Privacy Policy

This Privacy Policy is published by Digital Edze Business Solutions LLP, based in Hyderabad, Telangana, India. Vendra is a self-hosted e-commerce software platform developed and offered by Digital Edze Business Solutions LLP.

When this policy refers to "we," "us," or "our," it means Vendra. When it refers to "you" or "your," it means you — the individual or business purchasing or using Vendra.

This Privacy Policy applies to:

• Information you provide to Vendra when enquiring about, purchasing, or being onboarded onto Vendra
• Information exchanged during WhatsApp or email-based support communications
• Information collected when you visit myvendra.in or any associated landing pages

This policy does not cover:

• The data your customers submit to your Vendra store (orders, addresses, payment info) — that data lives on your server and is governed by your own privacy policy
• Third-party services linked from our pages (e.g., payment gateways, communication tools) — those services have their own privacy policies

We collect only the information necessary to deliver and support your Vendra installation. Here is a clear breakdown:

We use the information we collect for the following purposes only:

• Order fulfilment: To process your payment, issue your GST invoice, and coordinate Vendra installation on your hosting
• Communication: To update you on installation progress, share delivery confirmations, and respond to support queries
• Technical setup: Hosting credentials are used solely to install and configure Vendra — they are deleted from our systems once setup is confirmed
• Support: To provide the 12-month email-based support included with your purchase
• Legal and accounting: To maintain purchase records, issue tax-compliant invoices, and fulfil legal obligations under Indian law
• Product improvement: Aggregated, anonymised feedback may be used to improve Vendra — never linked back to your identity

Under India's Digital Personal Data Protection Act, 2023 (DPDPA) and applicable IT Rules, we process your personal data on the following grounds:

• Contractual necessity: Processing required to fulfil your Vendra purchase — installation, support, and invoicing
• Consent: By submitting an enquiry or completing a purchase, you consent to the use of your contact details for order-related communication
• Legal obligation: Retaining purchase and payment records as required under the Goods and Services Tax Act and applicable accounting regulations
• Legitimate interest: Using anonymised, aggregated usage patterns to improve the Vendra platform, where this does not override your privacy rights

We do not sell, rent, or trade your personal information. We share it only in limited circumstances with the following categories of parties:

• Razorpay: Payment gateway used to process your purchase. Razorpay receives transaction details necessary to process and confirm payment. See Razorpay's Privacy Policy.
• MSG91 / WhatsApp Business API: Used to send order confirmations and support messages. Contact information is shared only to facilitate delivery of these messages.
• Internal team members: Vendra team members involved in your installation and support may access your contact and hosting details on a need-to-know basis.
• Legal authorities: We will disclose information if required by Indian law, court order, or a legitimate government request.

Because Vendra is self-hosted on your own cPanel server, all data generated by your store — customer names, addresses, orders, payment records, and product information — is stored exclusively on your server and is entirely under your control.

Vendra does not have ongoing access to this data after installation is complete. The temporary hosting credentials shared during setup are used only for installation and are deleted once confirmed.

As the operator of a Vendra store, you become the data controller for your own customers' information. You are responsible for:

• Publishing your own Privacy Policy on your store
• Obtaining appropriate customer consent for data collection
• Complying with India's DPDPA and any other applicable data protection laws
• Securing your hosting environment and keeping your admin credentials confidential

Our Vendra marketing website may use cookies and lightweight analytics tools to understand how visitors navigate the site. This helps us improve the page experience and conversion flow.

Types of data collected automatically when you visit our website:

• Pages visited and time spent on each page
• Referring URL (how you found us)
• Device type, browser, and approximate location (city level)
• Clicks on call-to-action elements

This data is collected in aggregate and is not linked to your identity unless you have filled in a contact form or initiated a WhatsApp conversation.

We retain your personal data for as long as is necessary for the purposes described in this policy, or as required by Indian law:

When data is no longer needed and the retention period has expired, it is securely deleted or anonymised.

We take reasonable and appropriate technical and organisational measures to protect your personal information from unauthorised access, loss, or disclosure:

• All communication over our website is protected by HTTPS / TLS encryption
• Hosting credentials shared during setup are treated as strictly confidential, stored temporarily in secured internal notes, and deleted immediately after setup completion
• Access to client information is restricted to Vendra team members directly involved in your order
• Payment processing for your Vendra purchase is handled by our payment provider — we never store card or UPI credentials

Under India's Digital Personal Data Protection Act, 2023 and applicable regulations, you have the following rights regarding your personal data held by Vendra:

• Right to access: Request a copy of the personal data we hold about you
• Right to correction: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data, subject to legal retention obligations
• Right to withdraw consent: Withdraw consent for processing where consent was the legal basis — this will not affect processing already carried out
• Right to grievance redressal: Lodge a complaint with our Grievance Officer (see Section 14) or with the Data Protection Board of India once established

To exercise any of these rights, contact us via email (details in Section 14). We will respond within 30 days of receiving your request.

Vendra is a business-to-business software product intended for adults operating or managing a business. We do not knowingly collect personal data from individuals under the age of 18.

If you believe that a minor has inadvertently submitted personal information to us, please contact us immediately and we will delete that data promptly.

We may update this Privacy Policy from time to time — for example, to reflect changes in law, our practices, or Vendra's features. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify existing customers via email at least 14 days before changes take effect

We encourage you to review this page periodically. Continued use of Vendra or our services after a policy update constitutes acceptance of the revised terms.

Older versions of this policy can be requested by emailing us — we retain previous versions for reference.

For any questions, concerns, or requests related to this Privacy Policy or your personal data, please reach out to us:

• Business Entity: Digital Edze Business Solutions LLP
• Email: hello@myvendra.in
• Website: myvendra.in
• Location: Hyderabad, Telangana, India — 500001

We aim to acknowledge all privacy-related queries within 48 hours and resolve them within 30 days. If you are not satisfied with our response, you may escalate to the Data Protection Board of India (once operational under the DPDPA 2023).