Privacy Policy

1. Introduction

Vastoram ("we", "our", "the Company") is committed to protecting the privacy and security of the business data you share with us. This Privacy Policy explains how we collect, use, store, and protect information when you use the Vastoram rental management software platform. By using Vastoram, you agree to the practices described in this Policy.

This Policy applies to all subscribers and users of the Vastoram platform operating within India, and is compliant with the Information Technology Act, 2000, the IT (Amendment) Act, 2008, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

2. Information We Collect

We collect the following categories of information:

A. Business Account Information

• Business name, owner name, and contact person details
• Email address and phone number used for account registration
• Business address and GST/registration number (if provided)
• Subscription plan and billing information

B. Platform Usage Data

• Product inventory data you add to the platform (product codes, names, descriptions, images, pricing)
• Booking and order records created within the platform
• Payment slip and PDF documents generated through the platform
• Product status logs (in stock, in washing, delivered, returned)

C. Technical Data

• IP address, browser type, and device information
• Log data including login times, features accessed, and error reports
• Cookies and session data for platform functionality

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain the Vastoram platform
• To process your subscription and manage your account
• To generate invoices, receipts, and billing records
• To send important service notifications, updates, and alerts
• To respond to support queries and technical issues
• To improve the platform's features, performance, and user experience
• To detect, prevent, and address fraud or security vulnerabilities
• To comply with applicable Indian laws and legal obligations

We do not sell, rent, or trade your business data to third parties for marketing purposes.

4. Data Sharing and Disclosure

We may share your information in the following limited circumstances:

• Service Providers: We may share data with trusted third-party vendors (e.g., cloud hosting, payment gateways, email services) who assist us in operating the platform. These providers are bound by confidentiality obligations and may not use your data for any other purpose.
• Legal Compliance: We may disclose information if required to do so by law, court order, or government authority in India.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity, with prior notice provided to you.
• With Your Consent: We may share information for any other purpose with your explicit prior consent.

5. Data Storage and Security

Your data is stored on secure servers located in India or with cloud service providers operating in compliance with Indian data protection standards. We implement the following security measures:

• Encryption of data in transit using SSL/TLS protocols
• Access controls and role-based permissions within the platform
• Regular security audits and vulnerability assessments
• Secure backup and disaster recovery procedures

While we take all reasonable precautions, no system is completely secure. In the event of a data breach that poses a risk to your data, we will notify you as required under applicable Indian law.

6. Data Retention

We retain your business data for as long as your account is active or as needed to provide the Service. Upon termination of your subscription:

• You may export your data within 30 days of account termination
• After 30 days, we may permanently delete your account data from our systems
• Certain records (e.g., billing, transaction logs) may be retained for up to 7 years as required by Indian financial and tax regulations

7. Cookies

Vastoram uses cookies and similar tracking technologies to:

• Maintain your session and login state
• Remember your preferences within the platform
• Analyse usage patterns to improve the service

You may disable cookies through your browser settings; however, doing so may affect the functionality of the platform.

8. Your Rights

As a subscriber and data controller for your business data, you have the right to:

• Access the business information stored in your Vastoram account at any time through the platform
• Request correction of inaccurate or incomplete information
• Request deletion of your account and associated data (subject to legal retention requirements)
• Object to the processing of your data for any purpose other than providing the Service

To exercise any of these rights, please contact us at the details provided in Section 11.

9. Third-Party Links

The Vastoram platform may contain links to third-party websites or integrations. We are not responsible for the privacy practices or content of such third-party services. We encourage you to review their respective privacy policies before using them.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features. When we make material changes, we will notify you via email or an in-app notification at least 14 days before the changes take effect. Your continued use of the platform after the effective date constitutes your acceptance of the updated Policy.

11. Grievance Officer

In accordance with the Information Technology Act, 2000 and applicable rules, we have appointed a Grievance Officer to address data-related concerns. If you have any questions, complaints, or requests regarding this Privacy Policy or your data, please contact:

We will acknowledge your complaint within 24 hours and resolve it within 30 days of receipt.