Privacy policy

VEYA, a sole proprietorship owned by Sagar Kashyap, Noida, Uttar Pradesh, is responsible for your personal data. Contact: sagarbusiness90@gmail.com. We handle personal data in line with India's Digital Personal Data Protection Act, 2023.

Sellers.

• Email address, name, store handle and bio, and the products you create (titles, descriptions, prices, cover images, and the files or links you deliver).
• Your sales and earnings records.
• Payout verification: your PAN, address and bank details go directly to our payment partner, Razorpay. We do not store them. We keep only Razorpay's reference numbers and your verification status.

Buyers.

• Your email address and the details of your order: the product, amount, time and Razorpay's payment reference.
• We never see or store your card, UPI or bank details. Razorpay handles them.

Everyone who visits.

• Basic technical data, such as IP address and device type, kept in the logs of our hosting provider for security and to keep the service running.
• Cookies: only the ones needed to keep a seller logged in. We do not use advertising or tracking cookies.

If a seller connects Instagram, we handle the following.

• The seller's Instagram account ID and username, and a login token. The token is stored encrypted and used only to read the account's new comments and messages, and to send the messages the seller set up.
• For people who comment on or message that account: their Instagram ID and username, the ID of the comment or message, and whether a DM was sent, seen and clicked. We use this to run the automation, to avoid sending anyone a duplicate, and to show the seller their activity.
• We read the text of comments and messages only to check for the words the seller chose, and we do not keep it. The exception is an email address that someone chooses to type in reply to a seller's question. We save it for that seller.
• If the seller turned on the "follow" option, we ask Instagram whether the person follows the seller. We use the answer only to decide whether to send the link.
• Links sent by Auto DM are personal to each person, so a seller can see whether it was opened and whether a purchase followed.

Emails collected this way belong to the seller who asked for them, who is responsible for using them lawfully. Veya does not email those people itself.

• To run Veya: to create stores, take payments, deliver products, and pay sellers.
• To prevent fraud and abuse, and to keep the service secure.
• To answer questions and complaints, and to handle refunds.
• To meet our legal, tax and accounting duties.

We do not sell your personal data. We share it only with the services that help us run Veya, and only as needed:

• Razorpay, our payment partner, for payments and payouts.
• Supabase, which hosts our database (in the Mumbai region), and Vercel, which hosts our website.
• Cloudflare, which stores product files (once file uploads are switched on).
• Meta (Instagram), when a seller uses Auto DM, to read comments and messages and to send DMs.
• Sellers see the orders for their own products. We show buyer email addresses to sellers partly hidden.
• Authorities, where the law requires it.

• Order and payment records: as long as the law requires for tax and accounting.
• A seller's Instagram login: until they disconnect, or the account is closed.
• Auto DM activity: until the seller deletes it, the account is closed, or you ask us to delete it.
• Everything else: while your account is open, and for a reasonable time after, unless you ask us to delete it and the law allows.

You can ask us to:

• Show you the personal data we hold about you.
• Correct anything that is wrong or out of date.
• Delete your data, unless we must keep some of it by law.
• Answer a complaint about how we handled your data.

Email sagarbusiness90@gmail.com and we will reply within 30 days. Our grievance officer is Sagar Kashyap. To remove Veya's access to an Instagram account, you can also use Instagram's settings (Website permissions, then Veya) or the Disconnect button in Auto DM. Either removes the login we hold. See how to delete your Instagram data.

We use encryption for sensitive items such as Instagram logins, limit who can read each record, and use secure connections. No system is perfectly secure, so if something goes wrong that affects you, we will tell you as the law requires.

Veya is for people aged 18 and over. We do not knowingly collect data about children.

If we change this policy, we will update the date above, and for important changes we will tell you on the site or by email.