Privacy Policy

Effective date: 25 October 2026 · Last updated: 28 October 2026

1. Who we are

VogueDesk ("VogueDesk", "we", "us") is a business management platform for boutiques, designers and tailoring businesses, available at voguedesk.in and its subdomains. VogueDesk is operated by Devmire, India.

This policy covers two groups of people:

• Our customers and their staff: the businesses that sign up for VogueDesk (we call each one a "boutique") and the people who use VogueDesk on their behalf. For this data, we decide how it is used and are responsible for it as the data fiduciary.
• A boutique's own clients: people whose details a boutique records in VogueDesk, such as their name, phone number and measurements, or who receive messages from a boutique. For this data, the boutique decides how it is used and is the data fiduciary; VogueDesk processes it only on the boutique's behalf and according to its instructions. If you are a boutique's client, please contact that boutique first about your data. We will help them respond.

2. Information we collect

Information about boutiques and their staff

• Account details: name, username, email address, phone number, role, and password (stored only as a secure hash).
• Business details: business name, address, GSTIN and tax settings, logo, and subscription plan.
• Staff records the boutique keeps: employee profiles, skills, attendance, check-ins, time entries, task assignments and payroll records.
• Integration details: settings and credentials a boutique provides to connect services such as WhatsApp, Razorpay or Zoho.

Information boutiques record about their clients

• Name, phone number, email address and postal address.
• Body measurements, style preferences, design notes and photos or files the boutique uploads.
• Orders, garments, appointments, invoices, payments, loyalty points and referrals.
• Messages the boutique sends to the client and replies the client sends back (see WhatsApp Business Platform).

Information collected automatically

• Technical data such as IP address, browser and device type, and the date and time of requests, kept in server logs for security and troubleshooting.
• Records of actions taken in the app (for example, who moved an order to the next stage) so boutiques can see a history of their work.

We do not collect card numbers or bank login details. Online payments are handled by our payment processor (see How we share information).

3. How we use information

• To provide the service: create accounts, store and display a boutique's records, generate invoices, and run the features the boutique uses.
• To send messages a boutique asks us to send, such as order updates, appointment reminders, invoices and payment reminders, by WhatsApp, SMS or email.
• To send account and service messages to boutiques, such as security alerts, receipts and important changes.
• To keep the service secure: authenticate users, enforce role-based access, prevent fraud and abuse, and investigate problems.
• To provide support and respond to requests.
• To improve the service, using aggregated information about how features are used.
• To meet legal, tax and accounting obligations.

We process data on the basis of consent, to perform our contract with the boutique, or where otherwise permitted by applicable law, including the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 of India. We do not sell personal data, and we do not use it to build advertising profiles or show ads.

4. WhatsApp Business Platform

Boutiques can choose to connect their own WhatsApp Business account to VogueDesk so they can message their clients from VogueDesk. We act as a technology provider using Meta's WhatsApp Business Platform (Cloud API). This section explains what that involves.

What we receive when a boutique connects WhatsApp

• The WhatsApp Business Account ID, phone number ID, display phone number, verified business name and message template details.
• An access token issued by Meta that lets VogueDesk send messages for that boutique. We store it encrypted and use it only for that boutique.

What we process when messages are sent and received

• The recipient's phone number and name, and the content of messages the boutique sends.
• Messages that clients send to the boutique's WhatsApp number, including any media they attach.
• Delivery and read status updates for messages.

How we use WhatsApp data

• Only to send and receive messages for the boutique that connected the account, and to show that boutique its message history and delivery status.
• We do not use WhatsApp data for advertising, we do not sell it, and we do not share it with other boutiques or third parties except as needed to deliver messages.
• We use data received from Meta in line with the Meta Platform Terms and the WhatsApp Business policies.

Choices for message recipients

• Boutiques are responsible for getting their clients' permission before messaging them on WhatsApp.
• If you no longer want messages from a boutique, reply "STOP" or ask the boutique, and they will stop messaging you. You can also block the number in WhatsApp.

Meta processes message data as described in the WhatsApp Business Policy and WhatsApp Privacy Policy.

When a boutique disconnects WhatsApp or closes its account, we stop using its access token and delete the stored token and WhatsApp account details as described in How long we keep data.

5. How we share information

We share personal data only with the following, and only as needed to run the service:

Our service providers may use the data only to provide their services to us and must keep it secure and confidential.

Requests from public authorities

If a court, government body or law enforcement agency asks us for personal data:

• we check that the request is lawful and properly made before acting on it;
• we challenge requests that we believe are unlawful, too broad or not properly made;
• we disclose only the minimum data the request requires; and
• we keep a record of every request we receive and how we responded.

Where the law allows, we tell the affected boutique before disclosing its data.

6. Cookies and local storage

VogueDesk uses your browser's local storage to keep you signed in and to remember preferences such as theme, language, sidebar state and table page size. We do not use advertising or third-party tracking cookies.

7. Security

• All traffic to VogueDesk is encrypted with HTTPS.
• Passwords are stored as one-way hashes, and integration credentials (such as WhatsApp access tokens and payment gateway keys) are stored encrypted.
• Each boutique's data is kept separate from every other boutique's data.
• Access inside a boutique is role-based; for example, clients' phone numbers are visible only to administrator roles.
• We limit staff access to personal data to what is needed to operate and support the service.

No system is perfectly secure. If we become aware of a personal data breach affecting you, we will notify the affected boutiques, the people concerned and the authorities as required by law.

8. How long we keep data

• We keep a boutique's data for as long as its account is active.
• When a boutique closes its account or asks us to delete its data, we delete it within 30 days, except records we must keep by law (such as tax invoices), which we keep only for the period required.
• When a boutique disconnects WhatsApp, we delete the stored access token immediately and its WhatsApp account details within 30 days.
• Server logs are kept for up to 90 days.
• Backups are overwritten on a rolling basis, so deleted data may remain in backups for up to 30 more days before it is gone.

9. Your rights

Subject to applicable law, you have the right to:

• get a summary of the personal data we hold about you and how it is processed;
• have inaccurate or incomplete data corrected and updated;
• have your data erased when it is no longer needed or you withdraw consent;
• withdraw consent at any time, without affecting processing that happened before;
• nominate another person to exercise your rights in case of death or incapacity; and
• raise a grievance with us and, if not resolved, with the Data Protection Board of India.

Boutique users can view and correct most of their data directly in VogueDesk. For anything else, contact us at hello@voguedesk.in. If you are a boutique's client, please contact the boutique; we will help them act on your request. We will respond within 30 days.

10. Data deletion

If you are a boutique (account owner)

1. Email hello@voguedesk.in from your registered email address with the subject "Delete my data", and include your business name.
2. We will confirm the request and delete your account and all data stored for your business within 30 days, except records we must keep by law.
3. We will email you when deletion is complete.

To disconnect WhatsApp only

1. In VogueDesk, open Settings → WhatsApp and choose Disconnect. We delete the stored access token immediately and the WhatsApp account details within 30 days.
2. You can also remove VogueDesk's access in Meta Business Settings → Integrations → Connected apps.

If you are a boutique's client

1. Ask the boutique to delete your details. They can delete your client record in VogueDesk.
2. If you cannot reach the boutique, email hello@voguedesk.in with the boutique's name and your phone number. We will pass your request to the boutique and help them act on it within 30 days.

11. Children

VogueDesk is a service for businesses and is not meant for use by anyone under 18. Boutiques may record details of a child client, such as measurements for a garment, only with the consent of the child's parent or guardian, and must not use that data for tracking, behavioural monitoring or targeted advertising.

12. Where data is stored

VogueDesk's servers, database, file storage and backups are hosted by Hetzner Online GmbH in data centres in Germany, so data you store in VogueDesk is transferred from India to Germany and stored there. Germany is in the European Union, where Hetzner is bound by the EU General Data Protection Regulation. Hetzner stores the data only for us and does not use it for its own purposes.

Some other service providers, such as Meta, may process data in other countries. Where data is transferred outside India, we do so only as permitted by Indian law and require the recipient to protect it.

13. Changes to this policy

We may update this policy from time to time. We will change the "Last updated" date above and, for significant changes, notify boutiques by email or in the app before the change takes effect.

14. Contact and grievance officer

For questions, requests or complaints about this policy or your personal data, contact our Grievance Officer:

• Grievance Officer: Shreyas Ubale
• Email: hello@voguedesk.in

We will acknowledge complaints within 48 hours and resolve them within 30 days.