Privacy policy

Who we are

Vemgram is a directory of Indian manufacturers run by Vempus Technologies Private Limited ("we", "us"), Koraput, Odisha, India. We decide why and how the personal data described here is used, so we are its data fiduciary under the Digital Personal Data Protection Act, 2023.

What we collect

• Business listings. The name, category, city, state, phone number, website and short description of businesses. We take these from public sources, such as a business's own website, signboards, trade fairs and public registers, and we record the source for every listing. Some businesses are run by one person, so these details can be personal data.
• Your account. If you sign up: your name, email address and password (stored only as a secure hash). If you sign in with Google, we receive your name, email address and profile picture from Google.
• Claims. If you claim a business: the work email you verify with, or the document you upload to prove ownership. Documents are kept in private storage that only our reviewers can open.
• Inquiries and requests for quotes. Messages between buyers and businesses, and who sent them. A request for quotes is one message that we send, as an inquiry, to each manufacturer you choose and to others we find for you, up to 5 in all.
• What you write before you log in. If you fill in an inquiry or a request for quotes without being logged in, we keep what you wrote for 24 hours so the form is still filled in when you come back from logging in. Nothing is sent until you press Send yourself. In the Android app this is kept on your phone.
• Payments. For paid pages, our payment partner handles your card, UPI or bank details. We receive only the payment's status, amount and dates. If you buy a plan in the Android app, Google Play handles the payment and sends us the order number, dates and status.
• The Android app. When you sign up, claim a business or add one in the app, it asks Google Play Integrity to confirm it's the genuine app on a real device. We check the answer and don't keep it. If you allow notifications in the Android app, we keep a notification token for your phone so we can tell you about new inquiries and replies. It's deleted when you log out.
• Usage. Counts of page views, website clicks and phone reveals per business, and the pages you saved. We also use Google Analytics to see how visitors use our public pages (see Cookies below). We don't use advertising trackers.

Why we use it

• To show businesses to buyers who are looking for them.
• To let you sign in, save businesses and send or answer inquiries.
• To check that the person claiming a business really runs it.
• To run paid pages: billing, renewal reminders and invoices.
• To keep Vemgram safe: limiting abuse, such as too many phone reveals or inquiries in a day.
• To answer your requests and complaints.

Who sees it

• Everyone: the public parts of a listing. Phone numbers and emails are shown in full only to signed-in visitors, one business at a time.
• The business you write to: your name, your message and the product and quantity you ask about when you send an inquiry. Your email address isn't shared with them. With a request for quotes, each manufacturer gets the same and doesn't see which other manufacturers you asked.
• Our staff: what they need to review claims, inquiries and complaints, and to send a request for quotes to manufacturers for you.
• Service providers who work for us, under contract: hosting and bot checks on our forms (Cloudflare, including Turnstile), email delivery, our payment partner, Google sign-in, Google Analytics, Google Play and Firebase Cloud Messaging (for the Android app's payments, checks and notifications), and error reporting (Sentry, which receives technical details of a failed request but not your form entries).
• Authorities, when Indian law requires it.

We don't sell personal data.

How long we keep it

• Listings: while they are on Vemgram, and up to 90 days after removal, so mistakes can be undone.
• Accounts: until you delete yours. When you do, you are signed out everywhere, your name is taken off your messages, and your password, saved businesses, reviews and phone notifications are removed straight away. Your email address, claim documents and message text are kept privately for 180 days after deletion, as Indian law requires of platforms like ours, and then erased.
• Claim documents: up to 180 days after the claim is decided.
• What you wrote before logging in: 24 hours if you don't come back to send it, then it is erased.
• Inquiries held for a business that hasn't joined: 60 days.
• Removal and correction requests: 180 days after we decide them.
• Messages sent through our contact form: 365 days.
• Search words, counted without saying who searched: 180 days.
• Payment records: as long as tax law requires (currently 8 years).

Your rights

You can ask us to:

• tell you what personal data we hold about you and how we use it;
• correct or complete it;
• remove it, including a listing about your business (you can delete your account yourself from your account page);
• name someone to act for you if you can't.

Use the removal and correction form for listings, or write to our grievance officer for anything else. We reply within 7 days and act within 15 days. A formal complaint about personal data can take up to 90 days, as the grievance page explains.

Cookies

We use one cookie to keep you signed in. Our public pages also load Google Analytics, which sets cookies to count visits and see which pages are used; Google processes this data for us. It is switched off on your dashboard, account, inbox and password pages, so nothing about them is sent to Google. You can block these cookies in your browser settings, or install Google's opt-out add-on (tools.google.com/dlpage/gaoptout). We don't use advertising cookies.

Security

Passwords are hashed, connections are encrypted, and claim documents are kept in private storage. No system is perfectly secure; if a breach affects you, we will tell you and the Data Protection Board as the law requires.

Children

Vemgram is for businesses and is not meant for anyone under 18.

Complaints

Write to our grievance officer, Bikash Kampo, at legal@vemgram.com. See the grievance page for how complaints are handled. If you are not satisfied, you can complain to the Data Protection Board of India.

Changes

If we change this policy, we will update the date at the top of this page. For important changes, we will also tell signed-in users by email.