Privacy policy
Last updated: 1 November 2026
Khatakhat is a tool that helps sellers on WhatsApp take orders, collect payments and keep accounts. This policy explains what personal data Khatakhat handles, why, and your choices. It is operated by Khatakhat.
Data we handle
Sellers: name, shop name, mobile number, UPI IDs, payment-gateway keys (stored encrypted), a login PIN (stored only as a one-way hash), sales, orders, khata entries and settings.
Buyers: name, WhatsApp number, delivery address and pincode, what you ordered and paid, any payment screenshot you send, and the messages you send to the Khatakhat WhatsApp ordering number.
Technical: a login cookie for sellers and admins, a language cookie, and details saved in your own browser to fill checkout faster next time (you can clear them anytime). We keep a one-way hash of the network address of website orders to stop one device from holding too much stock; we do not keep the address itself.
Why we use it
- To take and deliver orders: the seller you buy from sees your name, number, address and order.
- To match payments: each order gets a unique amount so the seller can recognise your payment.
- To send order updates on WhatsApp (payment received, shipping updates).
- To prevent abuse (for example one device holding all the stock) and to keep accounts secure.
- To provide support and meet legal obligations.
We do not sell personal data and do not use it for advertising.
Who it is shared with
- The seller you order from.
- Service providers that run the service: Cloudflare (hosting, database and photo storage), Meta (WhatsApp messages, when you use WhatsApp ordering), and Razorpay (when the seller uses automatic payments).
- Authorities, only when the law requires it.
How long we keep it
Orders and khata entries are the seller's business records and are kept while the seller's account is active, so they can handle deliveries, refunds and taxes. Login sessions expire after 60 days (admin sessions after 30 days). You can ask us to delete or anonymise your data at any time (see below); we may keep what the law requires.
Your rights
Under India's Digital Personal Data Protection Act, 2023 you can ask to access, correct or erase your personal data, and you can raise a grievance. Use the data request form or contact us. We verify requests on WhatsApp before acting and reply within 30 days.
Security
All traffic uses HTTPS. Gateway keys are encrypted, PINs are hashed, payment screenshots are visible only to the seller of that order, and buyers are never shown stock counts or other buyers' details.
Children
Khatakhat is not meant for people under 18.
Changes
We will update this page when our practices change and show the new date at the top.
Contact and grievances
- Khatakhat
- Delhi 110076, India
- Email: hello@vrishankgupta.in
- WhatsApp: +919136666425