Privacy Policy

We only collect information needed to run your account, process your orders, and support you afterwards.

• Account details — your email address, and your name if you choose to provide it, when you create an account.
• Order details — the name, phone number, and shipping address you enter at checkout, along with the items, sizes, and amounts in that order.
• Content you write — product reviews, ratings, and wishlist selections saved to your account.
• Technical data — basic device and browser information collected automatically by our hosting provider to keep the site secure and working.

We never see or store your card, UPI, or netbanking details. All payments are processed by Razorpay, a PCI-DSS compliant payment gateway, and your payment credentials go directly to them.

What we do store is the outcome of a payment: whether it succeeded, the amount, and a reference ID, so we can match a payment to your order and help if something goes wrong.

• To process, ship, and track your orders.
• To keep you signed in and to show your saved addresses, cart, wishlist, and order history.
• To respond when you contact support.
• To send transactional email about an order you placed. We do not send marketing email unless you ask us to.
• To recommend products that other customers frequently bought together.
• To answer questions you ask the shopping assistant, including looking up an order when you give us its order ID.
• To detect and prevent fraud and abuse of the store.

Your information is stored across a small number of managed services, each handling a specific part of the platform:

• Supabase — account authentication and session management.
• PostgreSQL (hosted by Supabase) — orders, payments, and inventory records.
• MongoDB Atlas — your profile, saved addresses, wishlist, reviews, and shopping assistant conversations.
• Upstash Redis — your shopping cart, which is deleted automatically after 30 days of inactivity.
• Neo4j Aura — which products are bought together, linked only to order IDs. It holds no names, contact details, or addresses.
• Groq — processes the messages you send to the shopping assistant in order to generate replies.
• UploadThing — product images and media.
• Vercel — website hosting and delivery.
• Razorpay — payment processing.

We use cookies to keep you signed in between visits. These are strictly necessary — without them you would be logged out on every page.

We also use your browser’s local storage to remember your cart so it loads instantly, even before the server responds. You can clear this at any time through your browser settings, though doing so will empty your cart on that device.

We do not use advertising or cross-site tracking cookies.

We do not sell your personal information, and we do not share it for advertising.

We share information only with the service providers listed above, strictly to the extent they need it to perform their function, and with delivery partners who need your shipping address to bring you your order. We may also disclose information where we are legally required to.

You can exercise any of the following by writing to us at the address at the bottom of this page:

• Access — request a copy of the personal information we hold about you.
• Correction — update your profile and saved addresses at any time from your account page, or ask us to correct anything else.
• Deletion — request that we delete your account and associated personal data. Note that we must retain order and payment records where tax and accounting law requires it.
• Withdraw consent — ask us to stop processing your information, understanding that we may then be unable to provide parts of the service.

Account and profile information is kept for as long as your account is open. Order and payment records are kept for as long as tax and accounting law requires, even after an account is closed. Abandoned cart data expires automatically after 30 days, and shopping assistant conversations are deleted automatically 30 days after your last message.

All traffic to this site is encrypted over HTTPS. Access to sensitive records such as order details is verified on our servers against your signed-in session, never trusted from your browser alone, and order tracking requires both an order ID and the email address the order was placed under.

No system can promise perfect security, but we take reasonable technical and organisational measures to protect your data, and we will notify you if a breach affecting your information occurs.

This store is not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has provided us information, please contact us and we will delete it.

We may update this policy as the store evolves. When we do, we will revise the "last updated" date at the top of this page. Material changes will be communicated to account holders by email.