Privacy Policy

Last updated: 19 August 2026

1. Scope and who we are

This Privacy Policy explains how Nyvoro (“Nyvoro”, “we”, “us”, “our”), operator of nyvoro.in and of the Nyvoro seller platform, collects, uses, stores, protects, shares, retains and deletes information.

It covers website visitors, clients who engage our services, and sellers who connect a marketplace selling account to the Nyvoro platform through the marketplace’s official seller API.

Registered business address: PN 274B, Goverdhan Nagar, Toll Tax, Tonk Road, Jaipur Rajasthan 302033. Contact: info@nyvoro.in.

2. Information we collect

• Information you provide directly: your name, email address, phone or WhatsApp number, business or brand name, and anything else you share through our contact form, by email, by phone or on WhatsApp.
• Client engagement information: where you engage our services, the business information reasonably required to deliver the agreed scope of work under a written service agreement.
• Marketplace seller data: where you authorise a selling account, the data categories retrieved through the marketplace’s official seller API, described in full in Section 3.
• Technical information: basic usage data such as pages visited, approximate city-level location, device type and browser type, collected through standard web analytics.

We never collect your marketplace password. Authorisation takes place entirely on the marketplace’s own website, and the marketplace issues us an encrypted authorisation token instead.

3. Seller data we access, and why

When you connect your selling account using the marketplace’s official authorisation flow, the Nyvoro platform accesses only the data categories required to deliver the platform features and services you have signed up for:

Access is limited to the permission scopes you approve on the marketplace’s consent screen. We do not retrieve data categories outside that approved scope.

4. How we use data

• To respond to your enquiries and provide the consultations and written quotes you request.
• To deliver, operate and support the services and platform features within an agreed scope.
• To display your seller dashboard, generate your sales, inventory, listing and performance reporting, and raise alerts such as low-stock and account-health notifications.
• To carry out the account management work you have engaged us for, such as order, return and case handling.
• To send service-related communication. We do not send marketing messages without consent, and you can opt out at any time.
• To maintain the security, integrity and reliability of the platform, and to meet legal, tax and accounting obligations.

5. How data is processed

Seller data is retrieved through authenticated API requests made on your behalf using the authorisation token the marketplace issued. That data is processed to populate your dashboard views, generate reports and analytics, and trigger the alerts described above.

Processing is automated and limited to what the features you use actually require. Where a team member reviews data, it is only in order to deliver the service you engaged us for — for example investigating a listing issue or preparing your monthly report.

6. How and where data is stored

• Data is stored on access-controlled infrastructure operated by reputable cloud hosting providers.
• Data is encrypted in transit using HTTPS/TLS and encrypted at rest.
• Authorisation tokens are stored encrypted and separately from application data.
• Each authorised account’s data is logically separated so that one account’s data is never exposed to another account or another client.

7. Security measures

• Role-based access control, so team members can reach only the data required for their role.
• Strong authentication for administrative access, with credentials never shared between individuals.
• Periodic access reviews, with access removed promptly when a team member changes role or leaves.
• Logging and monitoring of access to seller data.
• Confidentiality obligations binding on every team member and contractor.
• A defined process for identifying, containing and notifying security incidents.

8. Who can access data

• Within Nyvoro: only the team members directly involved in operating the platform or serving your account — for example your account manager and the engineers maintaining the system.
• You: you retain full access to your own marketplace account at all times. Nothing we do removes or limits your own access.
• Nobody else, unless one of the limited circumstances in Section 9 applies.

9. Sharing and sub-processors

We do not sell or rent personal information or seller data.

We share information only in these limited circumstances:

• Service providers (sub-processors) strictly necessary to operate the website and platform — for example cloud hosting, form processing and email delivery. These providers act on our instructions, are bound by confidentiality obligations, and may not use the data for their own purposes.
• Legal requirements — where disclosure is required by applicable law, regulation or valid legal process.
• With your explicit instruction — for example if you ask us to share a report with your accountant or another partner.

A current list of sub-processors is available on request by emailing info@nyvoro.in.

10. Data Retention, Account Disconnection & Deletion

Nyvoro retains marketplace and account data only for as long as necessary to provide the applicable services, meet legitimate operational and security requirements, and comply with applicable legal, contractual and marketplace requirements.

When a seller revokes or disconnects Nyvoro’s access to a connected marketplace account, future synchronization for that connection will stop. Marketplace data retained by Nyvoro will be deleted or otherwise handled in accordance with the applicable retention requirements and Nyvoro’s documented deletion procedures, except where continued retention is required by law, contractual obligations, security requirements or other legitimate compliance purposes.

Indicative retention periods

• Enquiry data: retained only as long as needed to handle your enquiry and any reasonable follow-up.
• Client and engagement data: retained for the duration of the engagement and for any period required by applicable law or contract.
• Marketplace seller data: retained while your selling account is connected and being served, and thereafter only as described above.
• Legally mandated records such as invoices and tax records are retained for the period required by law and then deleted.

11. Seller Data Deletion Request & Your Rights

A seller may request deletion of eligible account or marketplace data by contacting Nyvoro through the privacy/contact channel listed in this Privacy Policy. Nyvoro will verify the request where necessary and process eligible deletion requests in accordance with applicable requirements.

You may also request access to, or correction of, your personal information at any time — before or after disconnecting your account.

• How to request: email info@nyvoro.in from your registered email address with the subject line “Data deletion request”.
• Verification: Nyvoro will verify the request where necessary to confirm it came from you or from an authorised representative of the account.
• Processing: eligible deletion requests are processed in accordance with applicable requirements and our documented deletion procedures.
• Confirmation: we confirm in writing once the request has been processed.
• Exception: information we are required to retain by law, contract, security or other legitimate compliance obligations is retained for the applicable period and then deleted.

Backups

Where deleted information remains temporarily in protected system backups, it will be removed or rendered unavailable through the applicable backup retention/expiry lifecycle and will not be restored for ordinary business use except where required for legitimate disaster-recovery, security or legal purposes.

12. Disconnecting your seller account

You can revoke Nyvoro’s access at any time, without contacting us first:

• In your Nyvoro account settings, choose Disconnect seller account; or
• Revoke access through the authorization controls in your marketplace seller account.

What happens immediately: future marketplace data synchronization for that connection stops, and the stored authorization credentials are invalidated so no further requests can be made on your behalf.

What happens to stored data: retained marketplace data is deleted or otherwise handled in accordance with Section 10 and our documented deletion procedures. You may request deletion of eligible data as described in Section 11.

13. Cookies and analytics

This website uses only minimal cookies or similar technologies needed for basic functionality and anonymous analytics. We do not use advertising or cross-site tracking cookies. You can control cookies through your browser settings, and the website remains fully usable with cookies disabled.

14. Third-party links, children and changes

Third-party links. Our website may link to third-party websites. We are not responsible for their privacy practices and encourage you to review their policies.

Children. Our services are intended for businesses and for individuals aged 18 and above. We do not knowingly collect information from children.

Changes. We may update this policy from time to time. The “last updated” date above reflects the current revision, and material changes will be highlighted on this page.

15. Contact us

For any privacy question, data access request or deletion request:

• Email: info@nyvoro.in
• Phone: +91 92144 54545
• Postal address: PN 274B, Goverdhan Nagar, Toll Tax, Tonk Road, Jaipur Rajasthan 302033

We aim to acknowledge every privacy request within 3 business days and to resolve it within a reasonable timeframe.