Privacy Policy
How Restock handles business profiles, product catalogues, prices, orders, credit, payment records and business confirmation shared by shops and distributors. Last updated: November 2, 2026.
Restock is a B2B ordering, credit, and payments-tracking platform for Indian distributors (dealers) and retailers. This policy describes what information we collect, how we use it, and the choices you have. By using Restock you confirm you are using it for business purposes and are authorised to share the data you provide.
Account details: mobile number used for OTP login and biometric re-login. Business profile: role (dealer or retailer), shop or firm name, owner name, GSTIN, business type and category, delivery and billing address, pincode, contact details, and a photo of the shop front when the app asks for one. Business confirmation: the GSTIN, Udyam registration number or business PAN you ask us to check and, for a shop that uses one, its Shop Act (Shops and Establishments) licence number, the name printed on it, and a photo or PDF of the licence. Licences: the licence number, validity and document you add for regulated lines such as medicines, seeds, fertilisers or pesticides. Dealer catalog and prices: products, brands, categories, pack variants, MRP, selling prices, quantity slabs, free-quantity schemes, price lists and special rates for particular shops, stock, product images, banners, and bank or UPI account details used for collections. Team: the names, mobile numbers and roles of staff a dealer invites. Retailer activity: carts, orders, edits, answers to proposed smaller orders, cancellations, delivery preferences, and credit requests. Payment data: amounts, modes (including a payment split between cash and UPI or bank), UPI references, transaction IDs, and uploaded payment proof screenshots or PDFs. Restock plans: the plan you choose, the amount, the payment status and the payment provider's reference. Invites: when you invite a dealer or a shop to Restock, the name and mobile number you give, so you can send the invite from your WhatsApp and we can recognise them when they join. If you pick them from your phone's contacts, Restock reads only the contact you pick, on your phone, to fill in that name and number; it doesn't read or upload the rest of your contacts. Voice search: if you tap the microphone in search, your phone's own speech service (Google's on Android, Apple's on iPhone, or your browser's) turns what you say into text; Restock receives only that text, as a search, never the recording.
Device and session data needed to keep the app working and secure: device platform (iOS or Android), app version, push notification token, IP address, login timestamps, and limited diagnostic logs and crash reports, which do not include your personal or business details. We do not run third-party advertising trackers in the app.
To authenticate users via OTP and biometric login; to match retailers with relevant dealers and categories; to manage catalogs, carts, orders, smaller-order proposals, returns, and credit notes; to show each shop the prices its dealer has set for it; to record payments, reconcile UPI collections, and calculate outstanding balances; to set and enforce dealer credit limits and payment terms; to compute repayment ratings from verified payment behaviour and overdue orders so dealers can make informed credit decisions; to confirm that a business is genuine and show a "Verified business" badge and, once confirmation is required, to decide whether a shop can place orders or be given credit and which payment accounts shops see; to let a dealer review a shop's licence when the shop asks; to give a dealer's staff access according to their role; to prepare insights and exports for your own account; to bill Restock plans; to send transactional and reminder notifications; to prevent fraud, abuse, and policy violations; and to provide support.
When a dealer extends credit to a retailer, Restock stores the credit limit, credit period, per-order due dates, outstanding balance, verified repayments, overdue history, and a derived repayment rating. This information is visible to the dealer who set the relationship and, in summary form, to the retailer it relates to. Once business confirmation is required, credit can be given only to confirmed shops. Repayment ratings are not credit bureau scores and are not shared with any external credit agency.
Restock is a two-sided platform. Relevant business, catalog, order, payment, credit, repayment, and notification details are shared between the dealer and retailer involved in a transaction. Retailers can see dealer catalogs, the prices set for them, and the credit terms set for them; a shop's price list and special rates are visible only to that shop and its dealer. Dealers can see retailer profile details, order history with their shop, payments, and repayment behaviour. When a shop asks a dealer to approve its licence, that dealer can see the licence number, validity and document. Other businesses can see whether a business is confirmed ("Verified business") and the name confirmed for it, but not the documents behind it. A dealer's staff see the information their role allows. Dealers can block retailers; once blocked, the retailer can no longer browse or order from that dealer. Unrelated retailers and dealers do not have access to each other's private business data. When a business you invited joins Restock, you see its name; it sees who invited it.
To confirm a business, Restock checks the GSTIN, Udyam registration or PAN you give us against government records through Cashfree Payments, a licensed verification service, and compares the name on record with your business's name. To confirm a dealer's payment account, Cashfree sends ₹1 to the bank account or UPI ID and returns the account holder's name. We keep what was checked, the result, the name on record returned by the check, and when it was done — not copies of your certificates. A Shop Act licence is checked by a person at Restock: the number, the name and the photo or PDF you upload are stored privately and seen only by Restock's reviewers. You can confirm with a different proof at any time.
Restock is not the system of record for GST invoices. Dealers continue to raise GST invoices in Tally (or their existing accounting software) and may attach the resulting PDF, reference number, or details to a Restock order so both sides have a shared record. Any invoice document a dealer uploads is shared only with the retailer on that order. With Premium trading, the optional Restock Connector for TallyPrime exchanges with the dealer's Tally PC the data needed for the integration — stock, price levels, stock groups, batches, receipts, bill-wise balances and invoice references such as the IRN and e-way bill — and sends the dealer's orders, verified payments and approved credit notes to Tally. With Books or Premium, it reads the business's own books for the Tally tab in the app — every ledger with its balance, open bills owed to and by the business, sales and purchases totalled by day, customer or supplier and item, stock quantities and values, and month-by-month balances for profit and loss and GST — and a ledger's statement when the owner asks for one. Restock stores the synced data so it can be read in the app. These books are shown only to the owner and, where the plan allows, Accounts staff, never to retailers or other businesses. Books is read only: it does not publish a catalogue, receive shop orders or send entries to Tally.
Restock does not store card details and does not act as a payment gateway for payments between dealers and retailers. UPI collection is handled by the dealer's configured UPI handles and the retailer's UPI app; Restock records the transaction reference, amount, mode, and any uploaded proof for reconciliation. Some payment screenshots may be processed locally on the device to extract reference numbers and amounts; the extracted text is stored with the payment record. When you pay for a Restock plan on the Restock website, the payment is processed by Cashfree Payments; in the iOS and Android apps it is processed by Apple (App Store) or Google (Google Play), and RevenueCat tells Restock which plan you bought, when it renews and whether it was cancelled or refunded. Restock does not see or store your card number, UPI PIN or bank login.
Product images, banners, shop photos, payment proofs, invoice attachments, licence documents and Shop Act licences are stored in our cloud storage. Access is restricted by role-based and row-level security rules, and downloads are served via short-lived signed URLs where configured. Users are responsible for not uploading content they do not have rights to share.
Restock sends push notifications and in-app alerts for order updates, smaller-order proposals, payments, credit reminders, due-date alerts, licence decisions, and the results of business checks. Push notifications require a device token, which is stored against your account and revoked on sign-out or uninstall. You can disable notifications from your device settings; transactional emails or SMS are not used as a primary channel.
We use trusted partners to run Restock, including Supabase for authentication, database, and storage; cloud hosting providers for the API and web; an SMS gateway for OTP delivery; a push notification service for alerts; Cashfree Payments for business and bank account checks and for Restock plan payments on the website; Apple, Google and RevenueCat for plans bought in the apps; and a crash-reporting service. These providers process data only on our instructions and under their own security and privacy commitments. We do not sell your data and we do not share it with advertisers or data brokers.
We use OTP-based authentication, biometric re-login secured by the device Keychain or Keystore, role-based access policies, and database row-level security to restrict what each user can see and do. Communication with our servers is encrypted in transit. No system is perfectly secure, so please keep your device locked, do not share OTPs, and sign out of devices you no longer use.
We keep profile, catalog, order, payment, credit, business confirmation, plan, and notification data for as long as your account is active and for a reasonable period thereafter to maintain business records, resolve disputes, and meet legal, tax, and accounting obligations under Indian law. Transaction records linked to GST invoices may need to be retained for the statutory period even after account closure.
You can review and update most business information from inside the app. You can delete your account yourself from Account → Delete account in the app, or without the app from the Delete your account page on restockapp.in. Deleting removes your login and personal details; past orders stay, without your details, for the other business and for tax records. A plan bought through the App Store or Google Play is cancelled there, not by deleting your account. To request a copy of your data or correction of inaccurate data, contact support on WhatsApp at +91 80803 48292 or from the Help & Support section of the app. We will verify the request and respond within a reasonable time. Some records (for example, completed transactions and tax-relevant data) may need to be retained even after deletion of your profile.
Restock is a business platform and is not directed at anyone under 18. We do not knowingly collect data from minors. If you believe a minor has created an account, please contact support and we will close the account and delete the data.
We may update this policy as Restock evolves. Material changes will be communicated in the app or via a prominent notice before they take effect. The "Last updated" date above always reflects the current version.
Any licence, registration, or GST information you provide is stored to display to your counterparties, for your own records and, when you ask, for a dealer to review. Restock does NOT verify or validate licences and takes no responsibility for regulatory compliance. When a shop asks a dealer to approve its licence for a regulated line, that dealer decides for itself; Restock records the decision but does not check the licence. Confirming a business shows who a business is; it does not show that it holds the licences its trade needs. Dealers and retailers are each solely responsible for holding their own valid licences, for verifying the other party's licences and eligibility, and for complying with all applicable laws (for example the Fertiliser (Control) Order, 1985, the Seeds (Control) Order, 1983, and the Insecticides Act, 1968). Restock is a neutral software intermediary and is not a party to any sale.
For privacy questions, data requests, or grievances under the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, contact the Restock support team on WhatsApp at +91 80803 48292 or from the Help & Support section of the app. We aim to acknowledge grievances within 48 hours and resolve them within 30 days.
