1. Who we are
This policy explains how Udyam Scan ("UdyamScan", "we") handles personal data when you use udyamscan.com, the stores on it and the UdyamScan seller app. For the purposes of India's Digital Personal Data Protection Act, 2023, UdyamScan is the data fiduciary for the data described here.
When a buyer orders from a seller, the seller also receives the buyer's order details and is responsible for how they use them.
2. What we collect
From sellers:
- phone number and/or email address (to sign in), name, and the business details you choose to add (business name and type, GSTIN, addresses);
- your store: name, link, logo, cover, About text, products, photos, prices, sections, delivery, pickup and return details, and the payment details you show buyers (for example UPI ID or bank details);
- orders you receive and what you do with them;
- devices you sign in on (device name, app version, rough sign-in time and network address), and, if you allow notifications, a notification token for each phone;
- your location, only when you tap "Use my location" to fill an address. The phone works out the address, or sends a rounded point (about 11 metres) to our address lookup. We do not track your location.
From buyers:
- what you enter at checkout: name, WhatsApp number, optional email, delivery address and note, and the order itself;
- if you sign in: your WhatsApp number, name, language and saved addresses;
- reports you send about a store;
- your location, only when you tap "Use my location" (rounded as above).
From everyone: basic technical data such as network address, browser or device type, language and error logs, kept to run, secure and fix the service. We do not use advertising trackers.
3. Why we use it
- to run stores and pass each order to the right seller;
- to send sign-in codes, order messages and notifications you asked for, by WhatsApp, email or push notification;
- to show store text in the buyer's language (machine translation on our own systems);
- to keep the service safe: limits, bot checks, fraud and abuse prevention, reports and enforcement of our terms;
- to support you, fix problems and improve the service using totals and trends;
- to meet legal duties and answer lawful requests.
We use your data on the basis of your consent (which you give when you sign up, place an order or turn on a feature, and can withdraw) and for legitimate uses allowed by law, such as completing an order you asked for or complying with the law.
5. How long we keep it
- Buyer name, number, email, address and note on an order are erased 12 months after the order ends. The seller keeps the products, totals and dates for their records.
- Buyer accounts and saved addresses are deleted as soon as the buyer deletes the account. Orders already placed stay with the seller until they are erased as above.
- When a seller deletes their account, the store goes offline and their sign-in details are removed at once; the store, products, photos, payment and delivery options and orders are permanently deleted within 30 days. Reports and audit records keep only the store's ID.
- Sign-in codes expire after 10 minutes and are stored only in scrambled form. Sessions end after 30 days (sellers) or 90 days (buyers) without use, or when you sign out.
- Notification send logs are kept for 90 days.
- Backup copies are replaced on a rolling basis, and some records may be kept longer when the law requires it.
6. Your rights
You can ask us to:
- tell you what personal data we hold about you and who we shared it with;
- correct or update it (sellers can change most details in the app);
- erase it, or withdraw consent (delete-account) explains how);
- answer a grievance about how we handle your data;
- let someone you nominate act for you if you die or cannot act.
Write to support@udyamscan.com from the number or email on your account, or from the WhatsApp number on your order. We may ask you to confirm it is you. If you are not satisfied with our answer, you may complain to the Data Protection Board of India.
7. Children
Sellers must be 18 or older. The service is not meant for children; a person under 18 should use it only with a parent or guardian. If you think a child has given us data without that consent, contact us and we will delete it.
8. Security
We use encrypted connections, scrambled sign-in codes, limits on attempts, access controls and logs of staff actions. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.
9. Where data is processed
Our systems run on servers we rent. Some providers (such as Meta, Google, Apple and Cloudflare) may process data outside India, subject to Indian law and their own safeguards.
11. Changes and contact
We may update this policy; the date at the top shows the latest version, and we will tell sellers about important changes in the app or by email.
Grievance officer: Tantrija, support@udyamscan.com. See (grievance) for how complaints are handled.