Privacy Policy

Last updated: 8 October 2026

INDICSERVER INTERNET SERVICES ("Vendamate", "we", "us") runs vendamate.com, a platform on which businesses create and run online stores. This policy explains what personal information we collect, why, and the choices you have. It applies to merchants who sign up for Vendamate. Shoppers who buy from a store are also covered by that store's own policies.

1. Information we collect

Account details: name, email address, phone number, store name, and the password you choose (stored only as a hash).
Business and billing details: billing name and address, GSTIN where you give one, and the history of subscription payments.
Store content: products, images, orders and customer records you add to your store. You own this data; we process it on your behalf.
Usage and device data: IP address, browser type, pages visited and error logs, used to keep the service secure and working.
Communications: messages you send to our support team.

2. Payments

Subscription payments are processed by Razorpay Software Private Limited. Card, UPI and bank details are entered on Razorpay's secure checkout and are never stored on our servers. We receive only a payment reference, the amount and the status. Razorpay handles that data under its own privacy policy.

3. How we use information

To create and operate your account and store, and to take and confirm payments.
To send service messages: receipts and GST invoices, renewal reminders, security alerts and notices about changes to the service.
To provide support, prevent fraud and abuse, and keep the platform secure.
To meet legal, tax and accounting obligations.

We do not sell personal information.

4. Who we share it with

Only with service providers that help us run the platform (hosting, email delivery, payment processing, domain registrars where you buy a domain from us), and with authorities when the law requires it. Each provider may use the information only to deliver its service to us.

5. Customers of your store

If you are a merchant, you decide what personal data of your own shoppers you collect, and you are responsible for telling them how you use it. We act as your processor for that data and handle it only to provide the service to you.

6. Cookies

We use a small number of cookies, described in our Cookie Policy.

7. Retention

We keep account data while your account is active. Billing and invoice records are kept for as long as Indian tax and company law require. When you close your account we delete or anonymise the rest within a reasonable period, unless the law requires us to keep it.

8. Security

Data is sent over HTTPS, passwords are hashed, access is restricted, and each store's data is kept separate from other stores. No system is perfectly secure, so we cannot guarantee absolute security.

9. Your rights

Under Indian law, including the Digital Personal Data Protection Act, 2023, you may ask to access, correct or erase your personal data, withdraw consent, or raise a grievance. Write to indicserver@gmail.com and we will respond within a reasonable time, and in any case within the period the law sets.

10. Children

The service is for businesses and is not directed at anyone under 18. We do not knowingly collect data from children.

11. Changes

We may update this policy. The date at the top shows when it last changed, and we will notify account holders by email of material changes.

12. Contact

Questions or grievances: indicserver@gmail.com, or see our Contact page.