← Back to Home

Privacy Policy

Last updated: 18 October 2026

This is a draft under legal review. It describes how Hyprknot handles personal data today and may change before launch.

1. Who we are

Hyprknot is Hyprknot Technologies Private Limited (CIN U62013TS2026PTC211215), registered office at H.No 1-98/3/5/23 to 27, Jubilee Enclave, Madhapur, Hyderabad, Telangana 500081, India. Hyprknot is a B2B commerce platform: suppliers use it to run a store where their buyers order, and an app to manage orders, stock and clients.

This policy covers people who visit hyprknot.com or contact us, suppliers who use Hyprknot, and buyers (in our apps, “merchants”) who join a supplier’s store. When you sign up in our apps you also see a short privacy notice and give your consent there; this page says the same in more detail.

2. Who is responsible for your data

Under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”), the organisation that decides how your data is used is the “data fiduciary”.

  • Suppliers and website visitors: Hyprknot is the data fiduciary.
  • Buyers: Hyprknot and the supplier whose store you join decide together how your data is used, and are jointly responsible for it.

3. What we collect

When you visit our website or contact us

  • What you type into our forms, such as your name, business name, email address, phone number and message.
  • How you use the website, through Google Analytics, if it is switched on (see our Cookie Policy).

If you are a supplier

  • Account details: name, email address, phone number and password (never stored in readable form). If you sign up with Google, we receive your name and email address from Google.
  • Business and identity details for KYC/KYB: business name, registration and tax numbers (such as PAN and GSTIN), addresses, the authorised person’s details and photo ID number (for Aadhaar, only the last 4 digits), and the documents you upload.
  • Your store, products, orders, buyers and the money records between you and your buyers.
  • Billing details: your plan, your bills and a short description of your autopay method (for example the card’s last 4 digits or your UPI ID). Full card and bank details are handled by our payment provider, Razorpay, not by us.

If you are a buyer

  • Account details: name, email address, phone number and password.
  • Business details you give for KYC: business name, address, PAN, GSTIN or tax number, and the documents you upload.
  • Your orders, quotes, wallet records and payments to the supplier.
  • Your customers’ delivery details that you send with your orders: name, address, phone number and email address. If you connect your Shopify store, we receive these details from Shopify for the orders you send to your supplier.

For everyone using our apps

  • Device and browser type, IP address and the pages you use, to keep your account secure.
  • A record of your privacy consent: the notice version, the time, your IP address and browser.

4. Why we use it

  • To create and run your account.
  • To verify you and your business (KYC/KYB), as the law requires and to prevent fraud.
  • To run the store: products, buyers, orders, shipping, returns, invoices and wallet records.
  • To deliver orders: your customers’ details are used only to fulfil and track their orders.
  • To bill suppliers and issue GST tax invoices.
  • To send you messages about your account and orders.
  • To answer your questions and early access requests.
  • To keep the service secure and to meet our legal obligations, such as tax and accounting records.

We do not sell your data, and we do not use it for marketing unless you separately agree to that.

5. Your consent

When you sign up, you give a separate consent to the privacy notice (the box is never ticked for you, and is not bundled with the terms). We record it with evidence: the notice version, the time, your IP address and browser. If we change the notice, we ask for your consent again.

6. Who we share it with

  • The supplier, if you are a buyer: your business and KYC details and your orders, so they can approve you and fulfil them.
  • Buyers, if you are a supplier: your store’s name, contact details and products.
  • Service providers who work for us under contract, only for the purposes above:
    • hosting providers, which run our apps and database;
    • Cloudflare R2, which stores uploaded files and images;
    • Resend, which delivers our emails;
    • Razorpay, which collects Hyprknot’s monthly bill from suppliers;
    • Google, for Google sign-in, for sending emails from a supplier’s connected Gmail or Google Workspace address, and for website analytics.
  • Services you or your supplier connect:
    • the supplier’s own payment gateway (such as Razorpay or PayU), when a buyer adds money to their wallet or gets a refund;
    • Shopify, when a buyer connects their Shopify store: we receive their customers’ name, address, phone number and email address to fulfil orders, and send back tracking details;
    • Shiprocket, when the supplier connects it: delivery details needed to book and track shipments.
  • Government authorities, when the law requires it.

Some of these providers may process data outside India. We use them only as Indian law allows.

7. How we protect it

  • KYC/KYB documents are stored privately and can be opened only by the people who need them.
  • Sensitive numbers, such as PAN, GSTIN and other tax IDs, are stored encrypted. For Aadhaar we keep only the last 4 digits.
  • Payment gateway keys that suppliers connect are stored encrypted, and only their last 4 characters are shown.
  • Each store’s data is kept separate from other stores.

No system is perfectly secure. If a breach affects your data, we will tell you and the authorities as the law requires.

8. How long we keep it

  • Account data: while your account is open.
  • After a supplier’s store is paused or cancelled: we keep its data for 2 months, then delete storage-heavy data such as the catalogue, images and settings.
  • After an account is closed: we delete personal data, unless the law requires us to keep some of it longer. For example, accounting records must be kept for 8 years under the Companies Act, 2013.

9. Your rights

  • Get a summary of the personal data we hold about you and how we use it.
  • Have your data corrected, completed, updated or erased.
  • Withdraw your consent at any time, as easily as you gave it. What we did before you withdraw stays lawful. Without your consent we cannot run your account, so we will close it, keeping only what the law requires.
  • Have your grievances answered.
  • Nominate someone to use these rights for you if you die or can no longer do so yourself.

In our apps, use Settings → Privacy. You can also write to our Grievance Officer (section 11).

10. Age

Hyprknot is for businesses. You must be 18 or older to create an account, and we do not knowingly collect children’s data.

11. Grievance Officer

  • Name: Anil Dilip Pujari, Director
  • Email: [email protected]
  • Address: Hyprknot Technologies Private Limited, H.No 1-98/3/5/23 to 27, Jubilee Enclave, Madhapur, Hyderabad, Telangana 500081, India

We acknowledge your request within 48 hours and resolve it within 30 days. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

12. About this policy

  • The rules under the DPDP Act are being brought into force in stages. We will update this policy as they take effect.
  • This policy is available in English, or in any language listed in the Eighth Schedule to the Constitution of India: ask the Grievance Officer.
  • If we make an important change, we will tell you, and in our apps we will ask for your consent again.