Privacy Policy

This Privacy Policy explains how Reachify Innovations Pvt. Ltd. (“Reachify”, “we”, “us”, or “our”) collects, uses, stores, and protects information when you explore our demo or purchase our CharvaX service at charvax.com. We are committed to handling your data responsibly and in accordance with applicable Indian law, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDP Act).

It covers two distinct relationships. For information about you as our client — the person or business buying and using CharvaX — we are the data fiduciary (sections 1–2). When we host your store, we also process data on your behalf — including your own customers’ data — as your data processor (section 3). Your live store additionally publishes its own shopper-facing privacy policy, which governs how your store collects data from your customers; this document is Reachify’s policy, not that one.

1. Information we collect

We collect only the information we need to deliver our service and communicate with you:

• Contact details — your name and the name of your business or brand.
• Communication details — your email address and WhatsApp / phone number, so we can send your confirmation, service agreement, and project updates.
• Business details — information you share about your store, products, and requirements (for example, your catalogue size, current platform, and customisation notes).
• Payment information — when you pay, your card / UPI / netbanking details are collected and processed directly by our payment processor, Razorpay. We do not see or store your full card number, CVV, or banking credentials; we receive only a payment confirmation and a payment reference ID.
• Usage data — basic, anonymised analytics about how the demo and website are used (such as pages visited), to help us improve the experience.

2. How we use your information

• Service delivery — to set up, configure, and deliver your store, and to collect the assets required to build it.
• Communication — to send confirmations, your service agreement, onboarding forms, and updates, and to respond to your questions over email or WhatsApp.
• Payment processing — to take your setup fee and, where applicable, your monthly subscription, and to issue receipts.
• Legal and security — to comply with our legal obligations, prevent fraud, and keep our service secure.

We do not sell your personal data to third parties, and we do not use it for third-party advertising.

3. Hosting your store — data we process for you

When we host and operate your store, we process data on your behalf — including your customers’ data (orders, contact details, addresses, and store activity). For this data you are the data fiduciary and Reachify is your data processor: we process it only to run and support your store, under the data-processing terms in your service agreement, and never for our own purposes. We do not sell it and we do not use it for third-party advertising.

How the AI crew uses data

Your store comes staffed with BarhaX and a crew of AI agents (plus the buyer-facing AI Store Companion). They act on your store’s data to do their work, but under a strict boundary that is enforced in code, not left to configuration: the AI receives a customer’s name and business signals (such as order history or segment) — nevertheir contact details, address, payment information, or identity documents. The underlying tools simply do not emit those fields, so even a misbehaving prompt cannot reveal them. We do not use your customers’ personal data to train external AI models, and personal identifiers are hashed before anything leaves our servers for measurement.

First-party analytics and ad measurement

Your store includes a first-party analytics engine that records store activity (such as page views, add-to-cart, and confirmed purchases) to power your own dashboards and the AI crew. Where youchoose to connect ad-measurement destinations (for example Meta, Google, or TikTok), your store sends them conversion signals with personal identifiers hashed (SHA-256) before they leave the server — configured and controlled by you, and gated on your shoppers’ consent. You decide which destinations are connected.

4. How your data is stored

Your lead and project information is stored on managed Supabase infrastructure (PostgreSQL), with access restricted to authorised Reachify personnel. Your store’s data is held in an isolated database provisioned for your store. Payment records are held by Razorpay under their own security standards, and our website and services are hosted on Vercel. Sensitive credentials you provide (such as gateway or logistics keys) are encrypted at rest. We retain your information only for as long as needed to deliver the service, meet our legal and accounting obligations, and resolve any disputes.

5. Third-party processors and sub-processors

We rely on a small number of trusted providers to run our service and your store. Each receives only the data necessary to perform its function on our behalf:

• Razorpay— payment processing. Your payment data is governed by Razorpay’s privacy policy.
• Resend — transactional email delivery (confirmations, onboarding, and store order emails).
• Vercel — website and application hosting.
• Supabase — secure database storage for your lead, project, and store records.
• AI model providers (such as Anthropic and Google) — power the AI crew and Companion. They receive only the limited signals described in section 3, and do not use that data to train their models.
• Logistics and messaging partners — couriers and, where enabled, WhatsApp/SMS providers, to ship orders and send order updates. Firebase is used to verify phone numbers by OTP.

We use sub-processors under written terms, and we do not add a third-party middleware layer into the path of your sensitive data. Ad-measurement destinations you connect (section 3) act on your instructions, not ours.

6. Cookies and tracking

On this website we use only essential and analytics cookies to keep the site working and to understand aggregate usage. Your live store uses first-party cookies for the storefront and the analytics described in section 3; non-essential tracking there is subject to your shoppers’ consent, and declining it suppresses those signals. We do not use advertising or cross-site tracking cookies on this marketing website. You can block or delete cookies in your browser settings; the demo and website will continue to work.

7. Your rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of any inaccurate or incomplete data.
• Request deletion of your data, subject to our legal and accounting retention obligations.
• Withdraw consent to non-essential processing at any time.

To exercise any of these rights, email us at info@reachifyinnovations.com and we will respond within a reasonable period.

If you are a customer of a store we host and want to exercise your rights over your data, please contact that store, which is the fiduciary for its customer data. As its processor, we support merchants in honouring access, correction, and deletion requests, including erasure that cascades to the systems we operate.

8. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above. Continued use of our service after an update constitutes acceptance of the revised policy.

9. Contact us

For any privacy question or request, contact Reachify Innovations Pvt. Ltd. at info@reachifyinnovations.com or on WhatsApp at +91 91285 47292. Reachify Innovations Pvt. Ltd. is based in Delhi, India.