Privacy Policy
Last updated: 3 October 2026
Catalogue Manager is an online service. Businesses use it to keep their product catalogue and customers, make line sheets, and send them to buyers on WhatsApp. This policy explains what personal data it handles, why, and the choices you have.
Who we are
Catalogue Manager is run by Aries Media Company, a sole proprietorship in India ("we", "us"). Address: 18B, Aditya, Saraini, Tarkulwa, Near Shiv Mandir, Deoria, Uttar Pradesh 274408. Email: ariesmediacompany@gmail.com.
Who this policy covers
- Businesses that sign up, and the users they add (the staff who sign in).
- Buyers: the customers a business keeps in Catalogue Manager or messages on WhatsApp through it.
Our role
- For business and user account details, we decide how the data is used. Under the Digital Personal Data Protection Act, 2023, we are their Data Fiduciary.
- For buyers' details and WhatsApp conversations, each business decides how they are used. We handle them only to provide the service to that business, as its Data Processor.
- Buyers should contact the business first. We will help the business respond.
What we collect
| Data | Details | Why |
|---|---|---|
| Business details | Business name, contact person, email, phone, Shopify shop address | To run the account and contact the business |
| User accounts | Name, email and role. Passwords are stored only in a scrambled form (a hash) that we cannot read | To sign users in and control what each can do |
| Sign-in sessions | A session record and one cookie | To keep you signed in, for up to 7 days |
| Buyer details | Name, phone, email, GST number, billing and shipping address, payment terms and buyer type, as the business enters or imports them | So the business can make line sheets for its buyers and contact them |
| Catalogue and line sheets | Products, prices, photo links, line sheets and their earlier versions | To provide the service |
| Change history | Who changed what, and when | Security and accountability within each business |
| WhatsApp connection | The business's WhatsApp Business account and phone number details from Meta, and an access token stored encrypted | To send and receive WhatsApp messages for the business |
| WhatsApp messages | Sent: the buyer's number, the message template, the file name, delivery status and times, and how Meta charged it. Received: the sender's number, the text or button tapped, and the time | To show the business what was delivered and read, and its buyers' replies |
| WhatsApp consent | Whether a buyer agreed to receive WhatsApp messages, when and how, and when they asked to stop | So marketing messages go only to buyers who agreed |
| Service emails | Email address | Sign-up codes, password resets, security codes and account status emails |
| Technical logs | IP address, browser type, the address requested, the time and the result | Security and fixing faults |
We do not collect payment card details, government ID numbers (other than a GST number a business enters) or location. We use no advertising, analytics or tracking tools, and we do not sell personal data.
How we use it
- To provide Catalogue Manager to each business and its users.
- To keep accounts secure, for example by limiting sign-in attempts from one address.
- To send service emails. We send no marketing of our own to buyers.
- To send the WhatsApp messages a business chooses to send, and show their delivery status and replies.
- To answer questions and complaints, and to meet legal duties.
- Messages go through Meta's WhatsApp Business Platform. Meta handles them under its own terms and privacy policy.
- A business may send marketing messages only to buyers who agreed to receive them.
- A buyer can stop marketing messages at any time by tapping "Stop promotions" or replying "stop". We record this, and the business can no longer send them marketing messages.
- To send a line sheet, its PDF file is uploaded to Meta. Meta keeps it for a limited time under its own terms.
- When a business disconnects WhatsApp, we delete its access token at once. Its message history stays with its records until they are deleted.
Who else handles the data
| Service | What for | Where |
|---|---|---|
| Google Cloud | Hosting and database | Mumbai, India |
| Google (Gmail) | Sending service emails | May be outside India |
| Meta (WhatsApp Business Platform) | WhatsApp messages, for businesses that connect WhatsApp | May be outside India |
| Shopify | We read a business's public product list to show photo links. We send Shopify no personal data | Not applicable |
We also share data when the law requires it, for example under a court order. If Aries Media Company's business is transferred, the data moves with it and stays under this policy.
Where it is stored
In India, on Google Cloud in Mumbai. Google and Meta may process some data outside India under their own terms, as Indian law allows.
How long we keep it
| Data | Kept until |
|---|---|
| Business, users, buyers, catalogue, line sheets, WhatsApp messages | The business deletes them, or its account is deleted |
| A closed business account | Deleted permanently 30 days after the business asks us to close it. The business can change its mind until then |
| Sign-in sessions | 7 days, or until you sign out |
| Email codes and links | Codes 15 minutes; password reset links 1 hour |
| Technical logs | 30 days |
| Backups | 7 days |
| The record that a business was deleted | Its name and the date, kept as our record of the deletion |
Security
- Every page and message travels encrypted (HTTPS).
- Passwords are stored only in scrambled form, and WhatsApp access tokens are stored encrypted.
- Each business's data is kept apart inside the database, so one business cannot see another's.
- Only people who need it have access, and changes are recorded in the change history.
If a breach affects your personal data, we will tell you and the Data Protection Board of India, as the law requires.
Your rights
Under the Digital Personal Data Protection Act, 2023, you can ask us to:
- tell you what personal data we hold about you and how we use it;
- correct, complete or update it;
- erase it, unless the law needs us to keep it;
- stop using it where you gave consent (this does not undo what was done before);
- let a person you nominate act for you if you die or cannot act.
Business admins can correct their business's and buyers' details in the app themselves. Buyers should ask the business that holds their details; you can also write to us and we will pass it on.
Write to ariesmediacompany@gmail.com. We reply within 30 days. If you are not satisfied, you can complain to the Data Protection Board of India.
Cookies and browser storage
- One sign-in cookie, needed to keep you signed in. It is not used for tracking.
- Your browser remembers your column widths and notifications, on your device only.
Children
Catalogue Manager is for businesses. It is not meant for anyone under 18, and we do not knowingly collect children's data.
Grievance Officer
Aditya Pandey, Aries Media Company, 18B, Aditya, Saraini, Tarkulwa, Near Shiv Mandir, Deoria, Uttar Pradesh 274408. Email: ariesmediacompany@gmail.com. We reply within 30 days.
Changes
We post any change here with a new date. If a change affects businesses, we tell each one by email before it applies.