Vendor Privacy Policy

Data collection, security practices, store visibility guidelines, and operational frameworks for Grapino Technology Vendors.

Vendor Privacy Policy

Data Privacy & Security Framework for Marketplace Sellers

Effective Date: August 17, 2026 | Last Updated: October 2026

1. Introduction & Statutory Compliance

Grapino Technology ("we", "our", "us", or "Platform") respects the privacy and confidentiality of registered Vendors and Sellers. This Vendor Privacy Policy details how we collect, store, handle, and display business and personal data in strict compliance with the Information Technology Act, 2000, the Information Technology (SPDI) Rules, 2011, the Digital Personal Data Protection (DPDP) Act, and Google Play Developer Data Safety Guidelines.

2. Zero Data-Selling Guarantee
Explicit Privacy Commitment: Grapino Technology does NOT sell, trade, rent, or lease vendor personal profiles, phone numbers, banking archives, tax credentials, or order logs to third-party data brokers, marketers, or unauthorized entities under any circumstances.
3. Data Collection, Identity Verification & Customer Visibility

We collect personal and business information solely for merchant verification, statutory compliance, order routing, and platform operation:

  • Identity & Contact Credentials: Your legal identity documents, mobile number, and email address are collected strictly for internal account verification, OTP security, payment processing, and platform communication. These contact details are kept fully confidential and are NEVER shared publicly or sold.
  • Public Store & Business Details: To build buyer trust and fulfill statutory requirements under the Consumer Protection (E-Commerce) Rules, 2020, only your Business Name / Store Name, Store Address, and Customer Grievance Contact Info will be displayed to buyers on the marketplace app and tax invoices.
  • Financial & Tax Data: Verified Bank Account Details, PAN, GSTIN, and Udyam Registrations are stored securely in encrypted servers to automate weekly payouts, TCS (Section 52 CGST Act), and TDS (Section 194-O Income Tax Act) withholdings.
  • Device & Location Data: Precise/Coarse device location and device identifiers are used exclusively for store geolocation matching, hyperlocal order routing within a 10 km radius, and fraud prevention.
4. Brand Promotion, Marketing & Facilitation Charges

To enhance store visibility and boost sales, Vendors may opt into platform marketing features:

  • Promotional Visibility: Grapino Technology may offer premium placements, home page banners, featured search listings, and brand highlights for Vendor shops or products.
  • Service Charges: The Platform reserves the right to charge dedicated promotion fees, marketing charges, or listing facilitation fees for providing featured publicity services. All fees will be transparently communicated and agreed upon prior to service activation.
5. Order Returns, Shipping Deductions & Account Blacklisting Policy

Maintaining product authenticity, accurate dispatch, and customer satisfaction is a critical requirement for operating on Grapino Technology:

  • Reverse Shipping & Claim Deductions: If a customer returns a order due to vendor error—such as delivering defective, incorrect ("galat saman"), expired, broken, or mismatched products—the full reverse shipping charges, delivery handling fees, and item refund amounts will be deducted directly from the vendor's active ledger/payout balance.
  • Excessive Return Threshold: If a vendor account records consistently high return ratios (exceeding 5% of total orders) or engages in repeated quality violations, the platform system automatically flags the vendor profile.
  • License Termination & Blacklisting: In cases of chronic non-compliance, fake/counterfeit product listings, or fraudulent fulfillment, Grapino Technology reserves the right to permanently blacklist the vendor license, forfeit active deposits/balances, and deactivate store access without prior notice.
6. Data Security Practices & Infrastructure

Grapino Technology employs enterprise-grade technical and physical security mechanisms:

  • Encryption Protocols: All transaction records, API communications, and user passwords are secured using SSL/TLS encryption and hashed database parameters.
  • Restricted Access: Access to sensitive financial and identity records is restricted to authorized compliance personnel on a strict need-to-know basis.
7. Account Deletion & Data Retention Rights

In accordance with Google Play Developer Policies and applicable Privacy Regulations, Vendors have full control over their registered profile and data retention options:

  • Account & Data Deletion Request: Vendors can request permanent deletion of their account, personal credentials, and profile data by emailing our dedicated Privacy Team directly at grapinotech@gmail.com from their registered email address or phone number.
  • Processing Timeline & Purging: Upon receiving an authentic deletion request, personal profile identifiers and store access credentials will be verified and permanently purged from our primary database within 30 days.
  • Statutory Retention Exception: In compliance with Indian Information Technology, GST, and E-Commerce regulatory frameworks, historical transactional order ledgers, financial settlement statements, and GST TCS/TDS records will be retained for the mandatory statutory period.
8. Nodal Grievance Redressal Officer

In compliance with Rule 5(9) of the Information Technology (SPDI) Rules, 2011 and E-Commerce Guidelines, vendors can direct privacy inquiries or disputes to:

Grievance & Legal Officer: Data Protection & Compliance Cell

Company Entity: Grapino Technology

Official Support Email: grapinotech@gmail.com

Response Guarantee: Written acknowledgment within 48 hours; full resolution within 30 days as mandated by Indian Cyber Law.