1. Business Information We Collect
To provision your merchant account, configure your POS, and maintain compliance:
- Merchant Identity: Shop owner name, phone number, email address, and authentication credentials.
- Business & Location Details: Shop trade name, address, category, GPS coordinates, store banner, and logo.
- KYC Documents: PAN card number, masked Aadhaar reference, GSTIN certificate, FSSAI registration number, or Drug license details.
- Banking & UPI Identifiers: Merchant UPI ID (VPA) or settlement details for direct customer-to-merchant payments.
- Catalog & Transaction Records: Item listings, barcodes, cost and selling prices, invoice history, and Khata ledger logs.
2. How Merchant Data is Handled & Protected
We treat merchant sales data, customer ledgers, and profit margins as strictly confidential:
- Your sales reports, turnover, and Khata books are never disclosed to competing stores.
- Access to your store data from the mobile app or web portal requires JWT token authentication with role-based access control.
- Sensitive KYC files and verification photos are securely uploaded and stored in private cloud repositories with encrypted transfer.
3. Staff Accounts & Access Management
If you add staff members or delivery riders to your shop profile:
- Staff members only receive permissions relevant to their designated role (e.g. billing counter staff cannot modify bank credentials).
- Delivery riders can only view customer addresses and order items for active dispatches assigned to them.
4. Data Portability & Account Deletion
You retain complete ownership of your business data. You can export sales reports and customer Khata ledgers at any time. Upon requesting account deletion (via Profile ➔ Delete Account), your active catalog, photos, and KYC documents are permanently deleted from production servers within 30 days.
5. Data Security Contact
For data privacy inquiries or security reports, reach our compliance team at privacy@VayGo.app.