Data Retention Policy

This policy describes how long VyaparSethu retains different categories of personal and business data, and the legal basis for each retention period. It is supplementary to our Privacy Policy.

Retention Schedule

Deletion on Request

You may request early deletion of your personal data via our Data Deletion page. Deletion requests are processed within 30 days. Note that:

• Transaction and financial records required for statutory compliance (7 years) cannot be deleted earlier.
• Compliance logs (consent events, erasure request records) are retained for audit obligations.
• Anonymised aggregated statistics (e.g., category demand trends) that cannot be re-linked to you are not subject to erasure.

Voice and Video — Privacy by Design

Raw audio and video files recorded for Speak Requirements and Video Requirements are processed exclusively in memory by the transcription service and are never written to our storage. This design choice ensures we hold no biometric or facial data. Only the resulting text (product, quantity, location, budget) is stored.

Pre-Built Profiles

Supplier profiles pre-built from public business data are retained to facilitate genuine trade matching. Unclaimed profiles that have received no buyer interest and no claim attempt are reviewed for deletion at the 3-year mark. Any business can request earlier deletion by contacting digitex.studio@gmail.com.

Compliance Log Retention

Consent events, erasure request records, outreach consent logs, and data access logs are retained for a minimum of one year with no automated purge. This is a deliberate design decision to ensure we can demonstrate compliance with the DPDP Act 2023 if required by a regulator or in response to a grievance.