1. Information we collect

We collect information you provide directly, information generated by your use of the Platform, and limited information from third parties involved in delivering the service (such as our payment and SMS-verification partners).

Account information: name, mobile number, email address, and — for Vendors — business name, trade category, service areas, and KYC documents (identity proof, business registration, address proof).
Transaction information: enquiries, quotes, accepted scopes, milestone submissions and approvals, payment amounts, and payout details processed through Razorpay.
Project content: photographs, notes, and documents uploaded to enquiries, quotes, or milestones (e.g. before/after photos, material samples, floor plans).
Device and usage information: app version, device type, IP address, general location (city-level, used for search relevance), and interaction logs (pages viewed, searches, taps) collected via standard analytics.
Communications: messages sent through in-app chat or enquiry threads, and correspondence with our support team.

2. How we use your information

We use personal data to:

Create and secure your account, and verify your identity via OTP and (for Vendors) KYC checks;
Match Customer enquiries to relevant, verified Vendors in the same city and match search results to your selected city;
Process milestone payments and payouts through Razorpay and our banking partners, and maintain records required for financial and tax compliance;
Provide customer support, investigate flagged milestones or disputes, and enforce our Terms & Conditions;
Send transactional notifications (OTPs, enquiry updates, payment confirmations, milestone reminders) via SMS, push notification, or email;
With your consent or where permitted by law, send service updates, offers, or requests for reviews;
Improve the Platform through aggregated, de-identified analytics on how features are used;
Detect and prevent fraud, abuse, and violations of our Terms.

3. Legal basis for processing

We process personal data where necessary to perform the contract formed when you register on the Platform or accept/submit a quote, to comply with our legal obligations (including under the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023), for our legitimate interests in operating and securing the Platform, and, where applicable, on the basis of your consent.

4. Who we share information with

We share personal data only as needed to operate the Platform:

Between Customers and Vendors: when an enquiry is sent or a quote is accepted, relevant contact and project details are shared between the specific Customer and Vendor involved, so the service can be delivered.
Payment processing: transaction and limited KYC data is shared with Razorpay and partner banks solely to process payments, holds, and payouts.
SMS/OTP and notification providers: your mobile number is shared with our SMS gateway partner (2Factor) solely to deliver OTPs, and with push-notification infrastructure (e.g. Firebase) to deliver in-app alerts.
Service providers: cloud hosting (Vercel, AWS), and analytics providers who process data under contract and only for the purposes we specify.
Legal and safety: where required to comply with a legal obligation, enforce our Terms, or protect the rights, property, or safety of Vayil, our users, or the public.
Business transfers: if Vayil is involved in a merger, acquisition, or asset sale, personal data may be transferred as part of that transaction, subject to equivalent privacy protections.

5. Data retention

We retain account and transaction data for as long as your account is active and for a reasonable period afterward to comply with financial record-keeping and tax obligations (typically up to 8 years for transaction records, in line with Indian statutory requirements), resolve disputes, and enforce our agreements. KYC documents are retained per applicable regulatory retention requirements. You may request earlier deletion subject to Section 8 below.

6. Data security

We use industry-standard safeguards to protect personal data, including encrypted transport (HTTPS/TLS), access controls limiting who within Vayil can view sensitive data, and secure processing of payment data through PCI-DSS-compliant partners (Razorpay never shares full card details with Vayil). No system is completely secure, and we encourage you to use a strong, unique password and keep your device secure.

7. Sensitive fields we deliberately do not retain

As a matter of policy, certain response fields containing highly sensitive personal identifiers are stripped from our systems rather than stored — this includes full payment card numbers and CVV (handled entirely by Razorpay, never transmitted to or stored by Vayil) and full bank account numbers beyond what is required for payout reconciliation.

8. Your rights

Subject to applicable law, you may:

Access the personal data we hold about you through your account profile, or by writing to us;
Correct inaccurate profile information directly in-app, or by contacting support;
Request deletion of your account and associated personal data, subject to our right to retain transaction and tax records as required by law;
Withdraw consent for optional communications (marketing messages) at any time via in-app settings or by replying STOP;
Lodge a complaint with our Grievance Officer (Section 11) if you believe your data has been mishandled.

9. Location and city data

We use city-level location (either your selected city or coarse IP-based location) to show relevant vendors and filter search results. We do not track precise GPS location in the background; any precise location request (e.g. for a service address) is used only for that specific booking and is visible to the matched Vendor.

10. Children's privacy

The Platform is not directed at, and we do not knowingly collect personal data from, individuals under the age of 18.

11. Grievance Officer

In accordance with the Information Technology Act, 2000 and rules made thereunder, the Grievance Officer for Vayil can be contacted at info@vayil.in or by post at Vayil Technologies Pvt. Ltd., 474, Cross Cut Road, Coimbatore, Tamil Nadu 641012, India. We aim to acknowledge grievances within 24 hours and resolve them within 15 days.

12. Changes to this Policy

We may update this Privacy Policy periodically. Material changes will be notified in-app or via the contact details on your account before they take effect.