Google Play Store Compliance

Privacy Policy for Vyaapar AI

Last Updated: September 19, 2026

At Vyaapar AI (also referred to as "StockFlow", "we", "our", or "us"), we value your trust and are committed to safeguarding the privacy and security of retail business owners, staff, and their customers. This Privacy Policy details how our mobile application and web services collect, use, disclose, and protect your information.

1. Information We Collect

We collect only the information necessary to provide retail stock management, billing, and accounting features:

Account Details: Full Name, Email Address, Phone Number, and password hash required to create and secure your store management account.
Store & Business Data: Store Name, Store Address, GSTIN / Tax ID, state code, and contact information printed on customer bills.
Inventory & Transaction Records: Product names, SKUs, barcode numbers, batch numbers, buying/selling prices, GST rates, stock on hand, and invoices generated for store customers.
Customer Phone / Name: Provided voluntarily during checkout to generate electronic bills and maintain sales receipts.

2. Device Hardware Permissions

📷 Camera Permission (android.permission.CAMERA):

Vyaapar AI requests access to your device's camera strictly for real-time optical barcode scanning and optical character recognition (OCR) of product expiry dates. Camera frames are processed on-device in active memory and are never recorded, broadcast, or sold to any third party.

3. How We Use Your Data

We use the collected information exclusively to:

Enable multi-device inventory tracking and live stock synchronization.
Calculate GST, generate print-ready tax invoices, and track pending customer payments.
Dispatch one-time verification passwords (OTP) via secure email or SMS for account authentication.
Alert you when stock levels reach minimum reorder thresholds.

4. Data Storage & Security

All communication between the mobile app, server, and database is encrypted using industry-standard Transport Layer Security (TLS/HTTPS). Store data is stored in enterprise-grade Supabase PostgreSQL databases protected with strict Row Level Security (RLS) ensuring one store cannot access another store's inventory.

5. Third-Party Services

We work with trusted infrastructure providers that adhere to high security standards:

Supabase: Cloud database and authentication infrastructure.
Render: Cloud application server hosting.
Google Play Services: Application distribution and crash telemetry.

6. Account Deletion & Data Rights

In accordance with Google Play Developer policies, you have the right to request the complete deletion of your account and associated store data at any time. To request account deletion:

Go to Settings → Danger Zone → Reset Data within the app, or
Email our administrative team at support@vyaapar.ai with your registered email and store name. All store records will be permanently purged within 7 business days.

7. Contact Us

If you have any questions about this Privacy Policy or data security practices, please contact us at:

Vyaapar AI Team
Email: support@vyaapar.ai