Privacy Policy

1. Introduction

Welcome to VEPAR (operated via vepar.shop). Your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, and related services (collectively, the "Service").

By using VEPAR, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our Service.

2. Information We Collect

2.1 Personal Information

When you register or use VEPAR, we may collect the following personal information:

• Full name
• Email address
• Phone number
• Store/shop name and details
• Profile image (if provided)
• Password (stored in encrypted form)

2.2 Business Data

As part of the Service, we store the business data you enter, including:

• Products, inventory, and pricing information
• Customer names, phone numbers, and transaction records
• Billing and sales transaction history
• Udhar (credit) records and payment history
• Supplier information

2.3 Automatically Collected Information

When you access VEPAR, we may automatically collect:

• Device type, operating system, and browser information
• IP address
• Usage patterns and feature interactions
• Log data and error reports

3. How We Use Your Information

We use the collected information to:

• Provide, operate, and maintain the VEPAR platform
• Create and manage your account
• Process billing, transactions, and udhar records
• Send important service-related notifications (e.g., email verification, password resets)
• Improve and personalize user experience
• Provide customer support
• Monitor and analyze usage trends to improve the Service
• Detect, prevent, and address technical issues or fraud

4. Data Storage & Security

Your data is stored securely on cloud servers. We implement industry-standard security measures including:

• Encrypted passwords using bcrypt hashing
• Secure JWT-based authentication tokens
• HTTPS encryption for all data in transit
• Access controls and role-based permissions

While we strive to use commercially acceptable means to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

5. Data Sharing & Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following cases:

• With your consent: When you explicitly authorize us to share your data
• Service providers: Trusted third-party services that help us operate (e.g., cloud hosting, email delivery), bound by confidentiality agreements
• Legal requirements: When required by law, regulation, or legal process
• Business transfers: In connection with a merger, acquisition, or sale of assets

6. Third-Party Services

VEPAR may use the following third-party services:

• Google Sign-In: For authentication (subject to Google's Privacy Policy)
• WhatsApp: For sharing receipts and payment reminders (initiated by you)
• Email services: For sending verification and notification emails

These third-party services have their own privacy policies, and we encourage you to review them.

7. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Update: Correct or update your personal information via your profile settings
• Delete: Request deletion of your account and associated data
• Export: Request your business data in a portable format
• Withdraw consent: Stop using the Service at any time

To exercise any of these rights, please contact us at the email address provided below.

8. Data Retention

We retain your personal information and business data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your data within 30 days, except where we are required to retain it for legal or regulatory purposes.

9. Children's Privacy

VEPAR is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised "Last updated" date. We encourage you to review this page periodically. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us: