Privacy

Draft for beta · Last updated 3 September 2026

If you buy something

We collect only what is needed to deliver your order:

• your name, phone number and, if you give one, your email;
• your delivery address and any note you add for the seller;
• the payment reference and screenshot you upload as proof.

You do not need an account to buy. We do not ask you to create one, and we do not build a profile of you across sellers.

Who sees it

The seller you bought from sees your contact and delivery details, because they need them to post your parcel. No other seller can see them — that is enforced both in our code and by the database itself.

Payment screenshots

A payment screenshot usually shows your bank balance and recent transactions. We treat it as the most sensitive thing we hold:

• it is stored privately and never has a public web address;
• only the seller for that order can open it, checked at the moment they ask;
• every time one is opened, we record who opened it;
• it is deleted 90 days after the order is delivered.

If you sell

We store your phone number, shop details and the UPI ID you choose to display to buyers. Your sign-in codes are stored hashed with a secret that is not in the database, so a database leak alone does not let anyone sign in as you.

What we do not do

• We do not sell or rent your data.
• We do not run advertising trackers.
• We do not handle or store card or bank credentials — payment happens in your own UPI app.

Browsing data

We record which products are viewed so that we can show buyers related things from other sellers. That record is tied to a random value in your browser for the length of a visit. It is not linked to your name, your phone number or an order.

How long we keep things

• Payment screenshots — 90 days after delivery, then deleted.
• Order records — retained so both you and the seller keep a record of the sale, and to meet tax obligations.
• Sign-in codes — minutes; they expire and are burned on use.
• Browsing events — aggregated, and not retained at an individual level beyond what recommendations need.

Your rights

You can ask what we hold about you, ask for it to be corrected, or ask for it to be deleted. Write to the address on the contact page and we will respond within 30 days. Some order records must be kept for tax reasons even after a deletion request; we will say so if that applies.