Statutory Transparency Notice: This privacy policy specifies the exact data collection, hosting, and retention practices implemented in the Vastrenix garment retail and wholesale platform in accordance with the Digital Personal Data Protection Act (DPDPA), 2023 and the Central Goods and Services Tax (CGST) Act, 2017.
1. Introduction & Overview
Vastrenix (“we”, “us”, or “the Platform”) provides cloud-synchronized billing, multi-location inventory tracking, customer credit management, and B2B wholesale dealer networking software specifically tailored for India’s clothing and textile trade.
This Privacy Policy outlines how personal and commercial data is collected, stored, processed, and safeguarded when store owners, cashiers, stockists, and wholesale partners utilize Vastrenix.
2. Categories of Data Collected
We collect only the information necessary to fulfill our core point-of-sale, inventory, and dealer coordination functionalities:
- Staff & Account Information: Name, mobile phone number, business email address, assigned employee role (Owner, Manager, Cashier, Stockist), and designated shop/warehouse branch location.
- Customer Khata Information: Customer name, phone number, purchase history, store credit ledger, outstanding due balance, and settlement dates.
- Business Profile: Legal trading name, GSTIN (Goods and Services Tax Identification Number), registered showroom and godown addresses, contact numbers, and store logo.
- Transaction & Invoicing Data: Sales invoices, line items (garment variant, size, color swatch, SKU, barcode, price, GST tax slabs), payment modalities (Cash, UPI, Card, Split, Store Credit), and 12-digit UPI UTR transaction reference numbers.
- Uploaded Content: Garment catalog photos and merchant UPI QR code graphics uploaded directly by the merchant.
3. Purpose & Legal Basis for Processing
Data processing is conducted strictly under lawful grounds recognized by Indian law:
- Generating GST-compliant tax invoices, credit notes, and WhatsApp receipt delivery.
- Real-time synchronization of garment stock across showroom counters and storage godowns.
- Customer Khata management, tracking receivables, and month-end dues reminders.
- Digital purchase order fulfillment between connected retailers and authorized dealers.
- Maintaining immutable audit logs for statutory accounting and fraud prevention.
4. Storage, Hosting & Google Cloud Infrastructure
All Vastrenix data is securely stored and processed using Google Cloud Platform (GCP) and Firebase infrastructure (Firebase Authentication, Cloud Firestore, and Firebase Cloud Storage).
All communication is encrypted in transit using TLS 1.3 / HTTPS and all databases are protected at rest via AES-256 bit encryption. Infrastructure complies with ISO 27001, SOC 1/2/3, and Google’s standard Data Processing Terms.
5. Payment Processing & Subscription Billing
Vastrenix plans are paid by UPI from your own banking or UPI app, directly to Vastrenix’s UPI ID.
No Card or Sensitive Credential Storage: Vastrenix does not collect, process, or store debit/credit card numbers, CVVs, net-banking credentials, or UPI PINs. We only receive the plan you chose, the amount, and the UTR / transaction reference you submit, which we use to verify the payment and activate your plan.
6. Dealer Network Data Sharing (Specific Disclosure)
Vastrenix includes a B2B Dealer Network allowing clothing stores to connect with garment manufacturers and wholesalers:
- Data sharing requires an explicit mutual connection between both registered merchants.
- Shared data is strictly limited to purchase order details: products ordered, sizes, color variants, quantities, agreed wholesale price tier, and fulfillment/dispatch status.
- Connected dealers cannot access your retail sales, customer khata records, store margins, revenue figures, or inventory at unconnected branches.
7. Statutory Data Retention & Indian GST Compliance
Under Section 36 of the Central Goods and Services Tax (CGST) Act, 2017, every registered taxable person is legally mandated to retain books of accounts, tax invoices, bills of supply, and stock registers for a minimum period of 72 months (6 years) from the due date of furnishing the annual return for the relevant year.
In accordance with Indian tax statutory requirements, finalized sales invoices, credit notes, and financial logs are preserved for this mandatory 6-year period. Non-financial operational entries and staff accounts are maintained while the store account is active.
8. User Rights under DPDPA 2023
Under India's Digital Personal Data Protection Act, 2023, you have the right to access a summary of your personal data, request corrections of inaccurate information, request erasure of personal data (subject to mandatory GST retention requirements), and seek grievance redressal.
To exercise your rights, email contact@vastrenix.com with the subject line "DPDPA Data Request". Requests are acknowledged within 48 business hours and resolved within 30 days.
9. Children’s Privacy
Vastrenix is exclusively a commercial B2B management application for business owners and retail employees. The service is not intended for individuals under 18 years of age. We do not knowingly collect information from minors.
10. Contact & Grievance Officer
For questions or grievance redressal regarding this Privacy Policy: