Security & privacy
Your shop's data is yours. We keep it safe, in India.
Every shop on VASAH has a database of its own, kept in India and backed up every night. Nobody from VASAH can look inside unless the owner opens support access — and it closes by itself.
Where your shop's data lives
Every shop- Region
- Microsoft Azure · Central India
- Database
- Your shop's own, with its own login
- Backups
- Every night, encrypted
- VASAH support access
- Closed until the owner opens it
- Sold, or used for advertising
- Never
The basics
How your shop's data is kept, in plain words.
Your own database and login
Your shop's data sits in a database of its own, opened by a login that cannot open any other shop's.
Kept in India
Databases, uploaded files and backups are kept on Microsoft Azure, in the Central India region.
Encrypted on the way
Your counter, your back office and your website talk to VASAH only over HTTPS.
Passwords nobody can read
Passwords are kept only as one-way hashes. Sessions end after 12 idle hours, and repeated wrong tries are slowed down.
Two-step sign-in
A code from an authenticator app after the password — at the back office and at the counter.
Staff roles and permissions
Seven roles, each with its own permissions, checked by the server. Cost and margins are hidden from the roles that do not need them.
Every change on the audit log
Who changed what, and when, is kept on a log that cannot be edited or deleted — not even by the owner.
A counter that locks
Ctrl+L locks the counter; each person unlocks it with their own PIN, and too many wrong PINs sign the counter out.
Backups
Backed up every night, and kept twice over.
Every night between 2 and 3 am your shop is backed up, encrypted with AES-256, with an extra copy at each month end; the last 30 nightly backups are kept. Separately, the database itself can be put back to any moment of the last 35 days.
- The owner can take a backup at any time and download it (Settings → Backups)
- Backup files are copied to a second Azure region in India
- Settings → Backups shows when the last backup was made
Support access
We look inside your shop only when you let us.
Our team cannot open your shop on its own. When you want help, the owner opens a sign-in for VASAH support from the back office — for 4, 24 or 72 hours. When the time runs out, it ends by itself.
- 01Closed, every dayNobody from VASAH can sign in to your shop.
- 02Open, when you chooseThe owner opens it from Settings → Plan & support, for 4, 24 or 72 hours.
- 03Closed again, by itselfIt ends when the time is up, or the moment you press End now. Every opening is on your audit log.
DPDP Act, 2023
Under India's data law, your shop stays in charge.
Under the Digital Personal Data Protection Act, 2023, your shop is the Data Fiduciary for your customers' details, and VASAH is your Data Processor.
- Your customers
Their details
Names, mobile numbers, bills and the addresses they give your shop.
- Your shop
Data Fiduciary
You decide why their details are kept and what they are used for.
- VASAH
Data Processor
We keep and process the data for your shop — never sold, never used for advertising.
What VASAH gives you for it
- Each customer's agreement to offers, kept with when and where it was given
- Customers ask for their data, or to be forgotten, from your website
- Export a customer's data, or erase it while the tax invoices stay
- A customer who has not shopped for three years is erased by itself — unless they still owe money or have an order open
Payments and leaving
Two more things owners ask us.
Card numbers never touch VASAH
When a customer pays online on your website, they pay through Razorpay. The card number goes to Razorpay — never to VASAH.
If you leave, your data leaves too
Export what you want to keep first. Once your account is closed, your shop's database and files are deleted within 30 days, keeping only what the law requires.
Found a security issue?
Tell us first.
Write to [email protected] with the steps to see it. Please give us time to fix it before you tell anyone else.
A question about your data? Ask us.
Write to us, or book a call — we answer in English, ગુજરાતી or हिन्दी.