Privacy Policy

This Privacy Policy explains how NarneTech Software Solutions ("NarneTech", "we", "us", "our") collects, uses, shares and protects your personal data when you visit narnetech.shop, sign up for a store, or use our platform. We are committed to processing your personal data in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the rules made under it, as applicable in India.

In the language of the DPDP Act, you are the Data Principal and, for the data described in this policy, NarneTech is the Data Fiduciary.

1. Who we are & how to reach us

NarneTech Software Solutions, Vijayawada, Andhra Pradesh, India. You can contact us about this policy or your personal data at any time:

• Email: [email protected]
• WhatsApp: +91 88852 58951
• Grievance Officer: see section 9 and our Grievance Redressal page.

2. The personal data we collect

We collect only what we need to provide and improve the service:

• Account & store details — your name, business/store name, email address, phone number, chosen subdomain and, where you provide it, GSTIN and business address.
• Verification data — one-time passwords (OTPs) sent to verify your phone or email during signup.
• Billing data — subscription plan, payment status and invoice records. Card and bank details are handled by our payment partner (Razorpay); we do not store full card numbers.
• Content you upload — product information, images, categories and store settings.
• Support communications — messages you send us by email, WhatsApp or live chat.
• Technical & usage data — IP address, device/browser type, pages visited and cookies. See our Cookie Policy.

3. Why we process your data & our legal basis

Under the DPDP Act we process personal data on the basis of your consent or for certain legitimate uses permitted by the Act. We use your data to:

• Create and operate your account and storefront, and verify your identity.
• Process subscription payments, issue invoices and manage billing.
• Provide customer support and respond to your requests.
• Send service and transactional messages (e.g. order alerts, renewal reminders) by email and WhatsApp.
• Keep the platform secure, prevent fraud and abuse, and comply with legal obligations (including GST/tax records).
• With your consent, understand usage and send you product updates or marketing.

We ask for your consent through a clear affirmative action (for example, ticking a box or submitting the signup form after reading this notice). Your consent is limited to the purposes described here, and we will not process your data for anything incompatible without asking you again.

4. Who we share your data with

We do not sell your personal data. We share it only with trusted service providers ("Data Processors") who help us run the platform, under contracts that require them to protect it and use it only for us:

• Razorpay — payment processing for subscriptions.
• WhatsApp Business / email (SMTP) providers — sending notifications.
• Google Analytics and Tawk.to live chat — analytics and support (only with your consent for non-essential cookies).
• Hosting & infrastructure providers used to run and back up the platform.

We may also disclose data where required by law, a court, or a lawful government request, or to protect our rights, users and the public.

5. How long we keep your data

We keep your personal data only for as long as your account is active and as needed for the purposes above. After you cancel, we retain your store data for 30 days so you can export or reactivate it, after which it is deleted or anonymised — except records we are required to keep for legal, tax or accounting reasons (for example, GST invoices). When the purpose is served and no law requires retention, we erase your personal data.

6. How we protect your data

We use reasonable security safeguards, including encryption of sensitive credentials (AES-256), HTTPS/TLS in transit, access controls, tenant data isolation, activity logging and regular backups. No system is perfectly secure, but in the event of a personal data breach we will notify the Data Protection Board of India and affected Data Principals as required by the DPDP Act.

7. Your rights as a Data Principal

Under the DPDP Act, you have the right to:

• Access — get a summary of the personal data we hold about you and how we process it.
• Correction & erasure — ask us to correct, complete, update or delete your personal data.
• Withdraw consent — withdraw your consent at any time, as easily as you gave it. This does not affect processing already done, and some services may no longer be available.
• Grievance redressal — raise a complaint with us and receive a response (see section 9).
• Nominate — nominate another person to exercise your rights in case of death or incapacity.

To exercise any right, email [email protected]. We may need to verify your identity before acting on a request. You are responsible for providing accurate information and not impersonating others when making a request.

8. Children's data

Our platform is intended for businesses and adults. We do not knowingly process the personal data of children (under 18) without verifiable consent of a parent or lawful guardian, and we do not carry out tracking, behavioural monitoring or targeted advertising directed at children. If you believe a child has given us data without such consent, please contact us and we will delete it.

9. Grievance redressal & the Data Protection Board

If you have any concern about how we handle your personal data, please contact our Grievance Officer:

• Grievance Officer, NarneTech Software Solutions, Vijayawada, Andhra Pradesh, India.
• Email: [email protected] (subject line: "DPDP Grievance").

We will acknowledge and respond within the timelines prescribed under the DPDP Act. If you are not satisfied with our response, you may raise the matter with the Data Protection Board of India. See our Grievance Redressal page for the full process.

10. Data transfers

Your data is primarily stored and processed in India. Where a service provider processes data outside India, we do so only to the extent permitted by the DPDP Act and applicable rules, and we take steps to ensure it remains protected.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with a revised "last updated" date, and where required we will seek your consent again.

12. Contact

Questions about this policy? Email [email protected] or message us on WhatsApp at +91 88852 58951. See also our Terms & Conditions and Cookie Policy.