Privacy Policy

Last updated 10 October 2026
This policy explains what personal data Indevo collects, why we use it, who we share it with, and the choices you have. It covers indevo.app, the Indevo seller app, and every seller’s shop on Indevo.

1 Who we are

Indevo is a marketplace that lets sellers run their own shop and share links to it on Instagram, YouTube, WhatsApp or anywhere else. Buyers can shop from those links or browse every shop on indevo.app.
In this policy, “Indevo”, “we” and “us” mean Indevo, which decides how your personal data is used. “You” means anyone who visits our website, sells on Indevo, or buys from a shop on Indevo.
Questions about this policy? Email us at info@indevo.app. For complaints, write to our Grievance Officer (see below).

2 What we collect

We collect only what we need to run Indevo. What that is depends on how you use it.
If you sell on Indevo, we collect:
  • Your name, email address and phone number, and your sign-in details.
  • Your PAN, and your GSTIN or GST enrolment ID.
  • Your bank account, which is set up as your payout account with our payment aggregator.
  • Your pickup address.
  • The results of the identity and tax checks (KYC) we run before your shop goes live.
  • Your shop’s handle, look, policies and products, and the orders, returns and payouts on them.

3 If you buy from a shop

You sign in with your phone number. We collect that number, the delivery addresses you save, your carts, and your orders, returns and refunds. If you report a damaged or wrong item, we also keep the photos you send.
Your sign-in, saved addresses and order history are shared across indevo.app and every shop, so you don’t have to enter them again. Each shop keeps its own cart.

5 When you apply to sell

Our website’s Apply form asks for your name, phone number, email address and, if you like, your business name. We store what you send and use it to contact you about selling on Indevo.

6 Analytics, session replay and error monitoring

Our website and apps use PostHog for analytics and session replay. Analytics show us which pages and features people use. Session replay records what happens on screen during a visit, such as taps, clicks, scrolling and the pages you move between.
We don’t mask text you type in these recordings. A replay can include what you enter into a form, such as the Apply form or a checkout address. Recordings also include basic network timings, but not the content of your requests.
We use Sentry to find and fix errors. When something breaks, Sentry records the error, your device and browser type, and the steps that led to it. It also records a replay of some sessions and of every session that hits an error. These replays can include text you type, too.
These tools use cookies or similar browser storage to tell one visit from another. Our website is hosted on Vercel, which processes standard request data such as your IP address to serve the site.

7 Why we use it

We use your personal data to:
  • Create and secure your account, and sign you in.
  • Check a seller’s identity and tax details before their shop goes live.
  • Take payments, deliver orders, and handle cancellations, returns and refunds.
  • Pay sellers, and issue invoices in the seller’s name.
  • Collect, deposit and file the taxes the law requires us to, and give sellers their tax certificates.
  • Show sellers which products, links and platforms bring opens and sales.
  • Respond to applications, questions and complaints.
  • Find and fix problems, keep Indevo safe, and improve it.
  • Meet our legal duties.

8 Who we share it with

We don’t sell your personal data. We share it only where running Indevo or the law needs it:
  • Our payment aggregator, an RBI-authorised payment aggregator (currently Razorpay), to take payments, make refunds, and set up and pay sellers’ payout accounts.
  • Our courier aggregator and its courier partners, to pick up and deliver orders. If a seller ships an order their own way, the seller’s chosen courier gets the delivery details.
  • The seller you buy from, limited to what they need to fulfil your order (see below).
  • Tax authorities, for the TCS and TDS filings the law requires of us.
  • Service providers who work for us, such as hosting, databases, identity and tax-ID checks, email, analytics and error monitoring.
  • Courts, regulators, the police or other authorities, when the law requires it.

9 What sellers see about buyers

A seller sees your orders with them and your total spend at their shop. They see your phone number and delivery address only while an order is open: from payment until its return window closes, which covers returns and replacements.
After that, the seller still sees the order, but not your phone number or address. Sellers can’t export buyer data from Indevo.

10 AI features

We plan to offer AI features for sellers: cleaning up product photos, drafting listings and replies, sales reports, suggestions, and HSN code and GST rate suggestions.
When you use one, we send only the content needed for that task, such as the photo or the product details, to an AI provider to produce a draft. We don’t let AI providers train their models on your data.

11 Where your data is processed

Some of our service providers, including our hosting, analytics and error-monitoring providers, may process your data outside India. We only do this as Indian law permits, and we choose providers that protect your data.

12 How long we keep it

We keep personal data only as long as we need it for the purposes above, and for as long as tax and e-commerce law requires.
Order, invoice and tax records are kept for the period the law requires, even after an account is closed or deleted. When a buyer’s account is deleted, we erase their profile, addresses and carts, and keep the orders and invoices the law requires, detached from them.

13 Your rights

Under the Digital Personal Data Protection Act, 2023, you have the right to:
  • Get a summary of the personal data we hold about you and how we use it.
  • Correct, complete or update your data.
  • Ask us to erase your data, unless the law requires us to keep it.
  • Withdraw your consent at any time. Withdrawing doesn’t affect what we did before, but we may no longer be able to provide some services.
  • Have your complaints heard and resolved by our Grievance Officer.
  • Nominate someone to exercise these rights for you if you die or can’t act for yourself.

14 How to use your rights

Email info@indevo.app from the email address or about the phone number on your account. We may ask you to confirm who you are before we act.
A buyer can ask us to delete their account once no order is still open. A seller can close their account from the seller app once every open order is fulfilled or refunded.
If you’re not satisfied with how we handle your complaint, you can complain to the Data Protection Board of India.

15 Children

Indevo is not for anyone under 18 without the verifiable consent of a parent or legal guardian. If you think a child has given us personal data without that consent, email info@indevo.app and we’ll delete it.

16 How we protect your data

We use technical and organisational safeguards to protect your data from loss, misuse and unauthorised access. Our staff sign in with two-factor authentication, and every time a staff member views a seller’s PAN or bank details, it is logged.
No system is perfectly secure. If a breach affects your personal data, we’ll tell you and the authorities as the law requires.

17 Grievance Officer

If you have a complaint about how we handle your personal data, write to: Grievance Officer, Indevo, at grievance@indevo.app.
We acknowledge every complaint within 48 hours and resolve it within one month of receiving it.

18 Changes to this policy

We may update this policy as Indevo or the law changes. The date at the top shows when it last changed. If a change is significant, we’ll tell you on our website or in the app before it takes effect.