Privacy Policy

1. Introduction & Overview

Welcome to ARSAVO ("Platform", "we", "us", or "our"). ARSAVO is a cloud-based, all-in-one unified commerce headquarters engineered in India that empowers entrepreneurs, retail shops, and D2C brands ("Merchants") to build, customize, and manage online storefronts, sell through WhatsApp and Instagram, and manage retail brick-and-mortar stores through omnichannel Point-of-Sale (POS) systems.

This Privacy Policy explains how we collect, process, store, and safeguard information when you visit our website at arsavo.in, sign up for our Founding Merchant Whitelist, use our software suite, or interact with our automated WhatsApp commerce tools.

2. Information We Collect

We collect information in three categories to deliver our high-speed unified commerce infrastructure:

A. Information Provided Directly by Merchants

• Account & Whitelist Data: Full Name, Brand / Business Name, Instagram Handle, Official Email Address (e.g. hello@yourbrand.in), and WhatsApp Mobile Number.
• Store & Business Credentials: Business Category, Monthly Order Volume, City / Commercial Hub (Surat, Mumbai, Jaipur, Delhi NCR, Bengaluru, etc.), and optional GSTIN for automatic e-invoicing.
• Catalog & Inventory Data: Product titles, descriptions, SKU numbers, barcode data, pricing, and high-resolution product imagery.

B. End-Customer Data Processed on Behalf of Merchants

When shoppers place orders through your Arsavo web storefront or WhatsApp bot, we act as a Data Processor:

• Delivery Details: Customer name, shipping address, pin code, and mobile phone number for logistics fulfillment.
• Order & Verification Logs: WhatsApp OTP confirmation timestamps, COD order verification status, and chosen payment method (2-Tap UPI deep-link vs. Cash on Delivery).
• We do NOT store sensitive card numbers or UPI MPINs. All payments are routed directly via encrypted UPI deep-links (PhonePe, Google Pay, Paytm) or verified merchant payment gateways.

C. Omnichannel Retail POS & Technical Telemetry

• POS Counter Transactions: Store counter ID, cashier receipt line items, barcode scan logs, and real-time 0.2s cloud inventory synchronization telemetry.
• Technical Logs: IP address, device type, browser metadata, and latency metrics to maintain our 99.98% cloud uptime SLA.

3. How We Use Your Information

We utilize the collected information strictly for operational, legal, and security purposes:

• To provision your dedicated cloud storefront (e.g. yourbrand.arsavo.store) or custom domain setup.
• To execute the WhatsApp COD Verification Shield, sending automated OTP confirmations to eliminate fraudulent or impulse COD orders before dispatch.
• To trigger automated B2B/B2C GST tax invoices, HSN code classification, and 1-click AWB airway bills with domestic logistics aggregators (Shiprocket, Delhivery, Bluedart).
• To provide 1-on-1 founder support, catalog migration from Shopify/Instagram, and whitelist onboarding.
• Zero Data Monetization: We NEVER sell, rent, or lease your store data, customer lists, or financial metrics to advertising networks, brokers, or data aggregators.

4. Third-Party Integrations & Service Providers

To deliver an all-in-one operating system, Arsavo interfaces with trusted infrastructure partners under strict confidentiality agreements:

• Meta / WhatsApp Business Cloud API: For conversational checkout, automated OTP delivery, and digital receipt dispatch.
• Logistics APIs: Shiprocket, Delhivery, and Bluedart for shipping rate calculations, courier pickup scheduling, and live tracking.
• Cloud Hosting & CDN: Enterprise-grade Tier-4 cloud infrastructure located in Indian data centers adhering to local data residency standards.

5. Data Security & Storage Standards

We employ defense-in-depth security architectures:

• All data transmitted between browsers, POS terminals, and Arsavo servers is encrypted using TLS 1.3.
• Stored merchant databases and customer records are protected with AES-256 hardware-level encryption.
• Automated vulnerability scanning, rate limiting, and DDoS mitigation protect against brute-force intrusion.

6. Indian DPDP Act 2023 & Merchant Rights

Under the Digital Personal Data Protection Act (DPDP Act 2023) of India, merchants and data principals enjoy the following rights:

• Right to Access: You can request a full summary of all personal and store data processed by Arsavo.
• Right to Correction & Updating: Easily update inaccurate business info, product catalogs, or banking details through your dashboard.
• Right to Erasure & Portability: You may export your catalog and customer lists in standard CSV format at any time and request permanent deletion of your store database upon termination.
• Right to Grievance Redressal: Direct escalation to our designated Grievance Officer.

7. Grievance Officer & Founder Contact

For inquiries regarding this Privacy Policy, data access requests, or regulatory queries, please contact our designated Grievance Officer directly: