Privacy policy
हम कौन सा डेटा रखते हैं, क्यों, किसके साथ बाँटते हैं, और आपके अधिकार।
Last updated: 30 September 2026
This policy explains how Dua Desk (a sole proprietorship of Ashish Dua) ("we") handles personal data for Dua Vyapar and the website retail.duadesk.com, in line with the Digital Personal Data Protection Act, 2023.
1. Whose data, and why
Shop owners and staff: name, WhatsApp number and sign-in records, to give you access and support.
A shop's own customers and suppliers (in its books): the shop decides what to record; we process it only on the shop's behalf to
provide the service.
Customers of an online market: name, phone, delivery address, orders, messages and ratings, to take, deliver and support orders and
to meet tax and consumer-protection duties. Marketing messages are sent only with consent, which can be withdrawn at any time.
Website visitors who book a demo: the details in the form, to contact you about the demo. Deleted after one year.
2. Who processes it for us
Hosting and database (Vercel and Supabase, servers in Mumbai); WhatsApp messages (Meta); payments (Cashfree Payments); and the AI that reads bills, photos and messages (Anthropic). The AI provider may process data outside India; it processes it only to return the result to us and under its commercial terms. We do not sell personal data, and we do not use shops' data to advertise to anyone.
3. Who can see a shop's books
Only the shop owner, the staff and chartered accountant the owner adds, and our support staff when needed to help. Other shops and the market's operator cannot see a shop's sales, margins or udhaar; the operator sees only what online orders need.
4. How long we keep it
Invoices and accounts are kept for 8 years, as tax law requires. Photos of bills and khata pages are deleted after one year once read. Demo requests are deleted after one year. When a shop leaves, its books are exported to it and then deleted, except records the law requires us to keep.
5. Security
Sign-in by one-time WhatsApp code; encrypted connections; nightly encrypted backups with restore tests; tamper-evident books; access logs with phone numbers masked.
6. Your rights
You may ask to see, correct or erase your data, withdraw consent, or nominate someone to act for you. Customers of an online market can do this from the market's privacy page. You may also complain to the Data Protection Board of India.
7. Contact
Grievance Officer: Ashish Dua, Proprietor and Grievance Officer
Email: ashish@ashishdua.in
Phone: +91 88600 36003
Address: D4A/2 DLF Phase 1, Gurgaon, Haryana 122002, India
We acknowledge every complaint within 48 hours and resolve it within one month of receiving it.