Privacy Policy

Privacy Policy

Last updated: June 4, 2026

this store ("we", "us", "our") respects your privacy. This policy explains what personal data we collect, why we collect it, how we use and protect it, and your rights regarding that data. By using this store, you agree to this policy.

1. Information We Collect

1.1 Information You Provide

  • Account: name, mobile number, email address, password
  • Address: delivery address, pincode, landmark
  • Order data: products purchased, quantities, special instructions
  • Payment: we do not store full card / UPI details — payment processors (e.g., Razorpay) handle them directly and securely
  • Support: messages you send us via email, WhatsApp, or in-app chat

1.2 Information We Collect Automatically

  • Device: browser type, operating system, screen size, language
  • Usage: pages visited, time spent, clicks, search queries
  • Network: IP address (used for fraud prevention + tenant routing)
  • Cookies / local storage: session tokens, cart contents, preferences
  • Error data: crash reports sent to Sentry (no personal data included)

2. How We Use Your Information

  • Process and deliver your orders
  • Send order confirmations, shipping updates, and delivery notifications
  • Authenticate you and keep your account secure
  • Respond to your support requests
  • Personalize product recommendations
  • Detect and prevent fraud, abuse, or technical issues
  • Comply with legal obligations (tax, GST, consumer law)
  • Improve our products and services through aggregated analytics

3. How We Share Your Information

We do not sell your personal data. We share data only with:

  • Service providers who help us operate (payment processors, delivery partners, SMS/email vendors, cloud hosting). They access only the data needed to do their job.
  • Government / law enforcement, when required by Indian law (e.g., valid court order, subpoena, regulatory request).

4. Data Retention

  • Account data: retained while your account is active.
  • Order history: retained for 7 years (Indian tax / GST requirement).
  • Support messages: retained for 2 years.
  • Analytics / logs: aggregated data retained indefinitely; identifiable logs purged after 90 days.

You may request deletion of your account at any time (see Section 6).

5. Security

We protect your data using industry-standard practices:

  • HTTPS encryption for all traffic (TLS 1.2+)
  • Passwords stored using salted PBKDF2 hashing — never in plain text
  • Refresh tokens stored in HttpOnly cookies (not accessible to JavaScript)
  • Database access restricted to authorized personnel only
  • Real-time error monitoring + intrusion detection

No system is 100% secure. If we ever detect a breach affecting your data, we will notify you within 72 hours as required by the DPDP Act 2023.

6. Your Rights (DPDP Act 2023)

As an Indian resident, you have the right to:

  • Access: request a copy of the personal data we hold about you
  • Correction: ask us to fix inaccurate or incomplete data
  • Erasure: request deletion of your account and data (subject to legal retention requirements)
  • Grievance redressal: file a complaint with our Grievance Officer (contact details below)
  • Withdraw consent: opt out of marketing communications at any time

To exercise these rights, contact our support team from your registered email address or phone number. We will respond within 30 days.

7. Children

This store is not intended for users under 18 years of age. We do not knowingly collect data from children. If we discover a child has registered, we will delete their account promptly.

8. Third-Party Services

We use the following third-party services that may collect data:

  • Vercel — frontend hosting
  • DigitalOcean — backend infrastructure
  • Cloudflare — DNS, CDN, DDoS protection
  • Sentry — error monitoring (no personal data)
  • Brevo (formerly Sendinblue) — transactional email
  • Razorpay — payment processing (when enabled)

Each provider has its own privacy policy.

9. Cookies

See our Cookie Policy for details on what cookies we use and how to manage them.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be notified via email or an in-app banner. Continued use of the store after changes means you accept the updated policy.

11. Contact Us

Grievance Officer (DPDP Act 2023): see our Grievance Redressal page. Response time: within 30 days.

For general questions: our support team