Privacy Policy
Your privacy is important to us
Last updated: October 16, 2026
GrahaGuru Shop ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website shop.grahaguru.in and make purchases from us.
Xalen Technology Private Limited is the Data Fiduciary for GrahaGuru, GrahaGuru Shop and GrahaGuru Mall. Our address and contact lines are at the end of this policy.
1Information We Collect
Personal Information
When you place an order or create an account, we collect:
- Full name
- Email address
- Phone number
- Shipping and billing address
- Order history and preferences
Payment Information
Payment details are processed securely through our payment partners (Razorpay, PayU). We do not store your complete credit/debit card numbers on our servers.
Automatically Collected Information
- IP address and browser type
- Device information
- Pages visited and time spent
- Referring website
- Cookies and similar technologies
2How We Use Your Information
- Process and fulfill your orders
- Send order confirmations and shipping updates
- Provide customer support and respond to inquiries
- Send promotional communications (with your consent)
- Improve our website and services
- Prevent fraud and ensure security
3Information Sharing
We do not sell your personal information. We may share your data with:
- Payment Processors: To process your payments securely
- Shipping Partners: To deliver your orders (Delhivery, BlueDart, India Post)
- Analytics Providers: To understand website usage (Google Analytics)
- Legal Requirements: When required by law or to protect our rights
4Data Security
We implement appropriate security measures to protect your personal information:
- SSL/TLS encryption for all data transmission
- Secure payment processing through PCI-compliant gateways
- Regular security audits and updates
- Limited access to personal data on a need-to-know basis
- Secure data storage with encryption at rest
6Your Rights
As a Data Principal under the Digital Personal Data Protection Act, 2023 you can ask us to do the following. Write to support@grahaguru.in and we will respond within 30 days.
- Delete your account yourself: see Deleting Your Account and Data below.
- Get a summary of the personal data we hold about you and who we shared it with.
- Correct, complete or update anything that is inaccurate.
- Erase personal data we no longer need for the purpose you gave it for.
- Nominate another person to exercise these rights if you die or become incapable.
- Withdraw a consent you gave. Withdrawing consent stops future processing; it does not undo processing that already happened, and some features stop working without the data they need.
- Opt out of marketing communications.
- Raise a grievance with our Grievance Officer, and, if we do not resolve it, complain to the Data Protection Board of India.
7Deleting Your Account and Data
Delete from the app
Shop app: open Profile, then use Delete account. Follow the confirmation shown for that account. Uninstalling the app does not delete the account.
Deletion cannot be undone. If you have a pending order, contact support before you delete.
Delete from the website
To request account deletion, write to support@grahaguru.in from the email address on the account. We verify that the request is really from you before we act on it, because deletion cannot be undone. If we cannot verify it, we will ask you for one more proof rather than delete the wrong account.
Help
support@grahaguru.in, or the Grievance Officer named below.
8How Long We Keep Your Data
We keep your account data while your account is open. When you delete your account we erase or anonymise personal data within 30 days, except records we are legally required to retain. Copies in backups are removed as the backups roll over, which can take up to 90 days.
- Invoices, tax records and payment evidence are kept for eight years, because the Companies Act, 2013 and GST law require it. A retained invoice is not a live account.
- Grievance records, meaning complaints raised with the Grievance Officer, are kept for three years so that we can show how a complaint was handled.
- Records of a transaction we are required to retain under the Information Technology Act, 2000 and the rules made under it are kept for as long as that law requires.
- Records under an active legal hold, court order or ongoing dispute are kept until it ends.
- Anonymised and aggregated statistics that can no longer identify you may be kept.
Records that survive deletion because the law requires them are locked to legal use only and are not used to serve you or to market to you.
Grievance Officer
Vansh Joshi, Grievance Officer
- Xalen Technology Private Limited
- A704, Gagan Unnati Co Op Hsg Soc, Katraj Kondhwa Road, Pune, Maharashtra 411048, India
- Email: support@grahaguru.in
- Phone: +91 89658 15111
This officer is our Grievance Officer under rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and is the same officer for a Data Principal grievance under section 13 of the Digital Personal Data Protection Act, 2023 and for a consumer grievance under the Consumer Protection (E-Commerce) Rules, 2020.
Our timelines
For a consumer complaint about an e-commerce transaction, GrahaGuru acknowledges the complaint within 48 hours and redresses it within one month, as the Consumer Protection (E-Commerce) Rules, 2020 require. Where the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 apply, we acknowledge within 24 hours and dispose of the complaint within 15 days.
- Acknowledgement with a ticket number: within 24 hours.
- Resolution: within 15 days, as required by rule 3(2)(a) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.
- A Data Principal request under the Digital Personal Data Protection Act, 2023: within 30 days.
- If something will take longer, we tell you why and give you a date, before the deadline passes, not after it.
If we do not fix it
- Escalate inside GrahaGuru by replying to the ticket and asking for escalation to the Grievance Officer.
- Consumer complaints: the National Consumer Helpline on 1915, the e-Daakhil portal at edaakhil.nic.in, or the District Consumer Disputes Redressal Commission where you live, under the Consumer Protection Act, 2019.
- Personal data complaints: the Data Protection Board of India, after you have raised it with us first, under section 13(3) of the Digital Personal Data Protection Act, 2023.
- Payment complaints about a bank or a payment instrument: your bank first, then the Reserve Bank of India Integrated Ombudsman Scheme.
This process does not remove access to a consumer commission, a regulator, a court, an app store, a payment provider, or any other remedy available under law.
We keep grievance records for three years so that a complaint can be audited and so that we can show what we did.
Contact Us
For any privacy-related questions or to exercise your rights, contact us:
Business: Xalen Technology Private Limited
Email: support@grahaguru.in
Phone: +91 89658 15111
Address: A704, Gagan Unnati Co Op Hsg Soc, Katraj Kondhwa Road, Pune, Maharashtra 411048, India