1. Nature of Business & Scope
MewaSpices operates a Business-to-Business (B2B) wholesale trade counter for premium dry fruits, spices, seeds, and grocery commodities. Our services are designated strictly for registered retail stores, Kirana merchants, commercial food establishments, and institutional buyers.
This policy applies to all trade accounts, catalog queries, offline and online wholesale orders, payment settlements, KYC submissions, and electronic communications (including SMS and WhatsApp notifications).
2. Information We Collect
To establish B2B trade relationships and comply with Indian commercial laws, we collect:
- Business Identity & Contact Details: Firm/Entity name, proprietor or authorized contact person name, mobile telephone number, email address, physical shop/counter address, and shipping destination pincode.
- Commercial KYC & Tax Identifiers: Goods and Services Tax Identification Number (GSTIN), Permanent Account Number (PAN), FSSAI food business registration/license, and business entity proof where required to unlock wholesale trade pricing.
- Transactional & Credit Ledger Data: Order line items, billing history, consignment records, dispatch delivery proofs, delivery OTP confirmations, and trade credit ledger balances.
- Device & Security Logs: IP address, browser type, authentication timestamps, and verification logs strictly used to safeguard accounts against fraud and unauthorized access.
3. Purpose of Processing & Data Utilization
We process collected information strictly for legitimate commercial and regulatory purposes:
Trade Account Onboarding
Verifying commercial credentials, Kirana retailer verification, and assigning tier-based trade discounts.
Tax Invoicing & Compliance
Generating statutory CGST/SGST/IGST tax invoices and fulfilling GST filing requirements.
Logistics & Dispatch
Generating shipping waybills, route dispatching, and executing OTP-verified proof of delivery.
Security & Fraud Prevention
Two-factor authentication, secure session tokens, and detecting anomalous login behavior.
4. WhatsApp Business Cloud API & Communications Policy
MewaSpices utilizes the Meta WhatsApp Business Cloud API (operated by Meta Platforms, Inc.) and transactional SMS to provide real-time updates directly to your registered business phone number.
Types of Messages Sent:
- Authentication Messages: One-Time Passwords (OTP) required to sign in securely to your wholesale account.
- Utility & Transactional Notifications: Order confirmation, dispatched consignment tracking, delivery OTP verification, and payment receipts.
- Trade Account Alerts: Credit limit notifications, KYC approval status, and critical billing updates.
Opt-Out & Communication Preferences
You can opt out of non-essential promotional communications at any time by replying "STOP" to our WhatsApp messages or contacting support. Essential transactional alerts (like login OTPs and billing receipts) cannot be disabled as they are required for account security and legal compliance.
5. Third-Party Service Providers
We do not sell, rent, or trade your trade data or customer details to third parties or marketing brokers. We share data only with certified enterprise infrastructure partners necessary to deliver our services:
- Payment Gateways (Razorpay): Payment card, UPI, and net-banking transactions are processed through PCI-DSS certified gateways. MewaSpices does not store full credit/debit card numbers or CVV codes.
- Logistics & Courier Partners (Shiprocket & Local Fleets): Shipping addresses, recipient contact names, and phone numbers are shared solely for consignment packaging, transit, and doorstep delivery.
- Cloud Infrastructure & Messaging Providers: Encrypted hosting via Amazon Web Services (AWS) and transactional communications via Meta Platforms, Inc. (WhatsApp Cloud API) and Google Firebase.
- Statutory Authorities: Disclosed only when legally mandated under the Central Goods and Services Tax Act, Income Tax Act, or court order.
6. Data Security & Retention
We implement multi-layered technical and organizational security controls:
- HTTPS/TLS 1.3 encryption across all web traffic and API endpoints.
- Cryptographic salting and one-way hashing for passwords and verification tokens.
- Strict role-based access control (RBAC) ensuring internal staff only view data required for order fulfillment.
Retention Period: In accordance with Indian tax and commercial statutes (including Section 36 of the CGST Act, 2017), invoicing, GST records, and trade transaction books are retained for a minimum statutory period of 72 months (6 years). Account profile data is maintained for the lifetime of your active trade account.
7. Grievance Redressal & Contact Details
In compliance with the Information Technology Act, 2000, rules made thereunder, and the Digital Personal Data Protection (DPDP) framework, you may contact our designated Grievance Officer for inquiries, data updates, or rights requests:
MewaSpices Legal & Grievance Redressal
Attention: Grievance Officer
Email: info@mewaspices.in
Website: https://mewaspices.in
We will acknowledge your request within 48 hours and resolve verified grievances in accordance with statutory timelines.
8. Account & Data Deletion Policy (Google Play & DPDP Compliance)
In compliance with Google Play Store Developer Policies and the Digital Personal Data Protection Act, registered users of the Mewaspices mobile application and wholesale web platform have the absolute right to request that their user account and associated personal data be permanently deleted.
To learn about our exact in-app deletion steps, online web submission form, and statutory 6-year retention rules for tax invoices under the CGST Act 2017, please visit our dedicated page: