Loading page…
What we collect, why, and what we do not do with it.
Draft, not in force
Seller account details, buyer order details including delivery addresses, payment metadata (never full card numbers), and basic usage analytics. Each item needs a stated purpose and retention period.
The lawful basis for each category under the Digital Personal Data Protection Act, 2023, and which processing is necessary to perform the service versus optional.
Payment gateways (Razorpay), email delivery (Resend), hosting (Cloudflare) and any analytics providers. Each processor should be named, with its role and location.
How to access, correct, export or delete your data, how to withdraw consent, and how long a request takes. Must name a grievance officer, as the DPDP Act requires.
Encryption in transit and at rest, access controls, and the breach-notification process.
Which cookies are strictly necessary, which are analytics, and how a visitor refuses the optional ones. The language cookie this site sets should be listed here.