Privacy Policy

This Privacy Policy describes how Digitex Studio ("VyaparSethu", "we", "us") collects, uses, stores, and discloses personal data when you use our B2B trade platform at vyaparsethu.com. It is issued under the Digital Personal Data Protection Act 2023 (DPDP Act) and applies to all registered users, visitors, and business contacts of the platform.

1. Data Fiduciary

The Data Fiduciary (the entity that determines the purpose and means of processing your personal data) is:

• Entity: Digitex Studio (Proprietorship)
• Proprietor / Grievance Officer: Vishal Ashok Pendharkar
• GSTIN: 27AAAPP9753F2ZF
• Address: Flat No. 1204, 12th Floor, Casa Sereno B1, Mankoli Road, Off Mumbai–Nashik Highway, Anjur, Bhiwandi, Thane, Maharashtra 421302
• Grievance Email: digitex.studio@gmail.com

2. Personal Data We Collect

2a. Data you provide directly

• Identity: Full name, company / firm name.
• Contact: Mobile number (required for OTP login), email address.
• Business verification: GST Identification Number (GSTIN), Udyam Registration Number.
• Location: City / state for matching buyers and suppliers.
• Profile: Product categories, business description.
• Transaction data: Quotation requests, quotes submitted, deal and payment records.

2b. Pre-built supplier profiles from public business information

To help genuine buyers find suppliers quickly, some supplier profiles on VyaparSethu are pre-built from publicly available business information (such as directories, trade registrations, and government databases) before a supplier has registered on the platform. These profiles contain only business contact and category data sourced from public records.

If your business appears as a pre-built profile, you have the right to:

• Claim the profile — verify ownership and take control of the listing.
• Correct any inaccurate information — update or amend data after claiming.
• Request deletion — submit an erasure request via our Data Deletion page or email digitex.studio@gmail.com.

We do not sell pre-built profile data. Access to contact details in pre-built profiles is restricted to verified buyers who have an active quotation requirement.

2c. User-generated content — Text, Voice, and Video Requirements

The platform lets buyers post Quotation Requirements in three formats:

• Text Requirement: Written description you submit directly. Stored as structured text in the requirements database and published to matched suppliers.
• Speak Requirement (Voice): An audio recording you make in-browser. The audio is transmitted to Groq's Whisper v3 transcription service for conversion to text. The raw audio file is not stored by us. Only the resulting structured text data (product, quantity, location, budget) is stored and published. Voice recordings may contain your voice, which is biometric-adjacent personal data. Groq's processing is governed by their privacy policy.
• Video Requirement: A short video recording you make in-browser. The video's audio track is transcribed by Groq Whisper v3 and structured data is extracted. The raw video file is not stored by us. If your video contains your face, this constitutes sensitive personal data. Only the extracted text data is stored. Please do not record sensitive personal information (Aadhaar, PAN, financial data) in voice or video requirements.

All Requirement posts are published to matched suppliers on the platform once submitted. Public Requirements are visible to all suppliers in the relevant category. You can request removal of a Requirement by raising a deletion request or contacting us.

2d. Automatically collected data

• IP address (stored as an irreversible hash for compliance logging; not linked to your identity).
• Browser type, device type, and session duration for platform improvement.
• Interaction logs: pages viewed, Requirements posted, quotes received.

3. How We Use Your Personal Data

• Sending OTP for phone-based authentication.
• Matching your Quotation Requirements with relevant verified suppliers.
• Displaying your business profile to buyers searching in your product category.
• Processing payments via Razorpay (Protected Payment / Escrow).
• Calculating Trust Confidence Score™ from transaction and platform behaviour history.
• Sending platform notifications (WhatsApp and email) about requirements matching your category.
• Compliance, fraud prevention, and audit trail obligations.

4. WhatsApp Communications and Opt-In / Opt-Out

We may send WhatsApp messages to suppliers whose contact details appear in pre-built profiles or to registered users, to notify them of matching Quotation Requirements. These messages are sent on the basis of legitimate business interest (connecting businesses with relevant trade opportunities) and, where required, explicit opt-in consent.

To opt out: Reply STOP to any WhatsApp message, or send an email to digitex.studio@gmail.com with the subject "WhatsApp Opt-Out" and your mobile number. We will process opt-outs within 48 hours.

5. Third-Party Processors

We do not sell, rent, or trade personal data to any third party for their marketing or commercial purposes. Data is shared with processors solely to deliver the platform's services.

6. Data Retention

See our full Data Retention Policy. In summary:

• Active accounts: retained while the account is active.
• Transaction and deal records: 7 years (as required for GST and tax compliance).
• Requirement posts (RFQs): 2 years from posting, unless deleted earlier by the user.
• OTP verification records: 30 days.
• Compliance logs (consent events, erasure requests, data access logs): minimum 1 year.
• Pre-built supplier profiles not claimed within 3 years: reviewed for deletion.

7. Your Rights under DPDP Act 2023

• Right to Access: Request a summary of personal data we hold about you.
• Right to Correction: Correct inaccurate or incomplete data via your profile.
• Right to Erasure: Request deletion of your personal data via our Data Deletion page.
• Right to Grievance Redressal: Raise a complaint with the Grievance Officer at digitex.studio@gmail.com. We will respond within 7 business days.
• Right to Nominate: Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.
• Right to Withdraw Consent: You may withdraw consent for optional processing at any time; this does not affect prior processing.

To exercise any right, email digitex.studio@gmail.com with your registered mobile number or email, and the specific action requested.

8. Security

We implement industry-standard security measures including HTTPS/TLS, hashed credentials, JWT-based session tokens, and row-level access controls on the database. No system is perfectly secure; if you suspect a data breach, notify us immediately at digitex.studio@gmail.com.

9. Changes to this Policy

Material changes will be communicated via in-app notification and reflected in the "Last Updated" date above. Continued use of the platform after the effective date constitutes acknowledgement of the updated policy.