Legal

Privacy Policy

Effective June 1, 2026. This policy explains what personal data Vedicjaalam collects when you visit vedicjaalam.com or use our apps, why we collect it, who we share it with, and the rights you have under India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”).

1. Who we are

“Vedicjaalam” (“we,” “us,” or “our”) is a multi-sector technology platform that builds focused apps across retail, community, education, and adjacent sectors. We operate the marketing site at vedicjaalam.com and the following products:

  • DealPro Consumer — a mobile app that lets shoppers discover nearby deals, save favourites, share offers with friends, and earn rewards.
  • DealPro Merchant — a mobile app that lets merchants set up stores, publish deals, manage redemptions, and access analytics under a paid subscription.
  • Sanathana — a community and culture app (coming soon).

For the purposes of the DPDP Act, Vedicjaalam is the Data Fiduciary in respect of personal data processed through these products. We act as a Data Processor where we host content on behalf of Merchants.

2. Personal data we collect

We collect the following categories of personal data:

2.1 You give it to us directly

  • Account data: name, mobile number, email address, password (stored hashed), and profile photo.
  • Merchant onboarding data: business name, store address, GSTIN, PAN, bank details (for settlements via Razorpay), and uploaded documents.
  • Content you create: deals, store listings, posts, photos, reviews, comments.
  • Support communications: emails or in-app messages you send us.

2.2 Collected automatically when you use our apps

  • Device and usage data: device model, OS version, app version, language, IP address, crash logs, and interaction events used to measure feature performance.
  • Location data: approximate or precise GPS location, only when you grant the location permission, to surface nearby deals, stores, and offers.
  • Authentication tokens and session identifiers that keep you signed in.

2.3 With your explicit permission (Android & iOS prompts)

  • Camera and photos — to attach images to deals, profile pictures, and incident reports.
  • Contacts — only when you tap “add friend” or similar features that match phone numbers against existing users. The full contact list is never uploaded; we hash and look up only the numbers you select.
  • Push notifications — for deal alerts, redemption receipts, and account updates.

2.4 From third parties

  • Payment processors share confirmation of transactions and subscription status (we never see your full card or UPI VPA).
  • Authentication providers (e.g., Google, Firebase) share the minimum profile fields you authorise.

3. Why we use your data

  • Provide, operate, and personalise our apps and the vedicjaalam.com website.
  • Authenticate you, secure your account, and detect fraud or abuse.
  • Process Merchant subscription payments and Consumer transactions through Razorpay.
  • Send transactional messages (OTPs, receipts, subscription renewals) and, where you opt in, marketing communications.
  • Surface relevant deals nearby using your location and preferences.
  • Measure feature usage so we can improve performance, stability, and design.
  • Comply with applicable laws, respond to lawful requests, and enforce our Terms.

4. Legal basis under the DPDP Act

We process personal data on the basis of the consent you provide when you create an account, accept an in-app permission prompt, or tick a consent checkbox. Some processing — for example billing, fraud prevention, complying with regulators, and providing services you have specifically asked for — is carried out under the “legitimate uses” ground recognised by the Act.

You can withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal and may limit features that depend on the relevant data.

5. Who we share data with

We do not sell personal data. We share it only with the processors that help us operate our products, and only for the purposes described in this policy.

  • Razorpay Software Private Limited — payment gateway and subscription billing.
  • Supabase Inc. — managed database, authentication, file storage, and serverless functions (Edge Functions).
  • Vercel Inc. — hosting and edge delivery of the vedicjaalam.com website.
  • Google LLC — Firebase Authentication, Firebase Cloud Messaging (push notifications), Google Maps (map tiles, geocoding), and Gemini APIs (used to generate Merchant analytics summaries).
  • Sentry — error and performance monitoring. We avoid sending personal identifiers in error payloads where reasonably possible.
  • Law enforcement and regulators — if lawfully required, we may disclose data in response to a valid request under Indian law.

Each of these processors is bound by its own privacy and data protection commitments. Some may store or process data outside India; where they do, we rely on the contractual protections they provide.

6. How long we keep your data

  • Account data is kept while your account is active and for up to 18 months after deletion, to allow account recovery and meet financial-record obligations.
  • Transactional and tax records are kept for the period required by applicable Indian tax and accounting law (typically up to 8 years).
  • Device, usage, and error logs are kept for up to 12 months and then aggregated or deleted.
  • Marketing preferences are kept until you change them.

7. Your rights

Subject to verification of your identity and the conditions in the DPDP Act, you have the right to:

  • access a summary of the personal data we hold about you;
  • request correction, completion, or update of inaccurate data;
  • request erasure of your data when it is no longer needed;
  • nominate another individual to exercise your rights in case of incapacity or death;
  • withdraw consent at any time; and
  • file a complaint with the Data Protection Board of India.

You can exercise these rights in-app under Profile → Privacy, or by emailing us at privacy@vedicjaalam.com. We aim to respond within 30 days.

8. Children

Our products are not directed at individuals under the age of 18. We do not knowingly process the personal data of children. If you believe a child has provided data to us, please contact the Grievance Officer below and we will remove the data promptly.

9. Security

We use technical and organisational safeguards proportionate to the sensitivity of the data we handle — encryption in transit, hashed passwords, scoped database access via row-level security, secret rotation, and least-privilege service roles. No system is perfectly secure; if you suspect a compromise of your account, please reset your password and contact us immediately.

10. Cookies and similar technologies

vedicjaalam.com uses a small number of essential cookies to keep you signed in and remember preferences. Our mobile apps use device storage for the same purpose. We do not use third-party advertising cookies.

11. Changes to this policy

We may update this policy from time to time to reflect new features, legal requirements, or how we operate. When changes are material we will tell you in-app or by email. The “Effective” date at the top of the page always reflects the current version.

12. Grievance Officer and contact

For any privacy-related question or to exercise the rights described above, you can write to our Grievance Officer:

Grievance Officer, Vedicjaalam

Email: privacy@vedicjaalam.com

Response window: within 30 days of receipt