Privacy built for dealer-retailer workflows.

This policy explains how Restock handles information across its B2B ordering, catalog, credit, repayment, payment, and notification features. Last updated: June 2, 2026.

1. Who we are

Restock is a B2B ordering, credit, and payments-tracking platform for Indian distributors (dealers) and retailers. This policy explains how we handle information across the Restock mobile app and the restockapp.in website.

2. Information you provide

Account: mobile number for OTP and biometric login. Business profile: role, shop or firm name, GSTIN, business type and category, address, pincode, and contact details. Dealer catalog: products, brands, categories, pack variants, MRP, selling prices, stock, images, banners, and UPI or bank details used for collections. Retailer activity: carts, orders, cancellations, returns, and credit requests. Payments: amounts, modes, UPI references, transaction IDs, and uploaded payment proofs.

3. Information we collect automatically

Limited device and session data needed to keep the app working and secure: platform, app version, push notification token, IP address, login timestamps, and diagnostic logs. We do not run third-party advertising trackers in the app.

4. How we use it

To authenticate users, match retailers with relevant dealers, manage catalogs and orders, record and reconcile payments, set and enforce dealer credit terms, calculate repayment ratings from verified payment behaviour, send transactional notifications, prevent abuse, and provide support.

5. Credit, due dates, and repayment rating

When a dealer extends credit, Restock stores the credit limit, period, due dates, outstanding balance, verified repayments, and a derived repayment rating. This is visible to the dealer who set the relationship and, in summary form, to the retailer it relates to. Repayment ratings are not credit bureau scores and are not shared with external credit agencies.

6. Sharing between dealers and retailers

Restock is a two-sided platform. Order, payment, credit, and notification details are shared between the dealer and retailer involved in a transaction. Dealers can see retailer profile details and repayment history for their own shop; retailers can see dealer catalogs and the credit terms set for them. Unrelated parties cannot see each other's private business data.

7. Invoicing via Tally

Restock is not the system of record for GST invoices. Dealers raise invoices in Tally (or their existing accounting software) and may attach the PDF or reference to a Restock order so both sides have a shared record. Any uploaded invoice is shared only with the retailer on that order.

8. Payments and UPI

Restock does not act as a payment gateway and does not store card details. UPI collections are handled by the dealer's UPI handles and the retailer's UPI app; Restock records references, amounts, modes, and uploaded proofs for reconciliation. Some payment screenshots may be processed locally on the device to extract reference numbers and amounts.

9. Files and uploads

Product images, banners, payment proofs, and invoice attachments are stored in our cloud storage. Access is restricted by role-based and row-level security rules, with short-lived signed URLs where configured.

10. Notifications

Restock sends push notifications and in-app alerts for orders, payments, credit reminders, and due dates. Push notifications require a device token, which is stored against your account and revoked on sign-out or uninstall. You can disable notifications from your device settings.

11. Service providers

We use trusted partners to run Restock, including Supabase for authentication, database, and storage; cloud hosting providers for the API and web; an SMS gateway for OTP delivery; and a push notification service. These providers process data only on our instructions. We do not sell your data and we do not share it with advertisers or data brokers.

12. Security

Access is protected by OTP login, biometric re-login secured by the device Keychain or Keystore, role-based access policies, and database row-level security. Communication is encrypted in transit. No system is perfectly secure — keep your device locked, do not share OTPs, and sign out of devices you no longer use.

13. Data retention

We keep profile, catalog, order, payment, credit, and notification data for as long as your account is active and for a reasonable period thereafter to maintain business records, resolve disputes, and meet legal, tax, and accounting obligations under Indian law.

14. Your choices and rights

You can review and update most business information from inside the app. For data access, correction, or account deletion, contact support from the Help & Support section of the app. Some records (completed transactions and tax-relevant data) may be retained even after profile deletion.

15. Children

Restock is a business platform and is not directed at anyone under 18. We do not knowingly collect data from minors.

16. Changes to this policy

We may update this policy as Restock evolves. Material changes will be communicated in the app or via a prominent notice before they take effect.

17. Grievance officer and contact

For privacy questions, data requests, or grievances under the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, contact the Restock support team from the Help & Support section of the app. We aim to acknowledge within 48 hours and resolve within 30 days.