How VyaparStack processes, protects, and stores client and freelancer business data.
This Privacy Policy explains how VyaparStack (operated by [BUSINESS_LEGAL_ENTITY_NAME_PLACEHOLDER]) collects, uses, and safeguards personal and digital business data in compliance with the Digital Personal Data Protection Act (DPDPA), 2023 and the Information Technology Act, 2000.
We process data strictly for generating tax invoices, maintaining client directories, calculating statutory CGST/SGST/IGST tax splits, and rendering dynamic NPCI UPI QR codes. Collected fields include business legal names, 15-character GSTINs, 10-character PANs, billing addresses, invoice line items, bank account numbers, and IFSC codes.
All HTTP transactions are secured using Transport Layer Security (TLS 1.3) with HTTP Strict Transport Security (HSTS). Financial records stored in Neon Serverless PostgreSQL instances are encrypted at rest using AES-256 volume encryption.
Under the DPDPA 2023, you retain the right to review, rectify, or request deletion of your client records at any time from your account dashboard. For statutory grievances or data access requests, contact the designated Grievance Officer:
Officer: [GRIEVANCE_OFFICER_NAME_PLACEHOLDER]
Email: [GRIEVANCE_EMAIL_PLACEHOLDER]
Address: [REGISTERED_OFFICE_ADDRESS_BENGALURU_PLACEHOLDER]