1. Information We Collect

a) Personal Information

• Full name, date of birth, gender
• Mobile number and email address
• Residential / shipping address
• Sponsor details, nominee details and Member / Distributor ID

b) KYC & Financial Data

• Bank account details (account holder name, account number, IFSC, account type) for commission and payout transfers
• Identity and address documents such as PAN card, Aadhaar card and cancelled cheque / passbook images uploaded for KYC verification
• Payment transaction proofs (payment slips, UTR / reference numbers, screenshots) uploaded against orders and wallet deposits
• Order history, invoices, Business Volume (BV), wallet balances, earnings and payout records

c) Device & App Diagnostics

• IP address, browser type and operating system
• Device type and app identifiers (the app identifies itself to our server through its WebView user-agent)
• Session cookies and login tokens used to keep you signed in securely inside the app’s WebView and on the website
• Server logs of login activity, used for security and fraud prevention

We do not collect your contacts, call logs, SMS messages, precise location or any data unrelated to the services described here.

2. Device Permissions

Our Android app may request the following permissions only when you use the related feature:

• Camera: to capture photos of your KYC documents (PAN, Aadhaar, bank proof) and payment proof slips directly from the app.
• Storage / Photos & Media: to let you select already saved images or PDF files of KYC documents and payment proofs for upload, and to save downloaded invoices, ID cards and reports to your device.

These permissions are optional. Images are uploaded only when you choose a file and submit the form; we never access your camera or gallery in the background. You can revoke permissions at any time from your device settings.

3. How We Use Your Information

• Create and manage your customer, distributor or franchise account
• Verify your identity (KYC) as required for direct selling businesses in India
• Process orders, deliveries, invoices and payments
• Calculate Business Volume, commissions, incentives and pay payouts to your bank account
• Send OTPs, login credentials, order and payout notifications
• Detect and prevent fraud, misuse and unauthorized access
• Comply with legal, tax and regulatory obligations (including the Consumer Protection (Direct Selling) Rules, 2021)

4. Third-Party Services & Sharing

We do not sell or rent your personal data. We share limited data only with:

• SMS Gateway (Fast2SMS): your mobile number and message content are shared with Fast2SMS to deliver OTPs, login credentials and transactional notifications.
• Hosting Infrastructure: our website, app backend and database are hosted on secure servers provided by our hosting partner, accessed over encrypted HTTPS connections.
• Banks: bank details required to transfer commissions and payouts
• Logistics / courier partners: name, phone and address for order delivery
• Government and law enforcement authorities: when required by law

All third parties receive only the data necessary to perform their service.

5. Data Security

• All data is transmitted over encrypted HTTPS (TLS) connections
• Passwords are stored only as one-way cryptographic hashes; we can never see your password
• Database access uses parameterized queries and is restricted to authorized personnel
• Login sessions are bound to secure tokens and are invalidated on logout or suspicious activity
• KYC documents and payment proofs are accessible only to you and authorized administrators

While we follow industry-standard practices, no method of transmission or storage is 100% secure. Please keep your password and OTPs confidential.

6. Data Retention

• Account, profile and KYC data are retained while your account is active.
• When your account is deleted, personal and KYC data are permanently deleted or anonymized within 30 days of verification.
• Financial transaction records, invoices, tax data and payout audit logs are retained for up to 8 years as required under Indian tax and company laws (Income Tax Act, GST Act, Companies Act), after which they are deleted.
• Server and security logs are retained for up to 180 days.

7. Cookies

We use essential session cookies to keep you logged in, maintain your cart and protect forms against misuse. We do not use cookies for third-party advertising.

8. Your Rights & Account / Data Deletion

You have the right to:

• Access the personal data we hold about you
• Correct or update inaccurate data (from your dashboard or by contacting us)
• Withdraw consent for non-essential communication
• Request deletion of your account and associated personal data

You can request account and data deletion at any time, without logging in to the app, from our Account & Data Deletion Request page (https://vedahealthworld.com/delete-account), or by emailing care@vedahealthworld.com from your registered email address. Requests are verified and processed within 30 days. Records that we must keep by law are retained as described in Section 6.

9. Children’s Privacy

Our services are not intended for persons under 18 years of age. We do not knowingly collect personal data from minors.

10. Changes to This Policy

We may update this policy from time to time. The updated version will be posted on this page with a revised “Updated on” date.

11. Contact Us & Grievance Officer

For any privacy questions, data requests or complaints, please contact our Grievance Officer (as per the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023):

Grievance Officer — Vedahealth Marketing Private Limited

324/F G/F, Surandra Biva Abasan, Hridaypur, Barasat - I,

North 24 Parganas, Kolkata - 700127, West Bengal, India

Phone: +91 9147742985

Email: care@vedahealthworld.com

Working hours: Monday – Saturday, 10:00 AM – 6:00 PM IST. We respond to grievances within 15 days.