Data Security
Your store data stays yours.

01 Our Core Promise

GrowYaara was built by people who understand Indian retail. We know the trust you are placing in us when you connect your store systems, customer records, and financial data to our platform.

Our core promise is simple and unconditional:

02 Tally & Busy Data

GrowYaara integrates with TallyPrime and Busy accounting software. This integration is designed to add intelligence above your existing accounting setup — not to replace it or extract data beyond what is needed for GrowYaara's features.

How the Integration Works

The GrowYaara-Tally / Busy integration operates through a local sync agent that you install on the same machine running Tally or Busy. The agent reads authorised ledger and transaction data and syncs it to your GrowYaara account.

What Happens to Synced Tally / Busy Data

• Synced data is stored in your GrowYaara account — isolated and accessible only to you and staff you authorise
• It is used exclusively to power GrowYaara features in your account — analytics, inventory tracking, billing intelligence
• It is never shared with other retailers, brands, distributors, or any commercial third party
• It is never used to benchmark your store's performance against industry data sold to others
• When you disconnect or close your account, synced data is deleted along with all your other GrowYaara data

03 What We Do Not Store

We are explicit about what GrowYaara does not store or process — because we believe your business data belongs to you, and we access only what is necessary to serve your store.

04 What We Do Store

In the spirit of full transparency, here is exactly what GrowYaara stores on your behalf — all within your isolated, encrypted account.

05 We Never Sell Your Data

This deserves its own section because it is that important.

We Do Not:

• Sell your sales data to mobile brands (Samsung, Vivo, OPPO, Realme, etc.) for market intelligence
• Share aggregated retailer data with distributors, industry bodies, or research firms as a paid service
• Use your pricing data to power commercial pricing intelligence products for third parties
• Provide your customer data to insurance companies, fintech lenders, or any other commercial entity
• Use your business data for advertising targeting on any platform outside GrowYaara
• Allow any GrowYaara employee to access your data for personal or commercial purposes outside their job scope

The Only Exceptions

The only situations where your data is ever shared externally are:

• You initiate it — e.g., submitting a cashback claim shares relevant IMEI data with that specific brand only
• Legal obligation — a valid court order or statutory requirement under Indian law
• Infrastructure providers — our cloud host (AWS Mumbai) stores encrypted data as part of hosting infrastructure, governed by their DPA

06 Encryption & Infrastructure

Every piece of data in GrowYaara is protected by multiple layers of encryption and infrastructure security.

07 Access Controls

Access to your data — from both within your store team and within GrowYaara's internal teams — is strictly controlled.

Within Your Store

• Store owners control which staff members can access which modules via role-based permissions
• Staff can be restricted from viewing pricing, profit margins, customer financials, or cashback data
• All staff logins are PIN or biometric protected on the device
• Session timeouts and inactivity locks prevent unauthorized device access

Within GrowYaara

• Production database access is restricted to a small number of authorised engineers with documented, role-based access
• All internal access to customer data requires multi-factor authentication
• Access logs are maintained and regularly audited — any unusual access is flagged automatically
• GrowYaara support staff access only the minimum data needed to resolve your support request — and only with your implicit consent when you raise a ticket
• No GrowYaara employee can access your data for personal use or commercial gain — this is a termination offence

08 Store Data Isolation

Every GrowYaara store account operates in complete isolation from every other store account. This is a foundational design principle, not an afterthought.

• Your inventory, customers, sales, and cashback data are stored in a dedicated, logically isolated data space for your store
• No other retailer — even if they use GrowYaara — can see any part of your data
• AI insights are generated at the individual store level using your own data alone — your data is never pooled into a shared model that other retailers access
• Multi-store accounts (Growth plan) share data only within your own chain — never across unrelated accounts
• Aggregated, anonymised platform-level analytics (e.g., which app features are popular) never include identifiable store or business data

09 Breach Response

In the unlikely event of a data security incident, GrowYaara has a documented incident response plan.

• We will notify affected users within 72 hours of becoming aware of a confirmed breach that affects their data
• Notifications will be sent via in-app alert, registered mobile number SMS, and email
• We will clearly communicate what data was affected, what steps we have taken, and what you should do
• We will report to relevant Indian regulatory authorities as required by law
• A post-incident report summarising the cause and remediation will be published on our status page

10 Your Controls

You have full control over your data at all times. These controls are available directly within the GrowYaara app — no support ticket needed for most actions.

11 Contact Security Team

For data security questions, vulnerability reports, or concerns about how your data is handled, contact our security team directly. We respond to all security matters within 48 hours.