Privacy Policy

We collect the following types of information when you use our platform:

We use your information to:

• →Process and fulfil your orders, and send order confirmation and status updates
• →Create and manage your account
• →Send OTP codes for email verification and password reset
• →Respond to your support queries and return requests
• →Improve our website, product listings, and user experience
• →Send transactional notifications (order shipped, delivered, etc.)
• →Comply with legal obligations under Indian law

We do not send promotional emails or marketing messages without your explicit consent.

We do not sell, rent, or trade your personal information. We share it only with:

We take reasonable measures to protect your information:

• →Passwords are hashed using bcrypt — we cannot read your password
• →OTP codes are hashed before storage and expire within 10 minutes
• →All data is transmitted over HTTPS (TLS encryption)
• →Access to your account data is protected by JWT-based authentication
• →Admin access is further protected by two-factor authentication (TOTP)

No system is 100% secure. If you suspect any unauthorised access to your account, contact us immediately.

We use browser local storage (not cookies) to keep you signed in across sessions. This stores your authentication token locally on your device. We do not use tracking cookies or third-party advertising cookies.

You can clear this data at any time by logging out or clearing your browser's local storage.

You have the following rights over your personal data:

• Access:Request a copy of the personal data we hold about you
• Correction:Update your name, phone number, or address via your profile page
• Deletion:Request deletion of your account and associated personal data
• Portability:Request your order and account data in a readable format

To exercise any of these rights, contact us at the details below. We will respond within 30 days.

We retain your account and order data for as long as your account is active or as needed to fulfil legal and tax obligations. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law (e.g., GST records, invoices).

Our platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. We encourage you to review this page periodically. Continued use of our platform after changes constitutes acceptance of the updated policy.