Privacy Policy

We collect only what we need to provide Ezvento to you. This includes:

We do not collect or store sensitive financial data from your customers (such as their payment card numbers or bank account details). Ezvento only records payment method labels (Cash, UPI, Card) and amounts.

We use your information to:

• Run, maintain, and improve the Ezvento platform
• Process payments and send invoices if paid plans are introduced (the Service is currently free)
• Send transactional emails — welcome messages, payment confirmations, low-stock alerts
• Provide customer support when you contact us
• Detect and prevent fraud, abuse, and security incidents
• Comply with applicable Indian laws and regulations (including GST record-keeping obligations)
• Analyse aggregate, anonymised usage patterns to improve the product

We will never use your business data (your customers, invoices, or inventory) for advertising, benchmarking against you, or any purpose other than running the service.

All data is stored on secure cloud infrastructure (Supabase / PostgreSQL), hosted in India (Mumbai region), with:

• Encryption at rest and in transit (TLS 1.2+)
• Row-level security — your data is logically isolated from other tenants
• Regular automated backups
• Access controls — only authorised personnel with a legitimate need can access production systems

While we take industry-standard precautions, no system is 100% secure. If you suspect unauthorised access to your account, please contact us immediately at privacy@ezvento.com.

We do not sell your personal information. We share data only in these limited cases:

• Payment processors — when online payments launch (coming soon), your subscription and in-app POS payments will be processed by third-party payment providers; no payment data is shared with any processor today
• Email service (Resend) — to send transactional emails on our behalf
• Cloud infrastructure (Supabase) — to store and serve your data
• Legal obligations — when required by Indian law, court order, or a government authority
• Business transfer — if Ezvento is acquired or merges, your data may transfer to the new entity under equivalent privacy protections

All sub-processors are contractually bound to handle your data only as instructed and to maintain appropriate security.

We use the following types of cookies:

• Essential cookies — required for authentication and session management. These cannot be disabled without breaking the app.
• Functional cookies — remember your preferences (language, store selection).
• Analytics — anonymised usage data to understand how features are used. No personal identifiers are shared with analytics providers.

You can control non-essential cookies through your browser settings. Disabling essential cookies will prevent you from logging in.

We process your personal data as a Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (the “DPDP Act”), and other applicable law. As a Data Principal, you have the right to:

• Access — request a summary of the personal data we process and how we process it
• Correct & complete — update, correct, or complete inaccurate or incomplete data
• Erase — request deletion of your personal data (subject to legal retention requirements, such as GST record-keeping)
• Export — download your business data (invoices, products, customers) in a portable format from your account settings
• Withdraw consent — withdraw consent for any processing based on it, at any time (this does not affect processing already carried out, or processing required by law)
• Grievance redressal — raise a grievance with our Grievance Officer (see “Contact Us” below) and receive a response
• Nominate — nominate another individual to exercise these rights on your behalf in the event of death or incapacity

To exercise any of these rights, email us at privacy@ezvento.com. We will respond within a reasonable period and, in any case, as required by applicable law.

We retain your personal data for as long as your account is active or as needed to provide the service.

• Active accounts — data is kept for the duration of your subscription
• After cancellation — account data is kept for 30 days so you can reactivate or export. After 30 days, it is permanently deleted.
• GST / tax records — invoice data may be retained for up to 8 years as required by the Indian GST Act, even after account deletion
• Support logs — kept for up to 2 years for dispute resolution

Ezvento is a business tool intended for adults (18 years and older). We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, please contact us and we will promptly delete it.

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by email and by posting a notice in the app at least 14 days before the changes take effect. Your continued use of Ezvento after the effective date means you accept the updated policy.

The current version is always available at ezvento.com/privacy-policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or your data — or wish to raise a grievance under the DPDP Act — please contact our Grievance Officer:

You can also reach us through our support page.