Privacy Policy

1. Introduction #

This Privacy Policy explains how Vardhan Organics (the "Company") collects, uses, discloses, and safeguards information collected via the Vardhan Organics mobile application (the "App"). Vardhan Organics is the data controller and is responsible for decisions about personal data. Sahynex TechSolution ("Sahynex") acts as a data processor providing technical implementation, hosting, and maintenance on behalf of Vardhan Organics.

By using the App, you consent to the data practices described in this Policy. For privacy requests or to contact our Data Protection Officer (DPO), email: support@vardhanorganics.com or dpo@vardhanorganics.com.

2. Information We Collect #

• Personal Information: Name, phone number, date of birth, address, bank details (e.g., IFSC, account number), ID proof, referral codes, and transaction data.
• Usage Data: Device information, location (for GPS-based features), app usage analytics, and sales data.
• Sensitive Data: Financial information for payments and earnings calculations.

Data is collected directly from you during registration, transactions, and app use.

3. How We Use Your Information #

To provide and maintain the App's services; to process transactions, calculate commissions, and manage user hierarchies; to verify user identities and approve accounts; to improve the App and provide customer support; and to comply with legal obligations.

4. Information Sharing and Disclosure #

• With Third Parties: We may share data with payment processors (e.g., UPI providers), analytics providers, crash reporting services, and Sahynex for maintenance and operations. Data is not sold to third parties.
• Legal Requirements: We may disclose information if required by law or to protect rights.
• Business Transfers: In case of a merger or sale, user data may be transferred.

5. Third-Party Services & SDKs #

We use third-party services such as UPI/payment partners, analytics providers, and crash reporting tools (for example: Firebase Crashlytics, common analytics SDKs). These providers may receive limited personal or device data as necessary to provide their services. We do not sell personal data to third parties. You may opt out of non-essential sharing via App settings or by contacting support.

6. Permissions & Purpose #

• Location: Used for delivery, route optimization, and location-based features. You can revoke location permissions in your device settings.
• Camera: Used for product images and KYC submission. You can revoke camera access in device settings.
• Contacts & Storage: Optional - used only when you choose to import contacts or save images. Revoke via device settings.
• Notifications: Used for order and system updates. Manage in App or device settings.

6.1 Media Access (Android) #

The app may request READ_MEDIA_IMAGES to allow users to browse, select, edit, and upload images only for explicit user actions such as profile photo updates, provide identity for verification, and attaching bills or documents.

Scope & frequency: Permission is requested at runtime only when the user opens an in-app gallery or attach UI. Access is user-initiated, infrequent, visible, and limited to the duration of the user action. There is no background or continuous scanning of user media.

Alternatives considered: We use the Android photo picker where appropriate, but the app requires multi-image selection, in-app cropping/formatting, thumbnail generation, bulk uploads, and fast local browsing for seller workflows that the picker does not reliably support across all supported devices.

Data handling & security: Selected images are uploaded only with user consent, transmitted via TLS, and stored securely for app functionality. Thumbnails are cached locally and cleared on logout. Images are not shared with third parties except contracted service providers under NDA.

This access is necessary for the described user-facing features and is limited to explicit user actions.

7. Data Security & Breach Notification #

We implement industry-standard security measures, including encryption in transit (TLS) and at rest, access controls, and regular security assessments. However, no method is 100% secure. In the event of a data breach that affects personal data, we will notify affected users and regulators where required by law within 72 hours when applicable.

8. Data Retention & Deletion #

We retain account information, transaction records, and KYC documents for a minimum of 7 years where required for tax and legal compliance. Other usage and analytics data are retained for up to 2 years unless you request deletion earlier.

To request export or deletion of your personal data, email support@vardhanorganics.com. We will acknowledge requests within 7 days and respond substantively within 30 days. Complex requests may take up to 60 days.

9. Your Rights & Procedures #

You may request access, rectification, restriction, deletion, or portability of your personal data, and may object to processing where applicable. Requests should be sent to dpo@vardhanorganics.com or support@vardhanorganics.com.

• We will acknowledge receipt within 7 days.
• Standard requests are processed within 30 days.
• Complex requests may take up to 60 days; we will inform you if we need additional time.

10. Children's Privacy #

The App is not intended for children under 18. We do not knowingly collect data from minors. If we learn that we have collected personal information from a child without parental consent we will delete that information and, where appropriate, notify the parent or guardian.

11. International Data Transfers #

Data may be stored or processed outside India. In such cases we implement appropriate safeguards (for example, standard contractual clauses or equivalent protections) to help ensure an adequate level of protection for personal data.

10. Changes to This Policy #

We may update this Policy. You will be notified of significant changes via the App.