Privacy Policy

1. Who We Are and Scope

Vyavastha Partner, having its registered office at Beside Reliance Tower, Purani Basti Raipur , India, operates the Vyavastha marketplace platform (“Vyavastha”, “we”, “us”, “our”, or “Company”).

Vyavastha enables Clients to discover, enquire about, book, and manage event-related services, and enables Vendors to list, market, and manage their services. This Policy applies to the Vyavastha website, customer portal, vendor portal, mobile applications, customer support channels, and related communications (collectively, the “Services”).

For the purposes of applicable Indian data protection law, including the Digital Personal Data Protection Act, 2023 and applicable rules made under it (“DPDP Law”), Vyavastha is generally the Data Fiduciary for Personal Data that we process to operate the Services. A Vendor may independently determine the purposes and means of processing certain Client information received through an enquiry or booking and may have separate legal responsibilities for that processing.

2. Personal Data We Collect

A. Account and Contact Information

• •Name, email address, mobile number, password or login credentials where applicable, profile image, and account identifiers.
• •Authentication and verification information, including OTP verification status, Google sign-in identifiers where you choose Google sign-in, and account-session information.
• •Communications you send to us, including support requests, feedback, complaints, and responses to surveys.

B. Client and Event Information

• •Event category, event date, guest count, budget, location, venue details, requirements, preferences, enquiry details, and booking-related information.
• •Address, city, state, pincode, and location coordinates where you choose to provide or permit location information.
• •Saved vendors, reviews, ratings, photos, reference images, messages, and other content you submit through the Services.

C. Vendor and Business Information

• •Vendor or business name, business category, business address, service areas, contact details, pricing, portfolio content, package details, availability, and payout-related information.
• •Information required for vendor onboarding, verification, legal compliance, payment settlement, tax administration, fraud prevention, and dispute handling, which may include PAN, GSTIN, bank-account details, business registration details, and documents submitted by or for authorised representatives.
• •Vendor profile status, onboarding progress, verification status, bookings, enquiries, quotes, invoices, payment and payout records, ratings, reviews, and customer communications.

D. Device, Usage and Technical Information

• •IP address, browser type, device type, operating system, app version, language, pages or screens viewed, access time, diagnostic information, cookies, and log data.
• •Information about how you interact with our Services, including feature usage, clicks, session activity, error logs, and security events.

E. Location, Camera and Photos

We request location, camera, or photo-library access only where you choose to use a related feature, such as selecting a venue location, uploading a portfolio image, submitting a document, sharing an event reference image, or creating a listing. You can manage device permissions through your device settings. We do not intentionally collect background location information unless we clearly notify you and obtain the permissions required by your device and applicable law.

F. Information We Receive From Others

We may receive information from identity, login, payment, messaging, mapping, cloud-storage, analytics, fraud-prevention, customer-support, or advertising service providers, and from Vendors or Clients where required to process an enquiry, booking, payment, complaint, review, or dispute.

3. Why We Process Personal Data

We process Personal Data for the following specified purposes:

• •To create, authenticate, maintain, and secure your account.
• •To enable Vendor onboarding, listings, profile verification, service discovery, enquiries, quotations, bookings, cancellations, refunds, payment processing, payouts, invoices, and settlement.
• •To share relevant event and contact details between a Client and a selected Vendor when the Client initiates an enquiry, requests a quote, books a service, or otherwise asks us to facilitate a transaction.
• •To provide customer support, resolve disputes, investigate complaints, enforce our Terms, and prevent fraud, abuse, security incidents, and unlawful activity.
• •To send service-related communications, including OTPs, account alerts, enquiry updates, booking updates, payment updates, policy notices, and security notices.
• •To improve the performance, security, functionality, design, and reliability of the Services through analytics and diagnostics.
• •To comply with applicable legal, tax, accounting, record-keeping, regulatory, and law-enforcement obligations.
• •To send marketing, promotional, recommendation, or reminder communications only where permitted by applicable law and subject to your available choices.

Where consent is required by DPDP Law, we will request it through a clear notice describing the Personal Data and specified purpose involved. You may withdraw consent at any time through the method stated in the consent request, your account settings where available, or by contacting us as described in Section 12. Withdrawal will not affect processing already undertaken before withdrawal or processing permitted or required under applicable law.

4. Marketplace Data Sharing

A. Client-to-Vendor Sharing

If you submit an enquiry, request a quotation, contact a Vendor, request a callback, make a booking, or otherwise choose to interact with a Vendor, we may share information reasonably necessary to facilitate that interaction. This may include your name, mobile number, event date, event type, location, guest count, budget range, requirements, and relevant communications.

B. Vendor-to-Client Sharing

We may show Vendor profile information to Clients, including business name, contact details where relevant, service details, service area, packages, portfolio images, prices, availability information, ratings, reviews, and verification/status indicators.

C. Vendors’ Independent Use of Data

Vendors must use Client Personal Data received through Vyavastha only for responding to, managing, and fulfilling the relevant enquiry, quotation, booking, payment, cancellation, complaint, or legally required record. Vendors must not use that information for unrelated marketing, sale, or disclosure unless they have an independent lawful basis and any consent required by applicable law.

D. Service Providers

We may disclose Personal Data to service providers that help us operate the Services, such as cloud hosting and database providers, media-storage and image-delivery providers, payment gateways, email/SMS/OTP providers, mapping providers, analytics providers, customer-support tools, security providers, and professional advisers. These parties may process information only as necessary to provide services to us or as required by law.

E. Legal, Safety and Corporate Disclosures

We may disclose information where reasonably necessary to comply with law, court orders, governmental or regulatory requests, tax obligations, or to protect the rights, safety, property, security, users, Vendors, or operations of Vyavastha. We may also transfer information as part of a merger, acquisition, financing, reorganisation, asset sale, or similar transaction, subject to applicable law.

5. Photos, Portfolio Content and User Content

Vendors may upload portfolio photographs, videos, logos, service images, and other listing content. Clients may upload event reference images, reviews, profile images, and other content. You are responsible for ensuring that you have all rights, permissions, notices, and consents needed to upload or share such content.

To operate, display, optimise, resize, compress, cache, moderate, and protect marketplace content, you grant Vyavastha a non-exclusive, worldwide, royalty-free licence for the duration necessary to provide the Services. Where reasonably necessary for marketplace protection and attribution, Vyavastha may apply a visible Vyavastha watermark, thumbnail, preview format, or other technical transformation to Vendor portfolio and listing images displayed publicly. We do not apply public watermarks to private verification documents.

We may remove, restrict, or review content that violates our Terms, is unlawful, infringes rights, contains personal data without an appropriate basis, or creates a safety, privacy, fraud, or intellectual-property risk.

6. Cookies and Similar Technologies

We use cookies, local storage where applicable, SDKs, pixels, and similar technologies to operate our Services. Strictly necessary technologies may be used for authentication, session management, security, fraud prevention, load balancing, and essential functionality.

Where required, we will seek your consent before using non-essential analytics, advertising, or personalisation technologies. You may manage available preferences through our cookie settings or browser/device controls. Disabling some technologies may affect certain features of the Services.

For details about the categories of cookies and controls available, please see our Cookie Notice: Cookie Policy.

7. Data Security

We implement reasonable technical and organisational safeguards designed to protect Personal Data against unauthorised access, alteration, disclosure, loss, misuse, or destruction. These measures may include access controls, authentication controls, encrypted communications where supported, restricted access to sensitive information, system monitoring, backups, vulnerability management, and vendor-security measures.

No internet transmission, electronic storage system, or security control is completely secure. You should use a strong password where applicable, keep OTPs and login credentials confidential, and notify us promptly if you suspect unauthorised account access.

8. Retention and Deletion

We retain Personal Data only for as long as necessary for the purposes described in this Policy, including to provide the Services, maintain records, resolve disputes, enforce agreements, prevent fraud, comply with legal obligations, and protect our rights.

Retention periods vary by data type. For example, account, transaction, tax, payment, booking, vendor-verification, and dispute records may need to be retained for longer periods where required by law or reasonably necessary for legal claims. When Personal Data is no longer needed, we delete, de-identify, or anonymise it, subject to lawful retention requirements and backup-retention cycles.

Deleting an account does not necessarily delete information already shared with a Vendor or Client for an active or completed transaction, nor does it require us to delete information we must retain under applicable law.

9. Cross-Border Processing

Some of our service providers may process Personal Data outside India. Where cross-border processing occurs, we take reasonable steps to ensure that the transfer is carried out in accordance with applicable law, contractual requirements, and any restrictions notified by the Government of India.

10. Your Rights and Choices

Subject to applicable law and identity verification, you may request:

• •Information about Personal Data we process and the purposes for which it is processed.
• •Correction, completion, or updating of inaccurate or incomplete Personal Data.
• •Erasure of Personal Data where it is no longer necessary, subject to legal and legitimate retention requirements.
• •Withdrawal of consent for processing that is based on consent.
• •Grievance redressal concerning our processing of your Personal Data.
• •Nomination of another individual to exercise your rights in the event of death or incapacity, where applicable under DPDP Law.

To make a request, email privacy@vyavastha.in or submit a request through [ACCOUNT SETTINGS / PRIVACY REQUEST LINK]. We may need to verify your identity before acting on a request. If you are dissatisfied with our response, you may have the right to escalate the matter to the Data Protection Board of India or another competent authority, subject to applicable law.

11. Children’s Privacy

The Services are not intended for persons under 18 years of age. We do not knowingly process Personal Data of a child unless we have verifiable consent from the child’s parent or lawful guardian where required by applicable law. If you believe that a child has provided Personal Data to us without appropriate consent, please contact us so that we can review and take appropriate action.

12. Grievance Officer and Contact Details

For privacy requests, consent withdrawal, questions, complaints, or grievances, contact us using the details below.

We will acknowledge and address grievances in accordance with applicable law. Please include sufficient details for us to identify your account, understand your request, and contact you safely.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our Services, legal requirements, or data practices. We will post the updated version with a revised “Last updated” date. Where required by law or where a change is material, we will provide additional notice or seek fresh consent before applying the change.