Privacy Policy

1. Who we are

MeroByapaar provides ecommerce software that lets independent merchants create storefronts, receive orders, arrange payments and delivery, and send transactional updates. The public identity of the platform operator is:

2. When this policy applies

This policy applies to MeroByapaar's website, merchant dashboard, hosted storefront infrastructure, support services, and integrations operated by MeroByapaar. Each merchant remains responsible for its products, customer relationship, and merchant-specific privacy notices. A merchant's published store policy may supplement this policy.

3. Information we process

• Merchant and team data: names, email addresses, authentication identifiers, roles, business details, store settings, support communications, subscription and billing records.
• Store and commerce data: catalog content, prices, inventory, policies, domains, orders, transaction status, returns, and fulfilment records.
• Buyer data: name, phone number, email, delivery address, city, order notes, items purchased, payment method and status, and delivery/tracking information.
• WhatsApp integration data: Meta business and WhatsApp Business Account identifiers, phone-number identifiers, display number, encrypted access credentials, approved template information, message identifiers, delivery/read/failure events, consent records, and opt-out requests.
• Payment and delivery data: references and status received from enabled payment and delivery providers. Sensitive payment credentials are handled by the applicable provider rather than intentionally collected through ordinary MeroByapaar forms.
• Technical and security data: IP address, browser and device information, request logs, cookies, session information, error reports, and records used to prevent abuse.

4. Why we use information

We use information to provide and secure the service; authenticate users; create and publish stores; process orders; support payments and delivery; send requested transactional communications; provide customer support; detect abuse; maintain audit and financial records; enforce our terms; and comply with applicable law.

Where consent is required, including for business-initiated WhatsApp messages, the merchant must obtain it before sending. A buyer can withdraw WhatsApp consent by following the opt-out instructions in the message, including replying STOP where supported.

5. Merchants and buyers

For information a merchant collects from its buyers, the merchant determines the commercial purpose and MeroByapaar generally processes that information to provide the platform. Buyers should first contact the merchant about an order, return, correction, or merchant-held customer record. MeroByapaar will assist with valid requests relating to data in our systems.

6. Providers and disclosures

We disclose information only as needed to operate the service, complete a transaction, follow instructions, protect users, or comply with law. Depending on the features used, recipients may include:

• Meta and WhatsApp for account connection, templates, and messaging;
• hosting, database, storage, security, analytics, and email providers such as Vercel, Supabase, Resend, or Brevo;
• payment providers selected for a transaction, such as eSewa;
• delivery providers selected by the merchant, such as Nepal Can Move;
• professional advisers, regulators, courts, or law-enforcement bodies when legally required; and
• a successor in a merger, financing, reorganisation, or sale, subject to appropriate safeguards.

We do not sell personal information or buyer contact lists.

7. International processing

Some technology providers operate infrastructure outside Nepal. Information may therefore be processed in other countries under the provider's contractual, technical, and legal safeguards. Meta and WhatsApp also process information under their own applicable terms and privacy notices.

8. Retention

We keep information only while it is reasonably needed for the purposes described above. Account and store information is normally kept while the account is active. Connection credentials are removed from MeroByapaar when a merchant disconnects WhatsApp. Transaction, invoice, fraud-prevention, security, dispute, and audit records may be retained longer where required by tax, ecommerce, payment, or other law. Residual copies may remain temporarily in protected backups until the applicable backup cycle expires.

9. Security

We use access controls, tenant separation, encrypted transport, restricted service credentials, and encryption for supported integration secrets. No internet service can guarantee absolute security. Please report a suspected security or privacy incident to privacy@merobyapaar.com.

10. Your choices and requests

Subject to applicable law and necessary identity verification, you may ask to access, correct, export, restrict, or delete information about you. Merchants can update many account and store details in the dashboard and disconnect WhatsApp under Dashboard > WhatsApp.

See our Data Deletion Instructions for the request process. We may retain information that law requires us to keep and will explain this when responding.

11. Children

MeroByapaar is a business service and is not directed to children. Merchants must not knowingly use the platform to collect children's information in violation of applicable law.

12. Changes and contact

We may update this policy when our services or legal obligations change. We will publish the revised effective date and provide additional notice when a material change requires it.

Privacy requests: privacy@merobyapaar.com
Customer support: support@merobyapaar.com