Privacy Policy
HANIVAR handles orders, payments, and customer information on behalf of D2C brands. This policy explains what we process and how we protect it.
1. Our role
For the customer data flowing through a brand\u2019s store, the brand is the controller and HANIVAR acts as a processor, handling that data to provide the platform. For account and billing information about the brand itself, HANIVAR is the controller.
2. Data we process
- Order data: order details, values, payment mode, and status synced from your connected channels.
- Customer data: names, contact details, and delivery addresses needed to fulfil orders, score RTO risk, and send order communications.
- Operational data: courier performance, delivery and return outcomes, and ad performance.
- Account data: the details of the brand and the users who access the platform.
3. How we use data
We process data to operate the connected platform, specifically to:
- Unify and reconcile orders across channels.
- Generate RTO risk scores and support the actions a brand chooses to take.
- Assign couriers, produce tracking, and manage return follow-up.
- Draft ad creative and optimize spend toward delivered, paid orders.
- Send retargeting and recovery messages within the frequency and opt-out rules a brand configures.
- Produce analytics on profit, retention, and performance.
4. Model training
Risk and ad models improve using the delivered-versus-returned outcomes within a brand\u2019s own account, so accuracy stays local to that brand. A brand\u2019s data is not exposed to other brands.
5. Data isolation and security
Each brand\u2019s data is isolated from every other brand. Information is encrypted in transit and at rest, access follows least-privilege principles, and high-impact actions on ads and high-risk orders keep a human in the loop.
6. Sharing with integrations
To deliver the service, data is shared with the third-party systems a brand connects, such as couriers, ad platforms, payment providers, and messaging channels. Data is shared only as needed to perform the requested function.
7. Messaging and consent
Order and win-back messages sent over WhatsApp, email, SMS, or IVR follow the consent and opt-out settings configured by the brand. Recipients can opt out, and those choices are respected across future messages.
8. Retention
Data is retained for as long as an account is active and as needed to provide the platform, meet legal and tax obligations such as GST e-invoicing, and resolve disputes. On account closure, data is deleted or returned in line with the applicable agreement.
9. Your rights
Depending on applicable law, individuals may request access to, correction of, or deletion of their personal data. Because HANIVAR processes customer data on behalf of brands, requests from a brand\u2019s customers are directed to that brand, and we support brands in fulfilling them.
10. Contact
Privacy questions can be sent to contact@hanivar.com.