Privacy Policy
Last updated 29 October 2026. Draft for legal review before launch.We collect only what we need to run the service and to meet Indian law, including the Digital Personal Data Protection Act, 2023.
What we collect
Your email, optional mobile number and GSTIN, payment references from our payment partner, order records and the messages received on your numbers.
How we use it
To deliver codes, process payments, prevent fraud, send invoices and reminders, and answer support requests.
How long we keep it
SMS content is deleted after 90 days. Order records are kept for at least 180 days. Invoices and payments are kept for 8 years as tax law requires.
Your rights
You can download your data, correct it, or ask us to delete your account from Settings. Our grievance officer answers data requests within the time set by law; the contact details are on the Contact Us page.
Security
Messages and security keys are encrypted. Staff see masked personal data by default and every access is logged.