1. Introduction

OVVEE ("we", "us", "our", "the Platform") is operated by Credmint Innovation Private Limited (CIN: U62011MP2025PTC078731, GSTIN: 23AANCC0644G1ZX), a company incorporated under the Companies Act, 2013, with its registered office in Indore, Madhya Pradesh, India. OVVEE is a multi-business SaaS platform that enables merchants to create and operate online businesses across four business types: Ecommerce (including Fashion, Electronics, Beauty, Grocery, Jewellery, Sports, Home & Living, and Books & Stationery), Restaurant & Food (including Café, Fine Dining, Casual Dining, Cloud Kitchen, Bar & Brewery, Bakery, Street Food, Food Truck, and Juice Bar), Services (including Salon & Spa, Clinic & Healthcare, CA & Accounting, Legal Services, Education & Tutoring, Fitness & Gym, Photography, Travel Agency, Real Estate, Event Management, Cleaning Services, Home Repair, and Consulting), and Informational Websites (including Agency, Portfolio, NGO, Studio, Blog, Community, Real Estate Info, Government, and Nonprofit).

This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the OVVEE platform as a merchant or as an end customer of a merchant's store.

2. Information We Collect

Account Information: Name, email address, mobile number, and password when you register as a merchant.

Business Information: Business name, address, GSTIN, PAN, bank account details, and business category (as applicable to your business type and category).

Transaction Data: Order records, payment confirmations, booking details, appointment records, and invoice data generated through the platform.

Customer Data (for Merchant Stores): End-customer names, contact details, delivery addresses, and purchase/booking history — collected by the platform on behalf of merchants.

Usage Data: IP address, browser type, device information, pages visited, session duration, and platform interactions.

Communications: Messages sent to OVVEE support, grievance submissions, and feedback.

3. How We Use Your Information

To create and maintain your merchant account and business store

To process payments, manage orders, bookings, appointments, and delivery logistics

To send transactional notifications (email, SMS, WhatsApp) related to your account and store activity

To generate analytics, reports, and business insights within the admin dashboard

To improve the platform and develop new features across all business types

To comply with applicable laws including the Income Tax Act, GST Act, and IT Act

To prevent fraud, abuse, and ensure platform security

4. Data Sharing

We do not sell your personal data. We may share data with:

Payment Processors: Razorpay, Stripe — for transaction processing

Shipping & Logistics Partners: Shiprocket, Delhivery, BlueDart, Ekart — for ecommerce order fulfilment (applicable to Ecommerce business type)

Analytics Providers: Google Analytics — for platform usage analysis (anonymised)

Infrastructure Providers: Amazon Web Services — for secure data hosting

Legal Authorities: When required by applicable Indian law, court order, or government directive

5. Data Retention

We retain merchant data for the duration the account is active. Upon account deletion, personal data is removed within 90 days, except where retention is required by law (e.g., GST/financial records required for 7 years under Indian law).

6. Your Rights

You have the right to access, correct, or request deletion of your personal data by contacting [email protected]. Requests are processed within 30 days.

7. Cookies

We use essential cookies (authentication, sessions) and functional cookies (preferences). See our Cookie Policy for details.

8. Security

We implement SSL/TLS encryption in transit, AES-256 encryption at rest, role-based access controls, and regular security audits per OWASP guidelines.

9. Sensitive Personal Data

Certain business categories on OVVEE may involve the collection of sensitive personal data ("SPD") as defined under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules").

For Service merchants operating in regulated categories (Clinic & Healthcare, Mental Health, CA & Accounting, Legal Services, etc.):

Health and medical information collected via appointment booking forms is considered sensitive personal data.

Financial information collected via enquiry or consultation forms is sensitive personal data.

Merchants are the Data Fiduciaries / Data Controllers for such data. OVVEE processes this data as a Data Processor / Consent Manager only.

Merchants operating clinics, hospitals, or healthcare services must obtain explicit patient consent before collecting any health data and must comply with applicable health data regulations.

OVVEE does not use health, financial, or legal consultation data for any purpose other than providing the platform service.

Merchants must not use OVVEE to store full patient medical records, prescription data, or clinical notes. OVVEE is an appointment and communication tool, not an Electronic Health Record (EHR) system.

10. Digital Personal Data Protection Act, 2023 (DPDP Act)

OVVEE is committed to compliance with the DPDP Act, 2023 and related rules as they come into force. In particular:

We collect only the minimum data necessary ("data minimisation") for the platform to function.

We obtain consent before processing personal data where required.

We provide mechanisms for data principals (merchants and end-customers) to access, correct, or erase their data.

We have appointed a Data Protection Officer responsible for data protection compliance (see Section 12 below).

11. Minors

The OVVEE platform is not directed at individuals under 18 years of age. Merchants must not collect data from minors without appropriate parental or guardian consent as required under the DPDP Act, 2023.

12. Data Protection Officer (DPO)

As required under the Digital Personal Data Protection Act, 2023, OVVEE has appointed a Data Protection Officer:

Name: Kumar Shanu

Designation: Data Protection Officer, Credmint Innovation Private Limited

Email: [email protected]

Phone: +91 83403 25876

Address: Credmint Innovation Private Limited, Indore, Madhya Pradesh – 452001, India

Working Hours: Monday to Friday, 10:00 AM – 6:00 PM IST

You may contact the DPO to exercise your rights under the DPDP Act, 2023 — including requests to access, correct, or erase your personal data.

13. Grievance Officer

Name: Kumar Shanu

Designation: Founder & Grievance Officer, Credmint Innovation Private Limited

Email: [email protected]

Phone: +91 83403 25876

See our Grievance Redressal Policy for the complete grievance process and escalation paths.

14. Contact

For privacy-related queries: [email protected]

For DPDP Act rights requests: [email protected] · +91 83403 25876

For grievances: [email protected] · +91 83403 25876

Credmint Innovation Private Limited, Indore, Madhya Pradesh – 452001, India.

Privacy Policy

All Policies

Company Details

Grievance Officer

Data Protection Officer