Privacy policy

Last updated 15 October 2026

VyaparBoss is a procurement service run by House of 24 Private Limited, India ("we", "us"). It helps businesses buy from Indian suppliers, and helps suppliers get orders. This policy explains what we collect, why, who sees it, and what you can do about it. We wrote it to follow India's Digital Personal Data Protection Act, 2023.

The short version

• We collect what you give us to run your account, your requests and your orders.
• No advertising, no tracking pixels, no analytics tools, and we don't sell data.
• Suppliers never see a buyer's contact details or another supplier's price. Buyers don't see a supplier's private contact.
• You can delete your account yourself, any time, from Account settings.

What we collect

• Account: your name, business name, email, mobile number and city. If you use a password, we store only a one-way scrambled form of it (scrypt), never the password. If you sign in with Google, Apple or Facebook, we receive an ID for your account there, your name and the email they share with us.
• Supplier listings: business name, city, GSTIN, products, rates, minimum quantities, delivery range, payment terms and a contact number.
• Buying activity: what you ask for (product, quantity, delivery city, date), the quotes you receive or send, the orders you approve and their delivery status.
• Messages: what you send through the contact form, the sign-up form, or VyaparBoss on WhatsApp.
• Technical: one sign-in cookie (vb_s), and IP addresses, which we use briefly to stop abuse (for example too many login attempts). Your settings, like language and look, stay in your own browser.

How we use it

• To match a buyer's request with suppliers whose listing fits, and to show the full delivered price.
• To pass a buyer's approved order to the chosen supplier, and to keep both sides updated.
• To send account emails: confirming your email address, password resets, and updates about your own requests and orders. You can turn the updates off in Account settings.
• To check suppliers before we mark them "Verified by VyaparBoss".
• To keep the service safe, fix problems, and meet legal duties such as tax records.

Our assistant, Bhai, uses an AI model to read a request written in your own words and to draft messages. Prices, availability and suppliers always come from supplier records and quotes, never from the AI.

Who can see what

• Buyers see supplier listings (business name, city, products, rates, delivery range, record on VyaparBoss), never a supplier's private contact.
• Suppliers see only the requests their listing fits (product, quantity, city, date), their own quote and their position on price. They don't see the buyer's name or contact before an order, or other suppliers' prices. After an order, they see what they need to deliver it.
• Our team sees what's needed to run the service and help you.

Service providers we use

These companies process data for us, only to provide the service. Some of them store data outside India.

• Render (hosting the app and its database) and Upstash (a backup copy of the database).
• Brevo or Resend (sending emails).
• Google (Gemini) or Anthropic (Claude), to read the text of a buy request. We send the request text, not your account details.
• Meta (WhatsApp Business), if you use VyaparBoss on WhatsApp.
• Google, Apple and Facebook, if you choose to sign in with them.
• Google Fonts, which supplies the typefaces; your browser fetches them from Google.
• GitHub Pages, which hosts a static copy of the app.

How long we keep it

We keep your account while you use it. When you delete it, we remove your account, sign-in details and listing straight away. Orders and requests are business and tax records, so we keep them, unlinked from you, for as long as Indian tax law requires. Backup copies roll off within 14 days.

Your rights, and deleting your data

• See and correct: your details are in Account settings; change them any time.
• Delete: Account settings → Delete my account. Signed in with Google, Apple or Facebook? Same place. Can't sign in? Use the contact page with the email on your account and we'll delete it for you.
• Withdraw consent to emails: turn off updates in Account settings, or use the unsubscribe link in any outreach email.
• Complain: write to our Grievance Officer (below). If you're not satisfied, you can approach the Data Protection Board of India.

Children

VyaparBoss is for businesses. You must be 18 or older to make an account.

Security

Connections are encrypted (HTTPS). Passwords are stored scrambled. Sign-in cookies can't be read by scripts. Team tools need a separate key. No system is perfect; if something goes wrong that affects your data, we'll tell you and the authorities as the law requires.

Grievance Officer and contact

Yashraj Surgoniwar, House of 24 Private Limited. Reach us through the contact page. We reply as soon as we can, and within 30 days.

Changes

If we change this policy in a way that matters, we'll say so in the app before it applies.