Privacy Policy

Pingsold is operated by Web vogue technologies (“we”). For your own account data (as a seller), we are the data fiduciary. For data about your buyers that flows through your inbox and orders, you are the data fiduciary and we process it on your behalf, only to provide the service.

Business

Web vogue technologies (operator of Pingsold)

Email

contact@webvogue.in

Grievance officer

contact@webvogue.in (subject “Grievance”). We acknowledge within 24 hours and resolve within 15 days.

• Account: your name, email, password (stored only as an Argon2 hash), role, and sign-in times.
• Store: store name, city, pickup address, delivery rules, UPI ID, policies, catalog, product photos.
• Buyer data you receive: names, phone numbers or Instagram IDs, delivery addresses, order history, and chat messages from WhatsApp and Instagram.
• Billing: plan, invoices, the billing name, email, GSTIN and address you enter, and payment status. Card and UPI details are handled by Razorpay; we never see or store your card number or UPI PIN.
• Technical: security logs (sign-in attempts with IP address), and request logs used to keep the service running.

Photos you upload are re-encoded and their hidden location data (EXIF/GPS) is removed before they're stored.

• To run the service: show your inbox and orders, send the replies you or the assistant write, and track payments and shipments.
• To bill you and issue GST invoices.
• To keep accounts secure: fraud prevention, rate limiting, audit logs.
• To send service emails: verification, password resets, receipts and payment reminders. We don't send marketing email without your consent.

We don't sell personal data, and we don't use your buyers' data for our own advertising.

We share data only with providers that help us run Pingsold, under contracts that restrict their use of it:

• Google Cloud / Firebase (hosting, product photos, backups), in Mumbai, India.
• Neon (database), in Singapore.
• Razorpay (your Pingsold subscription, and buyer payments on your own Razorpay account if you connect it), in India.
• Meta (WhatsApp Business Platform and Instagram messaging), for the chats you connect.
• Zoho ZeptoMail (transactional email), in India.
• Shiprocket (courier booking and tracking), in India: the buyer's name, phone and delivery address for orders you ship through Pingsold.
• AI model provider (Google Gemini, OpenAI or Anthropic, whichever we use at the time), only when AI replies are on: the buyer's recent messages and the relevant catalog details, to draft a reply. We use API terms under which this data isn't used to train their models.

Some processing happens outside India (for example, the database in Singapore). The DPDP Act allows this, except to countries the Government of India restricts.

We use one essential cookie, __session. It keeps you signed in, is HttpOnly and Secure, and expires after 7 days. We don't use advertising or third-party tracking cookies. Payment pages from Razorpay may set their own cookies, which are needed for fraud prevention.

• Account, store and buyer data: while your account is active. Deleting your account erases it (see below).
• GST tax invoices: kept for the period tax law requires, currently about 6 years, even after you delete your account.
• Backups: nightly encrypted backups are kept for 30 days, then deleted.
• Security logs: up to 1 year.

You can access and download all of your store's data, and erase your account, yourself, at any time, in Settings → Your data. You can correct most details in Settings. For anything else, or to raise a grievance, email us (details above). You may also complain to the Data Protection Board of India.

Buyers who want their data corrected or deleted should contact the seller they bought from. We'll help that seller act on the request.

Everything is encrypted in transit (HTTPS/TLS) and at rest. WhatsApp and Instagram access tokens are encrypted again with separate keys. Each store's data is isolated, access is logged, and secrets live in Google Secret Manager. If a breach affects you, we'll tell you and the Data Protection Board as the law requires.

Pingsold is a business tool for adults. We don't knowingly collect data from anyone under 18.

If we make material changes, we'll email account owners at least 14 days before they take effect. The date at the top shows the latest version.