Privacy Policy

When you create an account, we store your name, email address, and phone number (if provided). Passwords are never stored by us in plain text — authentication is handled by our infrastructure provider, Supabase, using industry-standard encryption.

To deliver your order, we collect the shipping (and billing, if different) address, recipient name, and phone number you provide at checkout. If you save an address to your account for future orders, it's stored against your account until you remove it.

We keep a record of what you ordered, quantities, prices paid, any coupon used, and the order's payment and delivery status, so we can fulfil your order and provide support if something goes wrong.

All payments are processed directly by Razorpay, a PCI-DSS compliant payment gateway. We do not collect or store your card number, UPI ID, or bank account details — we only receive a payment confirmation and reference ID from Razorpay to mark your order as paid.

We use essential session cookies to keep you signed in. If you add items to your cart before signing in, they're stored in your browser's local storage until you sign in or place an order — this data stays on your device and isn't sent to us until then. We do not use advertising or cross-site tracking cookies.

We do not currently use third-party analytics or tracking services (such as Google Analytics or advertising pixels). Sales and order data is only ever reviewed in aggregate, internally, for store administration.

We share only what's necessary to run your order with: our database and authentication provider (Supabase), our payment gateway (Razorpay), and our transactional email provider (Resend, for order confirmations and updates). We do not sell your personal information to anyone.

We retain account and order information for as long as your account is active, or as needed to meet our legal, tax, and accounting obligations. You can request deletion of your account data at any time, subject to records we're required to keep.

Data is transmitted over encrypted (HTTPS) connections, and access to your information is restricted at the database level so that you can only ever see your own orders, addresses, and account details.