Privacy policy
Last updated: 11 October 2026
Arraay is operated by Billiton Services Private Limited (CIN U51909KA2016PTC097521, GSTIN 29AAGCB9340M1Z5). This policy explains what personal data we handle, why, and the choices you have. It applies to our website, the seller panel, and the shops sellers run on Arraay.
Who is responsible for your data
- Sellers and website visitors: Billiton Services Private Limited decides how this data is used (we are the Data Fiduciary under the Digital Personal Data Protection Act, 2023).
- Customers of a shop: the shop you buy from decides how your order data is used for that order. We process it on the shop's behalf to run the shop, take payment and send updates. Some data, like your login and the one account you use across shops, is also ours to look after.
What we collect
- Sellers: name, business name, email, mobile number, business details you choose to add (address, GSTIN, PAN), bank or UPI details for payouts, plan and payment history, and how you use the panel.
- Shop customers: name, mobile number, email, delivery address, order details, payment status (never your full card or bank details: payment partners handle those), messages you send a shop, reviews, photos you upload for an order or a return, and whether you agreed to WhatsApp updates.
- Everyone: device and browser details, pages visited and where a visit came from (for example an Instagram post), collected by us, not by advertising trackers.
Why we use it
- To provide the service: shops, orders, payments, invoices, delivery updates and support.
- To send messages you asked for or need: login codes, order updates, and WhatsApp updates only if you agreed. You can stop WhatsApp updates any time from the link in the message.
- To keep the service safe: preventing fraud, abuse and spam, and keeping security logs.
- To meet the law: GST invoices, tax and accounting records, and requests from authorities where the law requires it.
- To improve Arraay using statistics that don't identify you.
We do not sell personal data, and we don't use it for advertising profiles.
Who we share it with
Only with the services needed to run Arraay: payment partners (Razorpay, Cashfree, PhonePe, PayU), messaging (WhatsApp messages sent through AiSensy, a Meta business partner), Instagram (Meta) when a seller connects their account, delivery partners such as Shiprocket when a seller connects one, our hosting provider (Hostinger) and email delivery. Each receives only what it needs. A shop sees the data of its own customers for its own orders; shops never see other shops' customers.
How long we keep it
As long as your account is active and as needed to provide the service. When you delete your account, personal details are removed after 7 days. Orders stay in anonymised form, and tax invoices already issued are kept for as long as the GST law requires (generally 8 years).
Your rights
You can ask to see, correct, download or delete your data, withdraw consent, and nominate someone to act for you. Shop customers can download their data or delete their account from My orders in any shop. Anyone can also write to support@arraay.com. We reply within 30 days.
Security
Data travels over HTTPS. Payment and messaging keys are stored encrypted. Access inside Billiton Services Private Limited is limited to people who need it. If a breach affecting you happens, we will tell you and the Data Protection Board as the law requires.
Children
Arraay is for people aged 18 and over. We don't knowingly collect data of children.
Changes and contact
We'll post changes here and update the date above. Questions: support@arraay.com. Complaints: our Grievance Officer, Srikanth, at info@arraay.com (see Grievance redressal). You may also complain to the Data Protection Board of India.
This page explains our terms in plain words. It is not legal advice.