in the app.
• Withdraw consent: where processing is based on consent, you may withdraw it without affecting prior lawful processing.

To exercise these rights, contact us using the details in Section 12. We will respond within a reasonable time as required by applicable law.

9.Children's Privacy

• The Platform is intended for users aged 18 and above. We do not knowingly collect personal information from children. If you believe a minor has provided us data, please contact us so we can delete it.

10.International Data Transfers

• Our service providers may process data on servers located outside India. Where this occurs, we take steps to ensure appropriate safeguards consistent with applicable law.

11.Changes to This Policy

• We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect changes. Continued use of the Platform after updates constitutes acceptance of the revised policy.