Legal
Last updated: 29 September 2026
1. What we collect
Account data (name, email, profile photo) from Clerk. Product listings, reviews, and messages you create. Payment metadata from Razorpay (we never store your full card number). Usage data (IP address, device, pages viewed) for analytics and abuse prevention. Optional voice recordings you submit to our AI tools — these are sent to Google Speech-to-Text and are not retained after transcription.
2. How we use it
To provide and improve the marketplace, process payments, prevent fraud, comply with law, and respond to your requests. AI features use your content as input to Google Gemini; do not include sensitive personal data in AI prompts.
3. AI & Third-Party Services
We use Google Gemini, Cloud Vision, and Speech-to-Text for AI features. Each request to these services includes only the minimum data needed (e.g. an image you uploaded). Stripe/Razorpay process payments under their own privacy terms. Sentry collects error and performance data to help us debug issues.
4. Cookies
We use essential cookies for authentication (Clerk session) and optional analytics. You can disable non-essential cookies from the cookie banner.
5. Your rights
You can access, correct, or delete your personal data from your account settings. To exercise rights that are not self-serve (e.g. data export), contact [email protected]. We respond within 30 days.
6. Data retention
Account data is retained while your account is active. We delete Firestore user data within 30 days of account closure. Order records are retained for 7 years for tax-compliance purposes.
7. Security
All traffic is encrypted in transit (TLS 1.2+). Storage rules restrict reads and writes by role. We perform regular access reviews and monitor for unusual activity. No system is perfectly secure; please use a strong unique password and enable two-factor authentication on your Clerk account.
8. Children
Viraasat is not directed to children under 18. We do not knowingly collect data from children.
9. International transfers
Some of our service providers (Google, Sentry, Razorpay) may process data outside India. We rely on the standard contractual clauses and the providers’ published safeguards.
10. Changes to this policy
We will notify you by email at least 14 days before any material change takes effect.
11. Contact
Data Protection queries: [email protected].