1. Information we collect
When you register for and use AtoZ Vyapar ("we", "our", "the platform"), we collect information you provide directly and information generated as you use the service:
- Account information: your name, email address, mobile number, and password (stored as a one-way bcrypt hash — we never store or can view your plain-text password).
- Business/company information: company name, GSTIN, address, state, logo, signature, bank details and other profile fields you choose to add under Settings, used only to populate the invoices and reports you generate.
- Customer & vendor data you enter: names, contact details, GSTIN/state and billing history of your own customers and vendors, entered by you for the purpose of creating invoices, quotations, purchase bills and reports.
- Transaction data: invoices, quotations, purchases, payments, credit/debit notes and inventory records you create within the platform.
- Technical data: IP address, browser/device type, and approximate login location, logged for account-security purposes (e.g. login alerts, activity history).
- Subscription & billing data: the plan you purchase, payment order IDs and payment status (see Payments below — we do not store your card, UPI PIN, or bank credentials).
2. How we use your information
We use the information above strictly to operate and improve the service you signed up for:
- To create your account, authenticate logins, and enforce plan-based access limits.
- To generate the invoices, reports and documents you create inside your own account.
- To send transactional communications — OTPs, login alerts, payment confirmations, subscription reminders and report-ready notifications — to your registered email/mobile.
- To provide customer support when you contact us.
- To detect, investigate and prevent fraud, abuse, or unauthorized access to your account.
- To maintain backups so your business data is never lost due to a technical failure.
We do not use your business or customer data for advertising, and we do not sell your data to third parties.
3. Data storage & security
Your data is stored in an access-controlled database on our hosting infrastructure. We apply standard security practices including parameterized database queries (to prevent SQL injection), CSRF tokens on every state-changing form, bcrypt password hashing, encrypted session handling, and file-upload validation. Access to production data is restricted to authorized personnel only, on a need-to-know basis.
While we take reasonable technical and organizational measures to protect your information, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.
4. Sharing of information
We do not share your business or customer data with third parties, except:
- With service providers who help us operate the platform (e.g. our SMS/email delivery providers, strictly to deliver OTPs and notifications on our behalf).
- When required to comply with a valid legal request, court order, or applicable law.
- To protect the rights, property, or safety of AtoZ Vyapar, our users, or the public, where disclosure is reasonably necessary.
5. Payments & third-party gateway
Subscription payments made on the Buy Plan page are processed by our payment gateway partner. We only receive and store the resulting order status (success/failed/pending) and a gateway reference/UTR number for reconciliation — we never see or store your card number, UPI PIN, net-banking credentials, or OTP. Those details are entered directly on the payment gateway's own secure page, governed by its own privacy and security practices.
6. Cookies & sessions
We use a single essential session cookie to keep you logged in securely; it contains no tracking or advertising identifiers and is cleared on logout or after your configured session-timeout period of inactivity. We do not use third-party advertising or analytics cookies.
7. Data retention
We retain your account and business data for as long as your account remains active, so your invoicing history stays available to you. If you request account deletion, we will remove your personal account data within a reasonable timeframe, except where we are required to retain certain records (e.g. financial/transaction logs) to meet legal or accounting obligations.
8. Your rights & choices
You can access, update or correct your account and company profile information at any time from within Settings. You may export your invoice data (CSV/PDF) at any time. To request deletion of your account or raise any privacy concern, please contact us — we will respond and act on genuine requests within a reasonable timeframe.
9. Children's privacy
AtoZ Vyapar is a business tool intended for use by adults operating a registered business. It is not directed at, and we do not knowingly collect information from, children under 18.
10. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal/operational reasons. The "Last updated" date at the top of this page will always reflect the latest revision. Continued use of the platform after a change constitutes acceptance of the revised policy.
11. Contact us
For any questions about this Privacy Policy or how your data is handled, write to us at support@atozvyapar.com.