VyapaarMate is built for tenant-isolated business data. Business owners can access only their own orders, menu, customers, payments, campaigns, staff, and reports. PSHR Innovex super admins can access platform analytics and business records for support, billing, verification, and security operations.

Customer phone numbers, addresses, order history, WhatsApp update consent, and marketing consent are stored separately. Marketing campaigns must only be sent to customers who have opted in to offers.

Payment status, order data, booking data, catalog data, and customer history are used to operate the software and generate business insights for the relevant business owner. VyapaarMate does not sell customer data.

• Business and customer records are isolated by business tenant.
• Customer phone numbers and order history are stored per business.
• WhatsApp customer communication should follow customer consent and applicable messaging policies.
• Payment status and order data are used only for workflow, reporting, and business intelligence suggestions.
• Businesses can request export or deletion support by emailing support@pshrinnovex.com.
• Production deployments must use HTTPS, secure environment variables, webhook verification, and encrypted provider secrets where applicable.
• Sensitive owner, admin, payment, KYC, and support actions should be audit logged for review and abuse prevention.