Vendor data, buyer data,
and honest posture.
Security here is described in plain terms and only in ways we can substantiate. We would rather say a small true thing than a large impressive one.
All traffic to the platform is served over TLS. Stored data is encrypted at rest using industry-standard algorithms.
Card and bank details are never stored on our infrastructure. Payments are collected and settled through a regulated payment processor.
Internal access to production data is restricted to a small group with named roles. All access is logged.
Data, plainly listed.
What we hold, why we hold it, how long we keep it - stated in the same words a shopkeeper would use.
Legal shop name, owner name and contact, GST identifier where applicable. Held for the life of the account.
The photographs you upload for intake. Stored to enable re-shoots and audits. Retained during your active use of the platform.
Product name, unit, price, category, stock state - the structured output of the intake. Retained during your active use of the platform.
Buyer name, delivery address, order lines, payment state, delivery status. Retained for statutory tax and dispute-resolution periods.
Buyer contact information is retained only as required to fulfil the order and any warranty or return window.
System logs of platform access. Retained on a short rotating window, unless required for a specific investigation.
- Aligned to India's Digital Personal Data Protection Act principles for lawful, fair and transparent processing.
- Payment processing delegated to a PCI-DSS-compliant partner. Card data does not touch our infrastructure.
- Third-party components reviewed for licensing and known-vulnerability posture on a scheduled cadence.
- Vulnerability reports welcomed at our contact channel and triaged on receipt.
- We do not currently hold SOC-2 or ISO-27001 certifications. If we get them, we will list the report cover on this page.
- We do not sell buyer or vendor data to third-party marketing lists.
- We do not run behavioural profiling on buyers to raise prices dynamically at shop level.
Data concerns, vulnerabilities, or account access questions - use the contact channel and mark the message as a security concern. It reaches the right person the same day.