BlueRickshaw operates a business-to-business platform on which distributors list stock and retailers order it. This policy explains what we collect, why, and what you can ask us to do about it. It applies to the BlueRickshaw web application, our WhatsApp ordering assistant, and our voice ordering line.
This service is intended for businesses. We do not knowingly provide it to individuals acting as consumers, and we do not knowingly collect information from anyone under 18.
Who we are
The data controller is [registered legal entity name], trading as BlueRickshaw, at [registered office address]. You can reach us at info@bluerickshawusa.com.
What we collect
Information you give us
- Account details — name, email address, phone number, and the organisation you belong to. Your email address is your login identifier.
- Business details — for retailers and distributors: retailer or company name, business address and pincode, and tax registrations such as GSTIN and PAN where these are required to raise a compliant invoice.
- Orders and stock — what you order, what you hold, what you receive, prices, and the documents generated from them (proforma invoices, purchase orders, goods receipt notes, delivery notes).
- Messages — the content of orders you place through our WhatsApp assistant or voice line, including a transcript of the call.
Information we generate
- Activity records — who signed in, and who created, changed or cancelled a record. These exist so a disputed order can be traced, and we cannot switch them off for an individual account.
- Technical data — IP address and browser details, used for security, including blocking repeated failed sign-in attempts.
Signing in with Google
If you choose to sign in with Google, Google confirms to us that you control a verified email address. We use it only to find the BlueRickshaw account that already has that address. Signing in with Google never creates a new account, and we do not receive your Google password. We request no access to your Gmail, Contacts, Drive or Calendar.
Why we use it, and on what basis
- To provide the service — creating accounts, showing you the catalogue you are entitled to see, routing orders to the right distributor, tracking stock and shipments. This is necessary to perform our contract with you.
- To meet legal obligations — issuing tax-compliant invoices and keeping the records that tax law requires us to keep.
- To keep the platform safe — detecting misuse, rate-limiting sign-in attempts, and maintaining the audit trail. This is our legitimate interest in running a secure service.
- To communicate — order confirmations, dispatch notices and account notices are part of the service. Marketing messages, if we ever send them, go only to people who have opted in, and every one carries a way to stop.
Who can see your information
The platform is multi-tenant, and separation between tenants is enforced in the software rather than by convention:
- A distributor sees its own organisation, its own staff and stock, and the retailers it trades with. It cannot see another distributor’s records.
- A retailer sees its own retailer, its own orders, and the catalogue offered to it.
- BlueRickshaw staff can see across the platform, because operating it requires that. Access is governed by an assigned role.
We also use service providers who process data on our instructions: cloud hosting and storage, email and WhatsApp delivery, payment and logistics partners where relevant, and AI providers that help interpret ordering messages and match product listings. We share only what each needs to do its job, and we do not sell personal information to anyone.
We may disclose information where the law requires it, or to establish or defend a legal claim.
Where it is stored
Data is held on servers we control and is encrypted in transit. Passwords are stored only as salted bcrypt hashes — we cannot read them, and nobody at BlueRickshaw can tell you your password. Some of our service providers process data outside your country; where that happens we rely on their contractual data protection commitments.
How long we keep it
Account and transaction records are kept for as long as your organisation uses the platform, and afterwards for as long as tax and company law require — [retention period, e.g. eight years from the end of the financial year]. Security logs are kept for a shorter period. When a retention period ends, records are deleted or anonymised.
Your rights
You can ask us to give you a copy of the personal information we hold about you, correct it if it is wrong, delete it where we are not obliged to keep it, or restrict how we use it. Write to info@bluerickshawusa.com and we will respond within the period the applicable law allows.
Two honest limits. Where you are a member of a distributor or retailer organisation, some records belong to that organisation rather than to you, and we may need to refer your request to them. And we cannot delete an entry from the audit trail attached to a completed transaction, because its purpose is that it cannot be edited after the fact.
Grievance officer
Under India’s Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021, complaints may be addressed to our Grievance Officer: [officer name], [officer email], [postal address]. We acknowledge complaints within 24 hours and aim to resolve them within 15 days.
Changes
If we change this policy we will update the date at the top of this page, and tell account holders directly where the change is significant.