Grossky Technology Pvt. Ltd. ("Grossky", "we", "our", or "us") is committed to protecting the privacy of SNPs and their sellers ("Users") who use our platform Bharavi ("Platform") to connect to the ONDC network. This Privacy Policy explains how we collect, use, share, and retain your data.

1. Scope

   This Policy applies to:

   • SNPs registering on our Platform,
   • Sellers onboarded by SNPs,
   • Data processed through our Platform as part of ONDC transactions.

2. Data Collected

   We collect and process:

   • SNP Information: Company name, authorized representative details, contact information.
   • Seller Data (via SNPs): Store name, contact, address, Aadhaar, GSTIN, PAN, banking info.
   • Seller PII: Email, phone, Aadhaar and, address.
   • Transactional Data: Product catalogs, inventory, order histories, payments, returns.
   • Usage Data: Logs, analytics, and device information.

3. Data Ownership and Co-Ownership

   • SNPs retain primary ownership of their sellers’ data.
   • By using our Platform, SNPs grant Grossky co-ownership rights to:
     • Access, store, and process data,
     • Use anonymized and aggregated data for internal research, AI model training, business analytics, and product development.
   • Upon SNP’s termination from the Platform, we will:
     • Delete seller PII (phone, email, KYC), within 30 days
     • Retain transaction-related non-PII data (catalogs, orders) in anonymized form for our legitimate business interests.

4. Data Usage

   We use collected data to:

   • Operate the Platform,
   • Facilitate ONDC-compliant transactions,
   • Enhance Platform features,
   • Train AI algorithms,
   • Analyze market trends,
   • Provide technical support.

5. Data Sharing

   We may share data:

   • With ONDC as required by their protocols,
   • With logistics, payment, and compliance partners,
   • With government authorities upon lawful request.

   We will never sell PII data to third parties.

6. Data Retention

   • Seller PII: Retained while SNP remains active on our Platform.
   • Transaction Data: Retained indefinitely in anonymized form for legal, analytical, and operational purposes.
   • Data Deletion: SNPs can request deletion; PII will be erased as per our deletion policy.

7. Data Retention

   We implement industry-standard security measures, including encryption, access controls, and regular audits, to protect data against unauthorized access, alteration, or destruction.

8. Compliance with Indian Law

   This Policy complies with the Digital Personal Data Protection Act, 2023, and other applicable Indian IT and data privacy regulations. We process personal data only as permitted by law and ensure appropriate legal bases for processing.

9. SNP Responsibilities

   SNPs are responsible for:

   • Informing their sellers of their data practices,
   • Obtaining necessary consents from sellers as required under applicable data protection laws.

10. Updates to this Policy

    We may update this Privacy Policy from time to time. Updated versions will be posted on our website/platform with a new effective date.

11. Contact Us

    For questions, contact our Data Protection Officer at:

    sales.software@grossky.com