Privacy Policy

1. Information We Collect

We collect information you provide directly to us, including:

• Account registration details (name, email, phone number, shipping address)
• Order and payment information necessary to process your purchases
• Communications you send to us, such as inquiries or support requests
• Product reviews and ratings you submit

2. How We Use Your Information

• Process and fulfill your orders, including sending order confirmations and updates
• Communicate with you about your account, orders, and customer support
• Improve our products, services, and website experience
• Send marketing communications (only with your explicit consent)
• Detect and prevent fraudulent or unauthorized transactions

3. Payment Information

All payment transactions are processed through Razorpay, a PCI-DSS compliant payment gateway. We do not store your full payment card details, UPI credentials, or banking information on our servers. Payment data is encrypted and handled directly by Razorpay under their security standards.

4. Data Security

We implement industry-standard security measures including:

• Encryption of data in transit via TLS/SSL (HTTPS)
• Hashed and salted passwords using bcrypt
• JWT-based authentication with short-lived access tokens
• Rate limiting to protect against abuse
• Regular security audits and monitoring

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. You may request deletion of your account and associated data at any time by contacting our support team.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your personal data (subject to legal obligations)
• Restrict or object to processing of your data
• Data portability to another service provider
• Withdraw consent at any time where we rely on your consent

7. Cookies

We use essential cookies for authentication and security purposes. These include session cookies (access tokens, refresh tokens) that are strictly necessary for the functioning of the website. We do not use third-party tracking cookies or advertising cookies without your explicit consent.

8. Third-Party Services

We use the following third-party service providers who may process your data under their respective privacy policies:

• Razorpay — Payment processing
• Sentry — Error monitoring and crash reporting
• Cloudinary — Image and media storage and delivery

9. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.