Privacy Policy

1. Information We Collect

Account information: your email address, phone number, and shop details such as shop name, address, contact details and GST number. If you sign in with a password, we do not see it in readable form.

Business data you enter: products, photos, bookings, payments, invoices, expenses, sales and reports. This includes your customers' names, phone numbers and addresses. We store this on your behalf and do not sell it or use it to market to your customers.

Staff information: if you invite staff, we store their email address, the name they choose, the permissions you give them, and a log of changes made in your shop (who changed what, and when) so you can review activity.

Billing information: your plan, its dates and status, and the identifiers our payment provider gives us. Card and UPI details are entered with the payment provider (Razorpay, the App Store or Google Play); we never see or store full card numbers.

Free-trial record: to give each phone number and email address only one trial, we keep a record of the email and phone used for a trial. This record is kept even if your account is later deleted.

Technical information: crash and error reports (which include your account ID and email so we can fix problems), basic device and browser details, and anonymous visit statistics on our marketing website.

Website forms: if you request a demo or contact us, we store the name, phone number, shop name, city and message you send.

2. How We Use Your Information

We use your information to provide and secure the Service: syncing your bookings across devices, generating invoices and reports, handling subscription payments, preventing misuse (such as repeated free trials), diagnosing errors, answering your questions, and meeting legal obligations. We do not sell your information, or your customers' information, and we do not show advertising.

3. Your customers' data

For the customer details you enter, you decide what is collected and why; we process it only on your behalf, to run Vastram for you. You are responsible for having the right to enter it and for telling your customers how you use it.

4. Who we share it with

We share only what is needed with a small number of service providers who help us run Vastram: Supabase (database, sign-in and file storage), Razorpay (web subscription payments), RevenueCat together with the App Store and Google Play (mobile subscriptions), Sentry (crash reporting), Vercel (hosting and website visit statistics), and Google (fonts used to display and generate documents).

Each receives only what it needs for its job; for example, payment providers receive billing details, not your customers' booking details. We may also disclose information if the law, a court or a government authority requires it, or to protect the rights and safety of Vastram and its users.

5. Where your data is processed

These providers may store and process data on servers outside India. By using Vastram you accept this transfer, and we choose providers that use recognised safeguards.

6. Data Security

We use reasonable safeguards: data is encrypted in transit, access is separated per shop using database-level access rules (Row Level Security), and staff access follows the permissions you set. No system is completely secure, so we cannot guarantee absolute security. If we become aware of a breach that affects your data, we will notify you as the law requires.

7. Retention and deletion

We keep your shop's data while your account is active. You can ask us to delete your account and its data by emailing [email protected]. We will delete it within a reasonable time, except for records we must or may lawfully keep, such as payment and tax records, the free-trial record described above, and encrypted backups that expire on their normal cycle.

8. Your rights

You can ask us to give you a copy of your data, correct it, or delete it, and you can withdraw consent for processing that depends on it (which may mean we can no longer provide the Service). Email [email protected]. Grievance Officer: the proprietor of Vastram, at [email protected]. We will acknowledge and respond within the time the law requires.

9. Cookies and browser storage

The web app uses your browser's storage to keep you signed in and to remember your language. We do not use advertising cookies. Our marketing website uses privacy-friendly visit statistics.

10. Children

Vastram is for businesses and is not meant for anyone under 18. We do not knowingly collect information from children.

11. Changes to this policy

We may update this policy. The date at the top shows the latest change, and we will tell you in the app or by email if the change is significant.

12. Contact

Questions or requests about your data: [email protected].