Effective Date: July 13, 2026
Website: https://chhittoo.app/privacy-policies/vendor

YashiTech Solutions Pvt. Ltd. ("we," "our," or "us") respects your privacy. Chhittoo Vendors is our merchant-facing companion app to Chhittoo, operated by YashiTech Solutions. This Privacy Policy explains how Chhittoo Vendors collects, uses, and protects your information when you use our mobile app and associated services as a vendor-partner.

This policy applies specifically to the Chhittoo Vendors app. If you also use the main Chhittoo customer app, that usage is governed by our separate Chhittoo Privacy Policy at https://chhittoo.app/privacy-policies.

1. Information We Collect

1.1 Information You Provide Directly

• Account information: full name, business name, email address, phone number, and password when you register as a vendor.

• Business verification information: business registration documents (where applicable), tax or license information (if required), business address, and any other documentation requested during onboarding to verify your business.

• Business information: business name, category, description, logo, cover images, operating hours, service area, menu or product catalog, pricing, delivery availability, and contact information.

• Payment information: bank account details or other supported payout information required for receiving settlements.

• Communications: messages you send to our support team, customer service inquiries, and feedback you provide.

1.2 Information Collected Automatically

• Order information, including order history, preparation times, accepted and cancelled orders, order values, timestamps, and transaction records.

• Location data, where applicable, including your business location and, if enabled, your device's location while using certain features of the app.

• Device information, including device model, operating system version, unique device identifiers, push notification tokens, and app version, for compatibility, delivering order notifications, and troubleshooting.

• Usage information, including how you interact with the app, feature usage, crash reports, and diagnostic information to improve the Service.

1.3 Information From Customers

When a customer places an order, we provide you with only the information necessary to fulfill it, including:

• Customer name

• Delivery address (when applicable)

• Phone number (only where required for order fulfillment)

• Ordered items

• Order notes

• Delivery instructions

2. Business Information and Location

Business information is essential for operating the Chhittoo Vendors platform.

During onboarding, we collect your business location and address to verify your service area and display your business to nearby customers.

If your device location is enabled while using the app, it may be used to:

• Verify your business location.

• Improve order assignment and delivery coordination.

• Help troubleshoot operational issues.

Unlike the Chhittoo Riders app, Chhittoo Vendors does not require continuous background location tracking for normal operation. Location access in Chhittoo Vendors is used only in the foreground, at the specific moments described above (such as during store setup), not continuously in the background.

We do not use your location for advertising purposes, and we do not sell your location data to third parties.

You may disable device location permissions at any time through your device settings. Profile → Permissions within the app lets you review current permission status and grant a permission you haven't yet enabled, but — like all Android apps — Chhittoo Vendors cannot revoke a permission on your behalf once granted; that can only be done through your device settings. Some location-dependent features may become unavailable if disabled.

3. How We Use Your Information

We use the information we collect to:

• Verify your business identity and eligibility to use the platform.

• Display your business, products, menus, pricing, and operating hours to customers.

• Receive, process, and manage customer orders.

• Coordinate order pickups with delivery partners.

• Process settlements and payment records.

• Provide customer support.

• Send notifications about new orders, account updates, payouts, and important service announcements.

• Improve and troubleshoot the app.

• Detect fraud, abuse, or unauthorized use.

• Comply with legal and regulatory obligations under the laws of Nepal.

4. How We Share Your Information

With customers: Customers may see your business name, logo, business address, operating hours, product listings, prices, ratings, and other information necessary to place orders.

With delivery partners: When an order requires delivery, riders receive only the information necessary to complete pickup and delivery, including business location, order number, pickup instructions, and customer delivery details.

With service providers: We use trusted third-party service providers, such as cloud hosting, push notification providers (e.g. Firebase Cloud Messaging), payment processors, and mapping services, solely to operate the platform. These providers receive only the information necessary to perform their services and may not use it for other purposes.

For legal reasons: We may disclose information when required by law or where necessary to protect the rights, property, safety, or security of YashiTech Solutions, our vendors, customers, delivery partners, or the public.

We do not sell your personal or business information to third parties.

5. Android Permissions — What We Use and Why

The table below lists the Android permissions requested by Chhittoo Vendors and why each permission is required.

Permission Why We Need It

Internet Required for login, receiving orders, syncing your store's products and inventory, processing payments, and communicating with our servers.

Post Notifications (Android 13+) To notify you immediately about new orders, order status changes, payouts, and important account updates.

Use Full Screen Intent To display an urgent, ringing full-screen alert for a newly confirmed order — similar to an incoming call or alarm — so you don't miss time-sensitive orders even when your device is locked.

Approximate and Precise Location (Optional) To verify your business location during setup and keep your service area accurate. This permission is optional — declining it does not prevent you from using the rest of the app, though some location-assisted setup features will be unavailable.

We do not request access to your camera, photo library, contacts, SMS messages, call logs, microphone, or any other permission not listed above.

When you upload a store logo, cover photo, or product image, Chhittoo Vendors uses your device's built-in photo picker to let you choose the image. This picker is provided by your device's operating system, runs independently of our app, and shares only the specific photo you select — Chhittoo Vendors does not request or receive broad access to your camera or photo library.

6. Data Retention

We retain your account information, business information, transaction history, and order records for as long as your vendor account remains active and for a reasonable period afterward to comply with legal, accounting, tax, and dispute-resolution obligations.

You may request deletion of your account and associated data at any time, subject to applicable legal retention requirements.

7. Data Security

We use industry-standard security measures, including encrypted network communications, secure authentication (including optional email-based two-factor verification for your account), and access-controlled backend infrastructure, to protect your information.

Although we work diligently to safeguard your data, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights and Choices

You may:

• Access and update your business information through the app.

• Update menus, products, pricing, operating hours, and contact details.

• Request a copy of the personal information we hold about you.

• Request deletion of your account and associated data, subject to applicable legal obligations.

• Review current location and notification permission status from within the app under Profile → Permissions, and grant a permission from there if not yet enabled. To disable a permission you've already granted, use your device's Settings app — no Android app, including ours, is able to revoke its own previously granted permissions.

To exercise any of these rights, contact us using the information provided in Section 11.

9. Children's Privacy

Chhittoo Vendors is intended for use by businesses and individuals who are legally capable of entering into binding agreements.

We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time.

If we make material changes, we will notify you through the app or by other reasonable means before the changes become effective.

The Effective Date at the top of this Privacy Policy reflects the most recent revision.

11. Contact Us

If you have any questions about this Privacy Policy or how your information is handled, contact us at:

YashiTech Solutions Pvt. Ltd. Dharan-16, Sami Chowk Sunsari, Koshi Province, Nepal

Email: yashitechsolutions@gmail.com Phone: +9779712026890