VYAPVERSE DIGITAL SOLUTIONS LLP

Privacy Policy

Effective date: 25 August 2026. This Policy explains how we collect, use, disclose, retain and protect personal data when you use VyapVerse websites, merchant tools, hosted storefronts, APIs and related services.

1. Scope and roles

This Policy applies to visitors to vyapverse.com, merchants and their authorised staff, customers using VyapVerse-powered storefronts, support contacts and other people who interact with our services. For merchant account, subscription, security and platform-administration data, VyapVerse determines the purposes and means of processing. For storefront customer, order and fulfilment data processed on a Merchant’s instructions, the Merchant is generally the primary business responsible for that data and VyapVerse provides the supporting technology. A Merchant’s own privacy notice may also apply.

2. Information we collect

We may collect information you provide, including your name, email address, phone number, business and store name, address, tax or licence details, account credentials, staff roles, support communications and subscription or invoice information. Storefront transactions may include customer contact details, delivery and billing addresses, order contents, payment method and status, shipment information, cancellations, returns and support records. Merchants may upload product listings, images, store content and marketing materials. We do not intend to store complete card numbers or card security codes; payment providers process those credentials under their own policies.

3. Information collected automatically

When you use the services, we may receive IP address, browser and device type, operating system, referring page, pages and features used, timestamps, approximate location derived from IP, identifiers, diagnostic events, security logs and performance information. We use cookies, local storage and similar technologies for authentication, preferences, shopping carts, security, service operation and, where enabled, analytics. You can control cookies through your browser, although disabling essential storage may prevent parts of the service from working.

4. How we use information

We use information to create and administer accounts and storefronts; authenticate users; process subscriptions; provide checkout, order, payment-status, invoicing, shipping, support, marketing and reporting tools; localise storefronts; prevent fraud and abuse; secure and troubleshoot the platform; communicate service notices; enforce agreements; comply with law; and improve reliability and usability. We may send product updates or marketing communications where permitted, and you may opt out of promotional email while continuing to receive essential account, transaction and security messages.

5. VyapAI and automated features

VyapAI may process text and structured store or product information that an authorised user submits to generate drafts, translations, campaign suggestions or business guidance. We use safeguards and usage controls designed to minimise unnecessary data. AI output is assistive and should be reviewed before publication or business use. We do not use storefront customer payment credentials as AI prompts. Where an external model or infrastructure provider processes a request for us, it acts under applicable contractual and security controls.

6. Google Search and SEO services

VyapVerse may use a platform-managed Google account and the Google Search Console API to retrieve read-only search-performance information for eligible storefronts, such as queries, pages, clicks, impressions, click-through rate, average position, device and country. We use this information to calculate SEO health, identify opportunities and provide recommendations. Merchants are not required to connect personal Google accounts. Use of information received from Google APIs will comply with the Google API Services User Data Policy, including its Limited Use requirements. VyapVerse does not sell Google Search Console data or use it for personalised advertising.

7. How we share information

We share information only as reasonably necessary to operate the services, fulfil user instructions or comply with law. Recipients may include cloud hosting and database providers, payment gateways, shipping and logistics providers, transactional email and messaging providers, security and monitoring services, customer-support tools, analytics providers, Google services used for Search Console and product discovery, professional advisers and public authorities. A Merchant and its authorised staff can access information belonging to that store. We may also disclose information in connection with a merger, financing, reorganisation or sale of assets, subject to appropriate safeguards and notice where required. We do not sell personal data.

8. Payments and third-party services

Services such as Razorpay, Shiprocket, Google and other integrations operate under their own privacy policies and terms. Information required to complete a payment, shipment, domain connection or requested integration may be sent directly to or received from those providers. Their processing is governed by their policies in addition to this Policy. Merchants are responsible for selecting lawful integrations and giving customers any notices required for their use.

9. Legal grounds and consent

Depending on the context and applicable law, we process personal data to perform a contract, take requested pre-contract steps, comply with legal obligations, protect legitimate business and security interests, respond to emergencies or legal claims, and act on consent. Where processing relies on consent, you may withdraw it prospectively, subject to processing already undertaken and any other lawful basis that remains available.

10. Retention and deletion

We retain personal data only for as long as reasonably necessary for the purposes described here, including service delivery, security, fraud prevention, dispute resolution, backups, audit, taxation and legal compliance. Retention periods vary by record type and legal obligation. Merchants can request storefront closure or deletion through available account tools. Customers should normally contact the relevant Merchant about storefront order or profile data; they may also contact us if the Merchant is unavailable. Deletion may be delayed or limited where retention is required by law, needed for a transaction or dispute, or technically necessary in time-limited backups.

11. Your choices and rights

Subject to applicable law, you may request access to, correction or updating of, deletion of, or information about processing of your personal data; withdraw consent; opt out of eligible marketing; or raise a grievance. We may need to verify your identity and authority before acting. If your request concerns a particular Merchant’s storefront, include the store name and order or account reference so it can be routed correctly. You may also have the right to complain to the relevant authority under applicable data-protection law.

12. Security

We use administrative, technical and organisational measures intended to protect information, including access controls, tenant separation, encrypted transport, restricted secrets, authentication, monitoring and backups where appropriate. No Internet transmission or storage system is completely secure, so we cannot guarantee absolute security. You are responsible for protecting your credentials, using secure devices and promptly reporting suspected unauthorised access.

13. International processing

Our providers and systems may process or store information in India or other countries where they operate. Where information is transferred across jurisdictions, we use safeguards appropriate to the information, service and applicable law. The laws of those locations may differ from those where you live.

14. Children

VyapVerse merchant services are intended for adults and businesses and are not directed to children. We do not knowingly permit a person under 18 to create a Merchant account. If you believe a child has provided personal data without appropriate authority or consent, contact us so we can investigate and take suitable action.

15. Changes to this Policy

We may update this Policy to reflect changes in law, technology, providers or services. We will publish the revised Policy with a new effective date and provide additional notice where required. Your continued use after an update is subject to the revised Policy to the extent permitted by law.

16. Contact and grievance requests

For privacy questions, requests or grievances, email support@vyapverse.com with the subject “Privacy Request”. Please include sufficient information to identify your account or the relevant storefront, but do not email passwords, card credentials or other unnecessary sensitive information. VyapVerse Digital Solutions LLP will review and respond in accordance with applicable law.