Compliance

Yes. All connections to QDroid — the dashboard and every public Storefront — are served over HTTPS via Cloudflare.

We honour GDPR data-subject rights (access, rectification, erasure, portability, objection) for personal data we hold, on request, as described in our Privacy Policy. We have not undergone a formal third-party GDPR compliance audit.

We honour CCPA rights to know and delete personal information for California residents, as described in our Privacy Policy, and we do not sell personal information.

QDroid is based in India and processes personal data consistent with India's Digital Personal Data Protection Act, 2023. We honour Data Principal rights — access, correction, erasure, withdrawal of consent, and grievance redressal — as described in our Privacy Policy. We have not undergone a formal third-party audit against the Act.

Not currently applicable. QDroid does not process, transmit, or store card or other online payment data — orders are settled directly between Customers and Merchants outside the Platform. If QDroid adds online payment processing in the future, this page will state the PCI DSS scope and approach at that time.

Order SMS sent through QDroid is transactional only and is delivered via a DLT-registered sender ID ("QDROID") through Amazon Web Services, in line with Indian telecom (TRAI/DLT) requirements. QDroid does not send promotional or marketing SMS.

QDroid has not undergone a SOC 2 or similar independent audit. Our infrastructure providers — Supabase, Cloudflare, and Amazon Web Services — maintain their own security and compliance programs; details are available from those providers directly. Pursuing an independent audit for QDroid itself is not currently in progress.

If a compliance detail your business needs isn't covered here, email info@vanixqbit.com and we'll give you a straight answer.