Privacy Policy

Archis Prodyogiki LLP ("Company", "We", "Us", "Our") operates the Auralis platform ("Platform"), a multi-vendor Progressive Web Application for QR-code–based ordering and hospitality services. This Privacy Policy explains how we collect, use, store, protect, and share your personal data when you use our Platform—whether as a Vendor (business partner), Vendor Staff, or End Customer (person placing orders). We are committed to protecting your privacy and complying with applicable data protection laws, including the Digital Personal Data Protection Act, 2023 (DPDP Act) of India and, where applicable, the General Data Protection Regulation (GDPR) of the European Union. By using the Platform, you consent to the practices described in this Policy. If you do not agree, please do not use the Platform.

We collect different types of data depending on your role: Vendor (Business Owner) Data: Vendor Staff Data: End Customer Data (collected at time of ordering): Automatically Collected Data:

We process your personal data for the following purposes:

We process personal data under the following legal bases: For end customers: ordering is voluntary, and providing personal data (name, phone, email) is optional. Order processing can proceed with minimal or no personal data.

We retain personal data only as long as necessary for the purposes stated above, or as required by law:

Data Type	Retention Period	Reason
Vendor account data	Duration of subscription + 30 days grace	Service delivery
Order records (financial)	8 years minimum	GST / tax compliance (Income Tax Act)
Customer PII in orders	2 years, then anonymized	Business analytics; PII scrubbed after retention
Activity / access logs	1 year	Security auditing
OTP verification records	90 days	Fraud prevention
SMS gateway logs	90 days	Delivery verification
Payment transaction records	8 years	Financial compliance
IP addresses in logs	90 days, then anonymized	Security; anonymized after retention

After the retention period, personal data is either securely deleted or anonymized so that it can no longer identify you. Financial amounts and aggregated statistics may be retained indefinitely for business analytics.

Under the DPDP Act 2023 and GDPR (where applicable), you have the following rights: To exercise any of these rights, email us at pwa@archisp.com or use the self-service options in your vendor dashboard.

We share personal data only in the following limited circumstances: We do NOT:

The Platform uses the following browser storage mechanisms: We do NOT use:

We implement robust security measures to protect your data: While we take data security seriously, no method of electronic storage or transmission is 100% secure. In the event of a data breach, we will notify affected individuals and relevant authorities as required by law within 72 hours.

Your data is primarily stored and processed in India (AWS ap-south-1 region, Mumbai). We do not transfer personal data outside India except: Any cross-border transfer is subject to adequate safeguards as required by the DPDP Act 2023 and relevant notifications by the Indian government.

The Platform is designed for use by businesses and their adult customers. We do not knowingly collect personal data from anyone under the age of 18. Vendor accounts require the registrant to be at least 18 years old and legally authorized to represent a business. If you believe we have inadvertently collected data from a minor, please contact us immediately at pwa@archisp.com and we will promptly delete such data.

In compliance with the Digital Personal Data Protection Act, 2023, we have designated a Grievance Officer: Grievance Officer / Data Protection Officer Company: Archis Prodyogiki LLP Email: pwa@archisp.com Phone: +91-9990331965 The Grievance Officer will: If you are not satisfied with the resolution, you may file a complaint with the Data Protection Board of India as established under the DPDP Act 2023.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. Material changes will be: Continued use of the Platform after changes take effect constitutes acceptance of the updated Policy. We encourage you to review this page periodically.

For any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: Archis Prodyogiki LLP Email: pwa@archisp.com Phone: +91-9990331965 Address: New Delhi, India For data subject requests (access, correction, deletion, portability), please email pwa@archisp.com with the subject line "Data Subject Request" and include your registered email address for verification.