Privacy Policy

This policy describes how VYAPAARIDESK SERVICES LLP, operating as VyapaariDesk (“we”, “us” or “our”), handles personal information through vyapaaridesk.com, its business software, mobile access, enquiries and support services.

For account administration, website enquiries and our own service operations, we decide why and how information is used. For customer, supplier, staff and transaction records that a business adds to its workspace, we provide the software used to store and process those records. The business decides what it records, whom it authorises and which features it uses.

If your information was entered by a shop using VyapaariDesk, contact that shop first about its records. We can help the authorised business handle a request and address concerns about our own processing.

The information involved depends on the features you use and the records you submit. Not every account provides every category below.

Only upload information you are authorised to use. Avoid adding unnecessary sensitive documents, personal financial credentials or unrelated personal information to notes, attachments or support messages.

• Provide the service: create accounts, maintain shops and staff access, run billing and inventory features, retrieve records and generate reports or exports.
• Operate selected integrations: submit authorised GST, e-Invoice or E-Way Bill requests and record their responses; process subscription payments and connected messaging.
• Support and communication: respond to enquiries, troubleshoot problems, communicate subscription or account updates and send verification or service messages.
• Security and reliability: manage sessions, validate requests, investigate misuse, diagnose failures and improve the website and service.
• Administration and legal obligations: maintain transaction records, resolve disputes and respond to lawful requests.

Where processing depends on your consent, you may withdraw that consent by contacting us or using an available feature control. Some information is still needed to deliver requested services or meet applicable legal obligations. Withdrawing access to an integration may prevent that feature from operating.

Session cookies and browser storage help maintain sign-in, protect forms, remember preferences and support application operation. Blocking necessary cookies may affect login and other features.

Our public website uses Google Analytics to measure visits and interactions. Google receives technical and usage information when its analytics script runs. Learn more in Google’s Privacy Policy and about Google’s analytics opt-out browser tool.

The marketing homepage also includes a Meta Pixel that sends page-view events to Meta for marketing measurement. Review Meta’s Privacy Policy and its available privacy or advertising controls. External resources, such as fonts or embedded content used on a page, may also send a request to their provider with technical connection information.

You can manage cookies and site storage in your browser, use browser tracking controls or the provider’s available opt-out tools. Deleting cookies does not delete business records stored in your account.

Information may be processed by the providers needed for hosting, payments, email, messaging, website analytics or integrations that you use. Which provider receives information depends on the feature and its configuration.

• GST and document services: enabled workflows send the required taxpayer, invoice, return or transport information to the configured provider, including Sandbox, and the relevant government systems.
• Payments: checkout providers, such as Cashfree for configured subscription payments, handle payment credentials through their payment flow. We retain amounts, transaction references, status and subscription records. Payment credentials requested by a checkout provider are governed by that provider’s terms.
• Authorised access and sharing: shop owners and permitted staff may access workspace records. Sending an invoice, exporting a file or creating a share link can make the selected information available to its recipient. Share only with intended recipients.
• Legal and business administration: disclosure may be necessary to comply with law, investigate misuse, protect legal rights or facilitate a business transfer with relevant confidentiality safeguards.

We do not sell customer business records. A third party’s own service is covered by its privacy policy as well as the instructions or configuration relevant to the connection. Review those policies before enabling an optional integration.

Verification, account, payment and service messages may be sent through the configured email, phone or messaging channel. A shop may separately use the software to send invoices or follow-up messages to its customers; the shop is responsible for those communications and the contact information it supplies.

To stop promotional messages from VyapaariDesk, use an available opt-out or email our support contact with your request. Necessary security and account-service messages may continue while you use the service.

Account and workspace records are retained to operate the service. Information may also need to be kept for accounting, tax, security, recovery, dispute resolution or other applicable legal purposes. There is no single retention period for all categories of information.

Request account closure or deletion using our account deletion request form or the contact below. We will verify your identity and authority, assess the records covered by the request and explain any information that must be retained. Closing an account or cancelling a subscription should not be assumed to erase every record immediately.

Deletion from active systems may not immediately remove copies in backups, archived logs, recipients’ exports or independent third-party systems. Where those copies exist, their retention and removal depend on the relevant recovery process, legal requirement or provider. Export records you need before requesting deletion.

The service uses authenticated access, password hashing, shop scoping, staff permissions and request validation to help protect information. The website is served over HTTPS. Safeguards reduce risk; they do not make any internet service immune to misuse or incidents.

Keep your devices, login details and registered email secure. Review staff permissions and connected portal access, and remove access that is no longer needed. Never send passwords, OTP codes or API secrets in a privacy request. If you suspect unauthorised access, contact support promptly with a factual description of the concern.

You can update supported account or business fields, manage permitted staff access, use available exports and review connected features in your workspace.

Subject to applicable law, you may ask about the personal information we hold, request access or correction, seek deletion, withdraw consent where processing relies on it, or raise a privacy grievance. We may need reasonable verification before disclosing information or changing records. If we cannot fulfil a request, we will explain the relevant limitation.

For records controlled by a shop, contact that shop and identify the relevant transaction or relationship. If your concern remains unresolved, you may use a complaint or escalation mechanism available under applicable law. Indian data protection requirements, including the Digital Personal Data Protection Act and its rules, apply according to their applicable provisions and commencement dates.

VyapaariDesk is business software and is not intended for children to create their own accounts. Businesses must have the necessary authority and comply with applicable requirements when entering information about another person, including a child. If you believe a child’s information has been submitted inappropriately, contact us so we can investigate.

Hosting, analytics, communications and integration providers may process information in India or other countries according to their infrastructure and service arrangements. Enabling an external service does not mean all of its processing takes place in India. You may contact us with a question about a specific integration or processing arrangement.

We may update this policy when our services, information practices or applicable requirements change. The date at the top identifies the current version. Where a change requires a separate notice or consent, we will provide that notice or request rather than treating this page alone as consent.