Privacy Policy

1. Who we are and what this policy covers

This Privacy Policy is published by Yash Silver House Pvt. Ltd., trading as Yash Ornaments ("we", "us", "our"), a wholesale jewellery business located at Yash Wali Building, 1159/1114, Kucha Mahajani, Chandni Chowk, New Delhi, Delhi 110006, India. It explains how we collect, use, store, share and delete personal information when you use:

• Yash Trade App – our mobile application for jewellery trade customers, published by Yash Ornaments;
• the Yash Ornaments customer enrollment website (this website, register.yashsilver.com), where trade customers register, verify their mobile number and can delete their account;
• related services such as one-time-code SMS messages, customer support, telecalling and reward programmes ("Services").

Yash Trade App is a business-to-business (B2B) application intended for jewellers, retailers and trade partners of Yash Ornaments. Accounts are created on this website and then used in the app. It is not intended for anyone under 18 years of age. Both systems are operated by Yash Silver House Pvt. Ltd.; the customer record you create here is the same record the app uses.

2. Summary at a glance

3. Information we collect

3.1 Information you give us

• Account and enrollment details: name, mobile number, shop or business name and location/city (typed by you as free text — not derived from your device).
• Verification codes: the one-time codes you enter to sign in, verify or change your mobile number, or delete your account. Codes are stored only in hashed form and expire within 10 minutes.
• Business activity in the app: product enquiries and call-back requests with any notes and preferred time you add, cart and wishlist contents, reward points and reward history, appointment or exhibition requests.
• AI assistant messages (optional): the text of each message or quick prompt you send to the assistant, and its replies — only after you allow the assistant (Section 7).
• Consents: your acceptance of our Terms & Conditions and this Privacy Policy, your AI-assistant consent version, and — on this website's deletion page only — any optional win-back or callback consent you give (Section 11).
• Notifications (app, optional): if you allow notifications, the push-notification token your device issues for the app, the platform (Android/iOS), app version and device name, and your choice whether promotional alerts may be sent (operational alerts such as query updates follow your role and cannot be switched off separately). The token is unlinked when you sign out and deleted with your account.

3.2 Information we create about you

• Records created by our telecallers and sales executives about your enquiries, follow-ups and assignments.
• Reward points, scheme status and the customer code assigned to your account.
• A server-generated account ID (not a device identifier), carried in your sign-in token and in every record about you.
• Delivery status of one-time-code SMS messages, as reported by our SMS provider (kept 90 days).
• Notification records in the app: the alerts placed in your in-app inbox (title, text, read time; kept 180 days) and, per message we send, the acceptance ticket and receipt reported by the push service.
• Product-view impressions in the app: which catalogue items were actually shown on your screen and when. They are used only to order items you have not yet seen first on the Home screen; the short-lived ordering session expires after 6 hours and the impressions are deleted with your account.

3.3 Information we do not collect

We do not collect email addresses, government identification numbers, payment-card details or payment history, precise GPS location, your contact list, call logs, the content of your SMS messages, photos or files from customers, crash logs or performance diagnostics, or hardware or advertising identifiers. The only device-issued value we hold is the optional push-notification token described in Section 3.1. Catalogue and customer searches are answered from our database and not stored. Payment for goods is arranged directly with Yash Ornaments outside the app.

For abuse prevention, the app and this website count sign-in and one-time-code requests per network address, browser and phone number using keyed hashes in short time windows (app: 10 minutes; website: 10-minute windows that expire after 20 minutes). The address itself is not stored in readable form and is never linked to your profile.

4. Device permissions and SDKs

5. How we use your information

• To create and secure your account – verifying your mobile number with a one-time code, signing you in, revoking sessions when you delete your account, and preventing misuse (rate limiting with keyed hashes).
• To provide the Services – showing catalogues, rate lists, schemes and showroom information; processing your enquiries, call-back requests, cart and wishlist; assigning your enquiries to a telecaller.
• To run the Yash Ornaments rewards programme – tracking points, redemptions and benefits.
• To communicate with you – sending one-time codes and service updates by SMS or phone call; and, only with your separate consent, contacting you about offers.
• To answer AI-assistant questions – only when you have allowed the assistant (Section 7).
• To understand the business – our admin dashboards aggregate enquiry, customer and reward records; anonymous deletion statistics help us understand why customers leave (Section 11).

We use your information only for the purposes described here. We do not use it for third-party advertising or for profiling unrelated to the Services.

6. Consent and legal basis

We process personal data in accordance with the Digital Personal Data Protection Act, 2023 (India) and other applicable laws. We rely on your consent (given when you accept this policy at enrollment, when you allow the AI assistant, and when you tick an optional box on this website's deletion page), on the need to perform the Services you request, and on our legitimate operational needs such as fraud prevention and keeping proof that a deletion request was honoured. You may withdraw consent at any time (Section 14); withdrawal does not affect processing that already took place.

7. AI business assistant (optional, in the app)

8. Photos and documents uploaded by staff

Photos and documents uploaded by staff. Customers cannot upload photos or files in the app. Authorised Yash Ornaments staff (administrators, billing executives) upload product photographs, promotional banners and PDF catalogues from their device to build the catalogue you see — in the app, or through this website's staff console, which passes the files to the app's servers in chunks. These files are business content and are stored with our storage service provider, Emergent Managed Object Storage, and served to signed-in users through our servers. The provider does not offer a per-file deletion function: when a file is withdrawn from the catalogue we revoke access to it and mark it deleted in our records, but we cannot guarantee that the stored bytes are erased until the files are migrated to a storage service that supports deletion. If a catalogue document ever contains personal data about you, contact us and we will revoke access to it.

9. Service providers and who else sees your data

We do not sell, rent or trade your personal information. Transfers to the service providers below happen only on our instructions; no data is sold, and no advertising, analytics or crash-reporting SDK is embedded in the app.

• Yash Ornaments staff (administrators, telecallers, billing executives, upload executives) see the information their role needs: telecallers and billing staff see your account, enquiry and reward information to serve you; upload executives work only on the catalogue content and see no customer records. Access is role-based, one-time-code protected and recorded.
• Legal and regulatory authorities receive information only under a valid legal request.
• A successor business would receive business records, with notice to you, only in a merger, acquisition or restructuring.
• App marketplaces collect their own installation statistics under their own policies; we embed no store analytics SDK.

10. How we protect your information

• All data is transmitted over HTTPS/TLS; no cleartext traffic is configured.
• One-time codes are hashed, expire after 10 minutes and are limited to a small number of attempts; requests are rate-limited with keyed hashes.
• Staff access requires a one-time-code sign-in, is restricted by role, times out after two hours of inactivity on this website and is recorded.
• Deleting your account bumps a session version so that every existing sign-in token is rejected immediately.
• Service keys between this website and the app are held only in server configuration, never in the browser.

No method of transmission or storage is completely secure. If we become aware of a breach affecting your personal data, we will notify you and the authorities as required by law.

11. What this website itself stores

This website is a front door to the app's customer system; it holds no copy of your account. Its own records are:

12. Deleting your account — what is deleted, kept and not erased

13. How long we keep information

14. Your rights and choices

• Access and correction: view and update your name, shop name and location in the Yash Trade App profile, or ask us to correct them.
• Deletion: delete your account and personal data at any time (Section 12).
• Withdraw AI consent: Profile → AI Data Sharing → Withdraw and delete AI chat history (Section 7).
• Withdraw win-back or callback consent given on this website: tell the caller, or write to info@yashornaments.in; the details are erased immediately.
• Nominate: under Indian law you may nominate a person to exercise these rights on your behalf in case of death or incapacity.
• Complain: raise a grievance with our Grievance Officer (Section 19). If unresolved, you may approach the Data Protection Board of India.

We respond to requests within 30 days. To protect your account we may ask you to verify your mobile number with a one-time code before acting on a request.

15. Staff accounts and store review accounts

Staff accounts. Yash Ornaments staff (administrators, telecallers, billing executives and upload executives) sign in with their phone number and a one-time code. Their name, phone number and the actions they take in the app (assignments, notes, uploads) are kept as the business's staff record and are not covered by the customer self-service deletion above. An administrator may change the login number of a telecaller, billing executive or upload executive after the app has checked who holds the new number; the change is recorded with a reason, signs that staff member out everywhere and requires a one-time code at their next sign-in. Administrators change their own number only themselves, with a one-time code sent to the new number. A staff account is disabled (reversibly) or deleted by an administrator; deletion removes or anonymises the personal data through the same process as customer deletion while completion attribution stays in the business ledger.

Store review accounts. App-store review teams may sign in to the app with a Reviewer ID and access key issued privately by Yash Ornaments (app: Login → Help → App review access). These accounts see only clearly labelled sample data; SMS and calls are simulated. Their records are kept in separate review__-prefixed collections inside the app's main database, isolated by the server from live customer data. No separate review database exists and this website neither stores nor authenticates reviewer accounts.

16. Children

The Yash Trade App and this website are intended for business users aged 18 and above. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

17. Where your data is stored

The app backend and this website are hosted by Emergent; one-time-code SMS are sent by MSG91 from India; the optional AI assistant is answered by Anthropic in the United States via the Emergent LLM gateway (Section 9). The hosting and storage regions are as stated by Emergent and are pending the owner's confirmation with the provider; they will be named here once confirmed. Wherever your data is processed, we apply the safeguards described in this policy.

18. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top and the "What changed" box show the current version. For significant changes we notify you in the app or on this website before the change takes effect. This policy is published at a permanent public URL so that you can review it at any time.

19. Contact us / Grievance Officer