Privacy Policy

App: Vyapar · Developer: Vyapar · Last updated: 28-09-2026

This policy explains what information Vyapar ("the app") collects, why, and how you can control it. The app is used by shop owners and service businesses ("business owners") to make bills, keep customer and supplier accounts (khata), track stock and expenses.

1. Information we collect

• Account details: first, middle and last name, WhatsApp mobile number, business name and type, GSTIN (optional), address, email (optional), UPI ID and bank details for invoices (optional), logo (optional) and language preference.
• Data added by business owners: customer and supplier names, WhatsApp numbers, GSTIN and addresses; items and services with prices, GST rates and stock; sale and purchase bills; payments received and paid; expenses.
• Device data: a push notification token (Firebase Cloud Messaging) so the app can send notifications.
• Purchase data: for Premium, Google Play shares a purchase token, plan and expiry date with us. We never see your card, UPI or bank login details.
• Security logs: IP address and time of OTP requests, to stop misuse.

2. How we use it

• To run the app: login with WhatsApp OTP, create bills and PDF invoices, keep party accounts, stock and reports (including GST summaries).
• To send messages the business owner turns on: WhatsApp OTP and payment reminders (sent through our WhatsApp provider Fast2SMS), and push notifications.
• To check and restore Premium subscriptions with Google Play.

We do not sell personal data and we do not show ads.

3. Sharing

We share data only with service providers needed to run the app: our web hosting provider (data storage), Fast2SMS (WhatsApp messages), Google Firebase (push notifications) and Google Play (subscriptions). Each business owner's data is visible only to that business owner. A customer who receives a bill or payment link can see only their own bills and balance with that business.

4. Customer and supplier data

Customer and supplier records are entered and managed by the business owner, who is responsible for having their consent to store numbers and send messages. Customers do not create accounts.

5. Security and storage

Data is sent over HTTPS and stored on our server in India. OTPs are stored in hashed form, logos and private files are not publicly accessible, bill and payment links use long random codes, and access is limited by login.

6. Keeping and deleting data

We keep data while the account is active. A business owner can delete their account and all data at any time from More > Business profile > Delete account in the app, or at https://vyapar.growthpeace.com/delete-account.php. Deletion removes parties, items, bills, payments, expenses and the logo permanently. Purchase records needed for tax and accounting may be kept without personal details. Please download your reports (Excel/CSV) before deleting if you need them for your accounts.

7. Your choices

• Turn off notifications in your phone settings or in the app.
• Switch off automatic WhatsApp reminders in the app.
• You can ask us for a copy of your data or to correct it.

8. Contact

Vyapar, India

We may update this policy. The date above shows the latest version.