Skip to content
MerchantVoiceBack
Last updated: October 2026

Privacy Policy

Clear, transparent terms governing the MerchantVoice audio soundbox, digital udhaar bookkeeping, and privacy practices.

1. Information We Collect

  • Store & Profile Data: Shop name, owner name, business category, registered email, mobile number (optional), and UPI VPA ID.
  • Payment Data: Amount, paying app, time and direction (received or sent) of each payment, read from payment notifications. Payer names and transaction reference numbers (UTR) stay on your phone; our servers keep only a one-way hash of the reference to avoid duplicates, and never the notification text.
  • Khata (Udhaar) Data: Names and mobile numbers of customers you add to your khata book, and the amounts you record for them.
  • Device Metadata: Device model, operating system version, app version, and push notification tokens.

2. Zero Sensitive Financial Data Retention

MerchantVoice never collects, asks for, or stores sensitive financial credentials:

  • No UPI PINs or MPINs are ever requested or stored.
  • No debit/credit card CVV or expiry dates are retained.
  • No internet banking login passwords or OTPs are captured.

3. Purpose of Processing

  • To speak aloud real-time payment confirmation alerts when a customer pays at your counter.
  • To maintain your daily sales records and customer udhaar khata book.
  • To restore your store data when you sign in from a new smartphone or backup device.
  • To keep your account secure (sign-in codes, fraud and abuse prevention) and to run subscriptions you buy.

4. Notification Access Permission

On Android, the Application utilizes standard Android Notification Listener service. This permission is used solely to filter alerts originating from verified banking, UPI, and SMS messaging packages. Personal chats, social media messages, and unrelated notifications are strictly ignored and discarded on-device. From a payment notification only the parsed details are kept; its text is not stored.

5. Security & Encryption

  • All communication between the app and our servers is encrypted with TLS (HTTPS only).
  • Passwords and sign-in codes are stored only as one-way hashes. Khata customer names and phone numbers are stored encrypted (AES-256).
  • Sign-in tokens on your phone are kept in Android's hardware-backed Keystore. Admin access to our systems needs two-factor sign-in, and every admin action is logged.
  • Server backups are encrypted in transit and access to them is restricted.

6. How Long We Keep Data

  • Account, store, payment and khata records: while your account is open. They are erased when your deletion request is completed (within 30 days of the request).
  • Sign-in codes: deleted 1 day after they are created. Signed-out sessions: deleted within 7 days; expired ones straight away.
  • Security audit records (admin actions, sign-in lockouts; no payment details): 1 year.
  • Server backups: rolling copies kept for 14 days, so erased data leaves the backups within 14 days of erasure.
  • On your phone: payment history and khata stay on the device until you clear them, sign out, or uninstall the app.

7. Who Processes Data for Us

We do not sell personal data. These service providers process it only to run MerchantVoice, under contract:

  • DigitalOcean: server hosting and database.
  • Resend: sending sign-in codes and account emails.
  • Razorpay: subscription payments (card and UPI details go to Razorpay, never to us).
  • Expo and Google Firebase: delivering push notifications to your phone.
  • Google Analytics: anonymous visit statistics on this website only (never in the app or admin console).

8. Your Rights

Under India's Digital Personal Data Protection Act, 2023 you can:

  • Access a summary of your personal data and how it is used. Your full payment ledger can be exported anytime as CSV.
  • Correct or update your details in the app's Settings, or ask us to.
  • Erase your data by deleting your account (see below).
  • Withdraw consent at any time, for example by turning off notification access or deleting your account.
  • Nominate a person to exercise these rights for you in case of death or incapacity.
  • Raise a grievance with our Grievance Officer, and then with the Data Protection Board of India.

Customers in your khata book can contact us the same way to access, correct or erase what is recorded about them.

9. Data Portability & Deletion

You retain full ownership of your store ledger. You can export your full transaction ledger anytime via CSV format. When you request account deletion in Settings, your account is closed and signed out immediately. After a review by our team, all store records, customer entries, and credentials are permanently purged from database systems. Until then you can ask us to restore the account.

Delete your account without the app: email hello@merchantvoice.in from your registered email address with the subject "Delete my MerchantVoice account". We delete your merchant profile, payment history, khata records and devices within 30 days and confirm by email. See merchantvoice.in/delete-account for the full steps.

10. Data Breaches

If a personal data breach could affect you, we will tell you without delay: what happened, what data was involved, what we are doing about it and what you can do. We will also report it to the Data Protection Board of India as the DPDP Act requires.

11. Grievance Officer & Contact

For privacy questions, requests to use your rights, or complaints, write to our Grievance Officer at hello@merchantvoice.in or use the In-App Feedback option in Settings. We confirm receipt within 7 days and resolve every grievance within 90 days at most, as the DPDP Rules require. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.