Privacy Policy
Last Updated & Effective Date: September 20, 2026
At Aplcart, we uphold sovereign data privacy, zero unauthorized third-party sharing, and bank-grade encryption to safeguard your retail, billing, and accounting operations.
256-Bit SSL & TLS Encryption
All transactional records, customer khata entries, and GST bills are encrypted both in transit and at rest.
Sovereign Data Storage
Hosted on secure cloud infrastructure located within India, adhering strictly to DPDP Act 2023 regulations.
Zero Third-Party Monetization
Your store sales, product pricing, and customer contacts are 100% yours. We never sell or monetize your data.
1. Overview & Scope
This Privacy Policy outlines how Aplcart ("we", "our", "us", or "Company") collects, processes, stores, and safeguards personal and commercial data when you access our website (aplcart.com), cloud ERP platform, POS billing terminals, and enterprise services.
By accessing or subscribing to Aplcart, you consent to the practices described in this Privacy Policy in compliance with the Information Technology Act, 2000, and the Digital Personal Data Protection Act (DPDP Act, 2023).
2. Information We Collect
- Merchant Profile & Contact Details: Name, registered business name, email address, mobile phone number, GSTIN, and business address provided during onboarding or demo booking.
- Store & Inventory Data: Product catalog, SKU codes, pricing, stock levels, warehouse locations, and purchase order records entered into your ERP account.
- Billing & Tax Invoices: Transaction numbers, payment modes (Cash, UPI, Card), and GST breakdown generated through POS terminals.
- Technical & Log Data: IP addresses, browser types, device identifiers, and system diagnostic logs used to optimize uptime and prevent unauthorized intrusions.
3. Purpose of Data Processing
We process collected data exclusively for statutory and operational purposes:
- Providing seamless Cloud POS billing, multi-store sync, and automated GST reporting.
- Powering AI Saathi real-time store analytics and inventory restocking alerts.
- Delivering transaction SMS, WhatsApp e-invoices, and critical security alerts.
- Providing proactive technical support, remote troubleshooting, and data backup services.
- Complying with statutory obligations mandated by Indian tax authorities and regulatory bodies.
4. Data Security & Retention
We employ defense-in-depth security architecture including automated nightly encrypted backups, role-based access control (RBAC), and isolated database tenant architecture. Data is stored on ISO 27001 certified cloud infrastructure in Tier-4 Indian data centers.
Your data is retained as long as your account remains active. Upon service termination, you can export your complete ledger and inventory records, after which data is purged following statutory retention windows.
5. Third-Party Service Integrations
Aplcart integrates with trusted enterprise partners strictly to facilitate services you opt-in to use:
- Payment Gateways & UPI: Razorpay, PayU, and Pine Labs for payment processing (we never store raw card numbers or CVVs).
- Statutory GST APIs: Certified GSPs (GST Suvidha Providers) for direct E-Way bill and E-Invoice generation.
- Communication APIs: Meta WhatsApp Cloud API and TRAI-compliant SMS gateways for automated billing notifications.
6. Contact Our Data Protection Officer (DPO)
For questions regarding this policy, data correction requests, or grievances under the DPDP Act, contact our dedicated compliance desk: