Privacy Policy

Data we collect

• Account details: name, email, phone, and authentication records (OTP or Google Sign-In).
• Orders and addresses required to fulfil deliveries and GST invoices.
• Seller KYC: PAN, GSTIN, and bank details, stored encrypted at rest.
• Device and security logs needed to prevent fraud and keep sessions safe.

How we use it

We use personal data to create accounts, process payments, fulfil orders, run seller payouts, send transactional notifications, and meet Indian tax and record-keeping duties. We do not sell personal data.

Sharing

We share only what is required with payment gateways, logistics partners, and communication providers acting on our instructions. Seller payouts use verified bank details. Staff access is limited to operators listed for the admin console.

Retention and rights

Financial records are retained for eight years. Account deletion anonymizes personal identifiers while preserving ledger integrity. You may request access, correction, or deletion at support@aapnacart.com.