Privacy policy

Draft for review. This page is a working draft effective 12 October 2026. The final text is reviewed by the company's legal counsel; the version and date at the top change when it is published.

What we collect and why

• Your mobile number — it is your account. We send one-time codes to it. There are no passwords.
• Delivery addresses and map pins — so a shop or a delivery partner can reach you. Only for your orders.
• Orders, ratings, reports — the record of what you bought, from whom, and what you said about it.
• Shop owners and delivery partners: the identity papers you choose to send for verification. They are stored encrypted; only the last four characters of a number are ever shown; every time a staff member looks at a document, the look is logged with their name and reason.
• Device and app data — a push-notification token if you allow notifications, and your location while a delivery partner is available or on a job (never otherwise).

What we never do

• We never sell personal data.
• We never show a buyer's phone to anyone but the shop and the delivery partner serving that order.
• We never store a full Aadhaar number.

How long we keep it

Sign-in codes: 24 hours. Sessions: 90 days. Location pings: 24 hours. Orders and money records: as long as the law requires. Identity papers: until a year after the account closes.

Your rights

From your profile you can export everything we hold about you as one file, and close your account. After a 90-day grace period personal fields are erased; order and money facts remain without your name, as the law requires. This policy follows the Digital Personal Data Protection Act, 2023.

Grievance officer

[Name to be appointed], [email], BNQ InTech (OPC) Pvt. Ltd., Pune. We acknowledge within 48 hours and resolve within 15 days.