Privacy Policy

Last updated: 4 October 2026

This policy explains what personal data Pravia Digital ("Pravia", "we", "us") collects through https://www.pravia.digital and the storefronts hosted on it, why we collect it, and the choices you have. It is written with India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 in mind.

1. Who we are

Pravia Digital is operated by [Legal name of the operator] ([Type of entity and registration number, if any]), located at [Registered / postal address]. Pravia is a platform that lets local businesses publish a digital storefront and product catalogue. Pravia does not sell products and does not process payments between visitors and businesses.

2. Our role: businesses and visitors

There are two kinds of people whose data we handle:

  • Businesses who sign up and run a storefront. For their account and billing data, Pravia decides how the data is used.
  • Visitors who browse a storefront and may submit an enquiry, request a catalogue or unlock an offer. The details a visitor submits go to the business whose storefront they are on. That business decides how it contacts the visitor. Pravia stores and processes this data on the business's behalf so it can show it in the business's dashboard.

If you are a visitor and want to know how a particular business uses your details, contact that business directly. You can also contact us and we will help you reach them or act on your request.

3. Data we collect from businesses

  • Account details: your name, email address and password. Passwords are stored only in hashed form; we cannot see them.
  • Storefront details you choose to publish: business name, type, description, logo, banner and gallery images, phone and WhatsApp numbers, business email, address, city, state, PIN code, Google Maps link, social media links and opening hours. This information is shown publicly on your storefront.
  • Catalogue content: categories, products, descriptions, prices and images you upload.
  • Billing records: the plan you bought, billing period, amount, dates and the Razorpay order and payment reference numbers. Card, UPI and bank details are entered on Razorpay's checkout and are not received or stored by Pravia.
  • AI feature usage: the text you submit to AI writing tools and a log of the credits used.
  • Security data: failed login counts, used to temporarily lock an account after repeated wrong passwords.

4. Data we collect from storefront visitors

Information you submit

Only when you fill in a form on a storefront, we collect:

  • Unlock-offer popup: your name and mobile number, and a record of the consent you gave (the consent wording and the time you agreed).
  • Enquiry form: your name, phone number, and optionally your email, message and the product you asked about.
  • Catalogue request: your phone number and how you wanted to receive the catalogue.

With these submissions we also record your IP address, browser type (user agent) and the page you came from, to help prevent spam and abuse.

Information collected automatically

When you view a storefront, we record usage events so the business can see how its storefront is performing. These include page and product views, and clicks on the WhatsApp, call, directions and other links. Each event includes:

  • a random session identifier that is not linked to your name or phone number;
  • device type, browser and operating system, worked out from your browser's user agent;
  • location. Your browser may ask whether to share your location with the storefront. If you allow it, we record your device's coordinates and look up the matching city. If you decline, nothing changes on the page, and we instead estimate your country and, where possible, city from your IP address using an offline database. You can change this permission at any time in your browser settings;
  • a one-way hash of your IP address. The analytics records do not store the IP address itself;
  • how you arrived (for example Google, Instagram, WhatsApp, a QR code or a direct visit).

Businesses see this information in aggregated reports (for example, "120 views from mobile devices", or a map of visitor areas rounded to roughly 1 km), not as a profile of an individual visitor.

5. How we use data

  • To create and run accounts and publish storefronts.
  • To pass visitor enquiries, catalogue requests and offer sign-ups to the relevant business.
  • To show businesses analytics about their storefront.
  • To process subscription payments and keep billing records.
  • To provide AI writing features when a business asks for them.
  • To help public storefront pages appear in search engines.
  • To keep the service secure, prevent spam and abuse, and fix problems.
  • To respond to support requests and meet legal obligations.

We do not sell personal data. We do not show third-party advertising and do not use visitor data for advertising profiles.

Consent for contact. When you tick the consent box in an offer popup, you agree that the named business may contact you by call, SMS or WhatsApp about offers and enquiries. Pravia itself does not use these details to market to you. You can withdraw this consent at any time (see Your rights).

6. Who we share data with

We share data only as needed to run the service:

  • The business whose storefront you used receives the details you submit there.
  • The public: storefront details a business publishes are visible to anyone.
  • Razorpay processes subscription payments made by businesses.
  • Cloudinary stores and delivers images that businesses upload.
  • MongoDB Atlas hosts our database, and cloud hosting providers run our servers.
  • Google (Gemini API) receives the business information and text a business submits when it uses AI writing features or when we generate search descriptions for a storefront. Visitor data is not sent.
  • OpenStreetMap (Nominatim) receives the coordinates of visitors who allow location sharing, to look up the city name. No name, phone number or other identifier is sent with them.
  • Google Search Console receives the web addresses of published storefronts so they can be crawled. Only public page addresses are submitted.
  • Authorities, when we are required to by law, or to protect the rights, safety or property of users, the public or Pravia.

When you click a WhatsApp, call, map or social media link on a storefront, you leave Pravia and the other service's own privacy policy applies.

7. Cookies and browser storage

We do not use advertising or third-party tracking cookies, and we do not use Google Analytics. We use your browser's local and session storage for these functional purposes:

  • Sign-in (businesses): keeps you logged in to the dashboard.
  • Analytics session ID: a random ID kept in session storage, which is cleared when you close the tab.
  • Saved visitor details: after you submit the offer popup, your name and mobile number are saved in your own browser so you don't have to type them again on other storefronts. Use the "Not you?" option in the popup, or clear your browser's site data, to remove them.
  • Preferences: which offers you have unlocked, dismissed announcement bars and your preferred catalogue layout.
  • Performance: a temporary copy of storefront details to make pages load faster.

Clearing your browser's site data for https://www.pravia.digital removes all of the above.

8. How long we keep data

  • Business accounts and storefront content: while the account exists. After you ask us to delete your account, we delete or anonymise it, except for records we must keep by law.
  • Billing records: for as long as tax and accounting laws require.
  • Visitor submissions: until the business deletes them from its dashboard, or until you ask us to erase them.
  • Analytics events: while the business's account exists, to provide historical reports.

9. Security

We use encrypted connections (HTTPS), hashed passwords, access controls so each business can only see its own data, and rate limits against abuse. No system is completely secure. If we become aware of a personal data breach that affects you, we will notify you and the relevant authorities as the law requires.

10. Your rights

Subject to applicable law, you can ask us to:

  • tell you what personal data we hold about you and how it is used;
  • correct or update inaccurate or incomplete data;
  • erase your data, where we are not required to keep it;
  • withdraw consent you gave earlier. This does not affect processing that already happened;
  • nominate another person to exercise your rights if you die or become unable to; and
  • resolve a grievance about how your data is handled.

Businesses can edit most of their information in the dashboard. Visitors, and businesses that want their account deleted, can email [support email address]. We may need to verify your identity, for example by confirming the phone number or email you used. If you are a visitor, we may forward your request to the business concerned.

If you are not satisfied with our response, you may complain to the Data Protection Board of India once it is accepting complaints.

11. Children

Pravia is intended for adults. Business accounts may only be created by people aged 18 or over. We do not knowingly collect personal data from children. If you believe a child has submitted their details, contact us and we will delete them.

12. Where data is stored

Our service providers may store or process data on servers located in India or in other countries. Wherever data is processed, we take steps to protect it as described in this policy and as Indian law requires.

13. Changes to this policy

We may update this policy when the service or the law changes. The "Last updated" date at the top shows when it last changed. For significant changes, we will notify businesses by email or in the dashboard.

14. Contact and Grievance Officer

For privacy questions or requests, contact:

  • Email: [support email address]
  • Grievance Officer: [Grievance Officer name], [Grievance Officer email address]
  • Address: [Registered / postal address]

We will acknowledge grievances within 24 hours and aim to resolve them within 15 days. See also our Terms of Service.