Privacy & DPDP Policy

1. Core Commitment: Zero Data Selling Guarantee

At Celestiq Insights OPC Pvt. Ltd. ("MSME Vyapari"), we hold a fundamental belief: your customer lists, business transactions, sales volumes, and ledger entries belong exclusively to you. We strictly and unconditionally guarantee that we will NEVER sell, rent, license, or monetize your business or customer records to third-party advertisers, credit scoring agencies, loan brokers, or data brokers.

2. Roles Under the DPDP Act, 2023

• Merchant as Data Fiduciary: When you input your customer names, mobile numbers, and credit balances into your local bahi-khata, you act as the Data Fiduciary. You represent that you have obtained lawful consent from your customers to record commercial transactions.
• MSME Vyapari as Data Processor: MSME Vyapari acts strictly as a technology service provider and Data Processor, executing encrypted cloud backups and synchronization on your instructions.

3. Sovereign Indian Data Localization

All cloud synchronization records and encrypted database snapshots are hosted exclusively within Tier-4 Data Centers located physically inside the territory of the Republic of India (Mumbai and Chennai regions) through Cloudflare Enterprise infrastructure. No personal or financial records are transferred or mirrored outside Indian borders without explicit statutory compliance.

4. Information Collected & Lawful Processing Grounds

We process only the minimum data necessary to deliver the service:

• Merchant Profile: Registered mobile phone number, business name, category, GSTIN (optional), and verified UPI Virtual Payment Address (VPA).
• Device & Telemetry: Device model, OS version, and anonymous crash logs for stability and diagnostic improvements.
• Encrypted Vault Data: Gzip-compressed SQLite database snapshots encrypted at rest with AES-256 for disaster recovery.

5. Right to Erasure & Account Deletion

You have the absolute right under the DPDP Act 2023 to request full erasure of your account, cloud journal entries, and snapshot backups. Upon submitting an account deletion request via the app or writing to our Grievance Officer, all cloud copies are permanently purged within thirty (30) days, except where retention is mandated by Indian tax or regulatory authorities.

6. Statutory Grievance Redressal Officer

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, the details of the designated Grievance Officer are as follows: