Privacy Policy

1. What we collect

When you sign up or order we collect: name, mobile number, password (stored hashed), delivery address (line, city, state, pincode), order and payment references, and prize/fulfilment status.

If you use WhatsApp OTP, we process your number to send a verification code through our WhatsApp bridge. If email OTP is used, we process your email for the same purpose.

We may store campaign winner details (including a masked name and optional winner photo if you or an admin upload one) to show on the public campaign banner.

2. Why we use your data

To create and secure your account, send OTPs, take payment, assign prizes, pack and ship via courier (Delhivery) or local delivery, customer support, fraud prevention, and to run mystery-box campaigns.

We do not sell your personal data to unrelated advertisers.

3. Who we share with

Payment processors (e.g. Razorpay) receive what they need to complete checkout.

Couriers (e.g. Delhivery) receive name, phone, and address to deliver the parcel.

Cloud/hosting providers in our infrastructure (for example servers and file storage) process data on our behalf.

We may disclose information if required by law, regulation, or to protect our rights and other customers.

4. Cookies and sessions

We use session cookies so you stay logged in (about 7 days) and to keep the site secure. The store does not rely on third-party ad trackers for signup.

5. How long we keep data

Account and order records are kept as long as needed to fulfil orders, handle disputes, and meet tax/legal record requirements, then deleted or anonymised where practicable.

6. Your choices

You can view account details after login. Delivery address is locked after signup for shipping integrity; contact support if a genuine correction is needed.

To request access, correction, or deletion where the law allows, contact us through the store support channels. We may retain data required for completed orders and legal compliance.

7. Security

We use hashed passwords, HTTPS where configured, and access controls on admin tools. No method of transmission is 100% secure; please use a strong password and do not share OTPs.

8. Children

The service is not directed at children under 18. We do not knowingly create accounts for minors.

9. Updates

We may update this Privacy Policy. The copy you accept at signup applies to that registration. Please review the policy when it is shown again.