Privacy policy

Creators use Navmanch to run a store. For creators, we decide how their account data is used.

Buyers, subscribers and students interact with a creator's store. The creator decides what to sell and whom to contact; we process buyer data on the creator's behalf to run checkout, delivery, bookings, courses and messages.

Creators: name, email, phone number, store details, payout details sent to our payment partner for KYC (PAN, bank or UPI; we keep only masked values), billing details and GSTIN for tax invoices, and connected-account tokens (Google Calendar, Instagram), which we store encrypted.

Buyers: name, email, phone number, order and payment status (never full card or UPI details, which go directly to Cashfree), answers to checkout questions, booking times, course progress, and email/WhatsApp consent with its timestamp.

Storefront analytics: pages viewed, clicks, the referring site, campaign (UTM) tags, device type and approximate city. We use no third-party cookies. A random visitor ID is kept in your browser's local storage; with Do Not Track or Global Privacy Control on, none is created. IP addresses are deleted within 24 hours.

To provide the service: accounts, storefronts, checkout, delivering what you bought, bookings, courses, memberships, and messages you asked for.

To bill creators and issue GST tax invoices, as the law requires.

To keep the platform secure: preventing fraud and abuse, rate limiting, and keeping audit logs.

Marketing emails and WhatsApp messages from a creator go only to people who opted in, and every email has a one-click unsubscribe.

Service providers who process data for us: Cashfree Payments (payments, payouts and subscriptions), Amazon Web Services (email delivery), Meta (WhatsApp messages and, if a creator connects it, Instagram messaging), Google (Calendar, if connected), Bunny.net (course video) and our cloud hosting and storage providers.

The creator whose store you used receives your order, booking or subscriber details.

Authorities, where the law requires it. We do not sell personal data.

Account and order records are kept while the account is active and afterwards as long as tax and accounting laws require (generally 8 years for invoices).

Raw analytics events are kept for about two years; daily summaries hold no personal data.

Disconnecting Instagram or Google deletes the stored tokens.

You can ask to access, correct or erase your personal data, withdraw consent, or nominate someone to act for you. Write to support@navmanch.in. Buyers can also contact the creator directly.

Unsubscribe links and the WhatsApp STOP reply take effect immediately.

Data is encrypted in transit (HTTPS). Third-party tokens are encrypted at rest. Paid files are delivered through signed, expiring links, and staff access is limited.

Grievance Officer, Navantro Technologies Private Limited, Registered office address: to be published. Email: grievance@navmanch.in. We acknowledge complaints within 24 hours and resolve them within 15 days.