Legal

Privacy
Policy

Effective date: [Effective date]

Draft — under legal review
This page is a working draft and has not yet been reviewed by a lawyer. Details shown highlighted in [brackets] are still to be filled in by the company.

Summary in simple words

This policy explains what personal data VanVed collects when you visit vanved.in or use a VanVed workspace, why we collect it, who we share it with, and the choices and rights you have.

1. Who we are

VanVed is operated by [Company legal name], a company registered in India with its registered office at [Registered address] (GSTIN [GSTIN]). In this policy, “VanVed”, “we”, “us” and “our” mean that company.

VanVed provides white-label business software: a business (“our customer”) signs up, chooses a plan, and runs parts of its operations — customers, billing, bookings, staff and more — in a workspace that carries its own name and branding.

2. Our two roles

For our own customers’ account data — the people who sign up for and administer a VanVed account — we decide why and how that data is used, and we are responsible for it under this policy.

For the data our customers put into their workspace — for example a gym’s members, a school’s students or a business’s employees — we process it only on our customer’s behalf and on their instructions. Our customer decides what is collected and is responsible for telling those people how it is used and for any consent it needs. If you are one of those people, please contact the business you deal with first; we will help them respond.

3. What we collect

  • Account details: your name, email address, phone number (if given) and password (stored only as a secure hash).
  • Business details: business name, industry, address, GSTIN (if given), branding you upload such as logos and colours, and the workspace address you choose.
  • Billing details: your plan, invoices and payment status. Card, UPI and bank details are entered with and handled by our payment processor, Razorpay; we do not store full card numbers.
  • Usage and device data: IP address, browser and device type, pages visited, and logs of actions taken in the service, used to run, secure and improve it.
  • Messages: what you send us through contact or enquiry forms, email or support requests.
  • Marketplace orders: if you buy on the VanVed Marketplace, the order, delivery address and contact details needed to fulfil it.

4. How we use it

  • To create and run your account and workspace, and provide the features you switch on.
  • To bill you, collect payment and keep the tax and accounting records the law requires.
  • To keep the service secure, prevent fraud and abuse, and fix problems.
  • To answer your questions and provide support.
  • To send service messages — for example about your trial, payments or important changes.
  • To send product news or offers, only where you have agreed or the law allows it; every such email lets you opt out.
  • To meet our legal obligations and enforce our Terms of Service.

We process personal data on the basis of your consent, or for the legitimate uses permitted by the Digital Personal Data Protection Act, 2023, such as providing a service you have asked for or complying with the law.

5. Who we share it with

We do not sell personal data. We share it only with:

  • Service providers who help us run VanVed — hosting, email delivery, payment processing (Razorpay) and similar — under contracts that limit their use of it to providing that service.
  • Integrations you turn on — for example an email sender or WhatsApp Business number you connect to your workspace — as needed to deliver what you asked for.
  • Sellers on the Marketplace, who receive the order and delivery details needed to fulfil your purchase.
  • Authorities, where the law requires it or to protect the rights, property or safety of our users or the public.
  • A successor business, if VanVed is merged, acquired or sold, under the same protections as this policy.

6. Cookies

We use cookies that are needed to keep you signed in — including across your workspace’s own address — and to keep your session secure. These are essential to the service and cannot be switched off while you use it. If we add any other kind of cookie, we will update this policy and ask for consent where the law requires it.

7. Security and how long we keep data

We protect personal data with technical and organisational safeguards appropriate to its sensitivity, including encrypted connections and hashed passwords. No system is perfectly secure; if a breach affecting your data occurs, we will notify you and the authorities as the law requires.

We keep account data while your account is open. After it is closed we delete or anonymise it within [Retention period], except where we must keep records for longer by law — for example tax and accounting records under the Central Goods and Services Tax Act, 2017.

8. Your rights

Subject to applicable law, you can ask us to:

  • tell you what personal data we hold about you and how we use it;
  • correct, complete or update it;
  • erase it, where we no longer need to keep it;
  • withdraw a consent you have given (this does not affect processing that already took place);
  • nominate another person to exercise these rights on your behalf; and
  • resolve a grievance about how we have handled your data.

To make a request, email [Contact email]. We may need to confirm your identity before acting on it.

9. Children

VanVed accounts are for businesses and are not meant for anyone under 18. Where a customer such as a school uses VanVed to manage children’s data, that customer is responsible for obtaining verifiable consent from a parent or guardian as the law requires.

10. Grievance Officer

If you have a concern or complaint about how we handle personal data, contact our Grievance Officer, [Grievance Officer name], at [Contact email] or by post at [Registered address]. We will acknowledge and respond within the time required by applicable law. If you are not satisfied, you may also complain to the Data Protection Board of India.

11. Changes to this policy

We may update this policy as the service or the law changes. The effective date at the top shows when it was last changed; if a change is significant we will tell account owners by email or in the product before it takes effect.