Privacy Policy

This Privacy Policy explains how AURA Commerce (“we”, “us”, or “our”) collects, uses, shares, and protects information when you use our website, onboarding flows, dashboard, storefront/customer flows, and related managed platform services (together, the “Services”). It describes our current data practices and should be read together with our Terms where those Terms apply.

AURA Commerce is operated by AADHARAV Technologies Private Limited, India.

On this page

1. Information We Collect

  • Account & Authentication Information: phone number used to identify and verify your account, account membership and role/status information where Team Access or administrator access is used, optional profile details you provide (such as name and email), and Secure Sign-In credential information where you use passkeys. Secure Sign-In stores the credential and public-key information needed to verify access; AURA Commerce does not receive or store the biometric or device-unlock information used by your device to authorize a passkey.
  • Business Information: business name, address/location, category, public store details, links (e.g., Maps/Instagram), and images (logos, banners, gallery/product images) you upload.
  • Partner & Network Information: partner profile and support details, merchant or sub-partner relationships, hierarchy information, commercial configuration, wallet and billing activity, payout destination details such as bank-account or UPI information where provided, and related network-level operational records where partner or enterprise features are used.
  • Orders & Customer Details: order information created through storefront, checkout, checkout-link, or Merchant-assisted/POS flows (such as items, amounts, payment and fulfilment status, delivery or pickup mode), together with customer information provided for the order such as name, mobile number, email address where supplied, and delivery address where applicable. Customer WhatsApp-update preference is also recorded where the customer is offered and chooses that option.
  • Technical & Operational Information: browser/device information and technical or operational records generated as needed to operate, secure, troubleshoot, and maintain the Services, including session, authentication, payment-status, error, audit, and similar service records where applicable. AURA Commerce does not currently operate a separate behavioural advertising or customer-profiling analytics programme.
  • Payments: online customer payments (if enabled) are processed by authorized payment partners (e.g., Razorpay). We do not store full customer card details used to make those payments. Payment partners process payment-related data under their own privacy policies. Where a Partner provides bank-account or UPI details for settlement payouts, those payout destination details are stored and used for the applicable payout workflow. Offline payments (cash/POS) are recorded as payment mode selections for order tracking.
  • Support: content of messages/emails and information you share when you contact support.
  • Initial Setup & Authorized Support Access: during initial onboarding, and when you explicitly request platform-related support, authorized administrators may access your merchant account to assist with setup, configuration, or issue resolution. Such access is limited, logged, and used only for platform support and operational assistance — not for running your business.

2. How We Use Your Information

  • Provide and operate the Services (onboarding, store setup, dashboard, publishing, analytics).
  • Authenticate users through OTP verification and, where applicable, Secure Sign-In; determine authorized account access and active account context; maintain and protect sessions; and prevent fraud, unauthorized access, or misuse.
  • Enable core commerce workflows such as catalog management, orders, customer verification, and POS-style order capture.
  • Manage merchant, partner, and network billing, including wallet balance tracking, pricing and commercial configuration, fee deductions, credits, settlement records, and usage records for platform services.
  • Provide initial onboarding support and setup assistance, and ongoing platform-related support when requested by you, including limited account-level access by authorized administrators for troubleshooting, configuration, or issue resolution. Day-to-day business operations and customer handling remain the merchant’s responsibility.
  • Send authentication and operational service communications through the channels currently implemented for the applicable purpose. SMS is used for OTP/verification flows, while WhatsApp may be used for supported Merchant operational alerts and customer order updates; customer WhatsApp order updates are sent only where the applicable customer opt-in is recorded.
  • Comply with legal obligations and enforce our terms.
  • Use operational and service records to maintain, troubleshoot, secure, and improve the performance and reliability of the Services.

We do not act as the Merchant's seller of record or as the holder of customer purchase funds. The Merchant sells its own goods or services to customers. AURA provides the digital commerce platform and related order, payment-context, status, and operating functionality, while customer payment processing and settlement remain with the applicable Merchant and payment provider.

We collect and use information only for lawful and legitimate purposes related to providing and improving our services, in line with applicable Indian data protection laws.

We do not sell or rent personal information. We use personal information only for the purposes described in this Policy, including providing, securing, supporting, administering, and complying with legal obligations relating to the Services.

3. Sharing & Disclosure

  • Payments: online customer payments (if enabled) are processed by authorized payment partners (e.g., Razorpay) to the merchant’s applicable payment account. We do not collect, receive, or hold customer purchase funds for onward settlement to Merchants, and we do not store full customer card details used to make those payments. Payment partners process payment-related data under their own privacy policies. Partner bank-account or UPI payout destination details provided for settlement payouts may be stored and used for the applicable payout workflow. Offline payments (cash/POS) are recorded as payment mode selections for order tracking.
  • Service Providers: we use third-party providers for functions such as hosting and cloud/database infrastructure, image/media handling, OTP and communications, payment processing, business-location enrichment, AI-assisted store-design functionality, and other technical infrastructure used by the Services. Information is shared with such providers only to the extent reasonably required for the applicable function.
  • Legal: if required by law, to protect rights, safety, or prevent fraud.
  • Business Transfers: in a merger, acquisition, or asset sale, we may transfer data as permitted by law.

Note: Authorized administrators may access merchant accounts only for platform support or admin-assisted setup when requested by the merchant. This is controlled, logged access and does not constitute sharing of data with third parties.

4. Data Security

We use reasonable technical and organizational measures to protect your information, including access controls and secure infrastructure.

5. Data Retention

We retain information only as long as necessary for the purposes above, to comply with law, resolve disputes, and enforce agreements. You may request deletion or export where legally and operationally feasible.

6. Your Choices & Rights

  • Access & Update: manage profile and business details from your dashboard.
  • Export/Deletion: email us to request a copy or deletion of your data.
  • Consent: where processing relies on consent, you may withdraw it at any time.
  • Cookies/Tracking: control via browser settings (see “Cookies & Tracking” below).

7. Data Hosting

We use trusted cloud service providers to host and process data securely. Data may be processed or stored in India or other jurisdictions depending on infrastructure, performance, and service requirements. Where cross-border processing occurs, we apply appropriate safeguards consistent with applicable law.

8. Cookies & Tracking

We use cookies, browser storage, and similar technologies where needed for essential platform functions such as authentication, session and remembered-identity handling, account context, customer checkout/payment continuity, and related operating state. You can restrict these through your browser settings, but doing so may prevent login, checkout, payment-status, or other core features from working correctly.

9. Changes to This Policy

We may update this Policy from time to time to reflect changes in the Services, our data practices, or applicable requirements. The latest version will be made available on our website. Where an update requires a separate notice, consent, or other action under applicable law, we will follow the applicable requirement.

10. Contact & Privacy Grievances

For questions, requests, or grievances concerning this Privacy Policy or personal information handled by AURA Commerce, contact:

Kanupriya Sharma

Privacy & Data Grievance Officer

AADHARAV Technologies Private Limited

Email: support@auracommerce.co.in

Mobile: +91 8920538618

Privacy and personal-data grievances will be handled through the applicable AURA compliance process and within the period required by applicable law.