Privacy Policy

Last updated: May 2026

1. Introduction

RBUY Marketing Private Limited (“Company”, “we”, “our”, or “us”) operates the ROOPAY SHOPPE™ platform (“Platform”) accessible at www.roopayshoppe.com and through our mobile applications. We are committed to protecting the privacy of all users, sellers, marketing executives, and other participants (“you” or “your”) who access our Platform. This Privacy Policy explains what data we collect, how we use it, how we protect it, and your rights with respect to your personal information.

This Policy is governed by the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, as applicable in India.

2. Data We Collect

We collect the following categories of personal data depending on your role on the Platform:

Identity & Contact Data

Full name, mobile number (mandatory), email address, date of birth, gender, profile photograph, and country of residence.

KYC & Financial Data (Sellers, ME, MF, Loan Providers)

PAN card number, Aadhaar number, bank account number, IFSC code, GST registration number, business registration documents, and RBI licence (Loan Providers). All such data is encrypted using AES-256 before storage and is never shown in plain text in our interface or logs.

Transaction Data

BV wallet balances and transaction history, order details, payment gateway references, withdrawal requests, TDS records, and platform fee breakdowns.

Device & Usage Data

IP address, browser type, device identifiers, session tokens (stored as httpOnly cookies — never in localStorage), pages visited, and interaction timestamps.

Communication Data

Support ticket content, WhatsApp messages sent via our official WATI business number, SMS OTP logs (OTPs are bcrypt-hashed — we never store the raw OTP), and email correspondence.

3. How We Use Your Data

  • To create and manage your account and role identity on the Platform.
  • To process transactions, orders, withdrawals, and BV wallet operations.
  • To verify your identity and KYC documents as required by Indian law.
  • To deduct TDS and file statutory returns (Form 16A, GSTR-8) with Indian tax authorities.
  • To send OTP verifications, transaction alerts, and promotional communications via SMS and WhatsApp.
  • To generate PDFs of bills, invoices, and wallet statements carrying your data.
  • To detect, prevent, and investigate fraud, abuse, and security breaches.
  • To provide customer support and resolve disputes.
  • To improve the Platform, personalise your experience, and conduct internal analytics.

4. Third-Party Services

We share limited data with the following third-party services solely to operate the Platform. Each is subject to their own privacy policies:

Cashfree Payments / PayU

Payment processing — order amount and payer identity.

Cloudinary

Secure cloud storage for KYC documents using private signed URLs.

MSG91

OTP delivery via SMS — mobile number and masked OTP reference.

WATI (WhatsApp Business)

Transactional alerts and customer support messages.

Resend (SMTP)

Transactional email delivery for OTP, bills, and notifications.

Railway (PostgreSQL)

Encrypted database hosting for all platform data.

Upstash (Redis)

Session token and OTP caching — data is TTL-expiring and not persisted permanently.

Sentry

Error monitoring — anonymised stack traces only; no PII is sent.

We do not sell, rent, or trade your personal data to any third party for their independent marketing or commercial purposes.

5. Data Retention

Active accounts: Your data is retained for as long as your account is active. Accounts have a 365-day validity period; they must be renewed annually to remain active.

Financial records: All transaction records, TDS certificates, GST records, and withdrawal histories are retained for a minimum of 7 years as required under the Income Tax Act, 1961, and the Companies Act, 2013.

KYC documents: Retained for 5 years after account closure as mandated by applicable KYC norms.

OTPs and session tokens: Expire within 5 minutes (OTP) and 15 minutes (JWT access token) respectively and are not persisted beyond expiry.

6. Cookies Policy

We use httpOnly, Secure cookies exclusively for session management (JWT access and refresh tokens). We do not use third-party advertising cookies or tracking pixels. You may disable cookies in your browser settings, but doing so will prevent you from logging in to the Platform. We do not use localStorage or sessionStorage to store any authentication credentials.

7. Your Rights

Subject to applicable law, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete personal data.
  • Request deletion of your account and associated personal data (subject to statutory retention obligations).
  • Withdraw consent for marketing communications at any time.
  • Lodge a complaint with the appropriate data protection authority.

To exercise any of these rights, email us at support@roopayshoppe.com with your registered mobile number and the specific request. We will respond within 30 days.

8. Security Measures

We implement industry-standard security measures including AES-256 encryption for all sensitive personal and financial data at rest, TLS 1.3 for all data in transit, bcrypt password hashing with salt rounds of 12, rate-limited API endpoints, and mandatory two-factor authentication (password + OTP) for all payment operations. We conduct periodic security audits and maintain audit logs for all administrative actions.

9. Changes to This Policy

We may update this Privacy Policy periodically. When we do, the “Last updated” date at the top of this page will be revised. Continued use of the Platform after any changes constitutes your acceptance of the revised Policy. For material changes, we will notify you via registered email or SMS.

RBUY Marketing Private Limited

CIN: U51909TN2018PTC123874 · PAN: AAJCR0650F · GST: 33AAJCR0650F1ZP · TAN: MRIR02476F · UAN: TN32D0015605

2/716-8 VOC Nagar, Soolakkaraimedu, Tamil Nadu — 626003, India · support@roopayshoppe.com · 0091-9952411895