PRIVACY POLICY FOR SHOPATH

Last Updated: June 4, 2026

1. GENERAL OVERVIEW & RECOGNITION

1.1. This Privacy Policy outlines the practices of SHIVANYA GROCERS PRIVATE LIMITED (hereinafter referred to as the "Company", "We", "Us", or "Our"), a company incorporated under the Companies Act, 2013, regarding the collection, storage, processing, transfer, protection, and disclosure of personal, non-personal, and analytical data obtained from users (referred to as "User", "You", or "Your") of the website shopath.in and its associated mobile applications (collectively, the "Platform").

1.2. We operate as an online hyper-local e-commerce marketplace connecting users with local neighborhood merchants and optimizing delivery routes. We are committed to maintaining robust privacy protections for our users.

1.3. By downloading, accessing, browsing, registering on, or placing an order through the Platform, you acknowledge that you have read, understood, and consented to the data practices described in this Privacy Policy. If you do not agree with these practices, please do not use the Platform or provide your details.

2. INFORMATION WE COLLECT

To provide a fast, efficient, and personalized grocery delivery experience, we collect the following categories of information:

2.1. Information Provided Directly by You:

• Identity & Account Information: Full legal name, unique mobile number, dynamic active email address, and profile pictures.
• Delivery Information: Saved home/office physical delivery addresses, structural descriptions of door numbers, and localized geographic landmark markers.
• Transaction & Billing Details: Records of items purchased, billing amounts, selected method of transaction, coupon history, and partial billing signatures (excluding absolute credit card or net-banking passwords).

2.2. Information Collected Automatically via App/Website:

• Precise Real-Time Location Data: When the Shopath mobile application is open or running in the background, we collect precise background location coordinates (GPS, cellular tower triangulation) to calculate delivery distance, connect you with the nearest merchant, and track the exact route of your assigned Delivery Partner.
• Device & Hardware Information: Device model, operating system version (Android/iOS), unique device identifiers (IMEI, MAC address), IP address, browser type, cellular network operator, and push notification tokens.
• App Performance & Usage Logs: Crash logs, application freeze parameters, screen view durations, specific features used, and navigation clicks within the shopath.in ecosystem.

3. PURPOSE AND LEGAL BASIS FOR DATA PROCESSING

We process your collected data strictly for legitimate business requirements, including:

3.1. Order Fulfillment: Transmitting your delivery address and item parameters to the designated local Merchant Store and routing the delivery boy to your doorstep.

3.2. Authentication: Using secure One-Time Passwords (OTPs) via SMS or WhatsApp links to authenticate your account and prevent security breaches.

3.3. Customer Support: Investigating order discrepancies, managing weight shortfalls for non-perishables, resolving refund disputes, and analyzing delivery delays.

3.4. Personalized Experience: Recommending daily grocery products, fresh fruits, vegetables, and North Indian or regional sweet delicacies based on your past ordering habits.

3.5. Security & Anti-Fraud: Monitoring transactional velocity, protecting against coupon-code abuse, preventing duplicate account generation, and ensuring the absolute safety of our merchants and logistics partners.

4. DATA SHARING AND DISCLOSURE PROTOCOLS

We do not sell, rent, or trade your personal data to third-party marketing companies. Your information is shared exclusively with the following stakeholders to ensure smooth operations:

4.1. Registered Merchant Stores: We share your specific item orders and name with the local merchant so they can pack your items, verify fresh stock, and handle billing details properly.

4.2. Logistics & Delivery Partners: We share your delivery address coordinates, mobile number, and name with the independent delivery executive assigned to transport your packed order safely to your perimeter.

4.3. Payment Gateways & Processors: Financial transactions are passed securely through integrated, PCI-DSS compliant third-party payment gateways. The Company does not store your critical internet banking passwords or full credit card pins on its local servers.

4.4. Legal & Law Enforcement Mandates: We reserve the right to disclose personal data if required by central/state judicial orders, statutory tax bodies, or law enforcement investigations in Lucknow, Uttar Pradesh, to prevent active fraud or address urgent national security concerns.

5. COOKIES, LOCAL STORAGE, AND TRACKING TECHNOLOGIES

5.1. The Platform utilizes first-party cookies, Next.js local storage caches, and software development kits (SDKs) to store active user login states, maintain item additions within your shopping cart, and optimize application rendering speeds.

5.2. You can configure your browser preferences or mobile application permissions to reject cookies or deny tracking tokens. However, doing so may directly destabilize core features of the platform, preventing your cart state from saving or slowing down checkout speeds.

6. DATA SECURITY AND ENCRYPTION FRAMEWORK

6.1. Your data is stored on highly secure servers (including our cloud infrastructure hosted via Hostinger VPS and protected database environments). We employ industry-standard Secure Sockets Layer (SSL/TLS) encryption mechanisms for all data transmissions between your device and our back-end architecture.

6.2. While we maintain rigorous administrative, technical, and physical safeguards to lock down user profiles, no system can be completely impervious to cyber threats. The Company cannot give an absolute guarantee of total network security against sophisticated third-party hacking attempts that occur outside our code controls.

7. DATA RETENTION AND DELETION RIGHTS

7.1. Retention: The Company will retain your personal information, address history, and transaction signatures for as long as your account remains active or as required by central corporate taxation, auditing, and financial record-keeping laws in India.

7.2. Account Deletion (अकाउंट डिलीशन): You have the right to delete your Shopath account at any time. You can initiate account deletion directly from the Shopath app by navigating to Profile → Delete Account.

7.3. 90-Day Grace Period: Upon requesting account deletion, your account will be suspended immediately, but your data will be retained for a period of 90 (ninety) days from the date of deletion request. During this 90-day period:

• You will not be able to place new orders or use Shopath services.
• If you log back in within 90 days, your account will be automatically restored with all your previous data — including order history, wallet balance, saved addresses, and subscriptions — intact.
• You will receive a confirmation that your account has been reactivated.

7.4. Permanent Data Deletion: If you do not log back in within 90 days of the deletion request, your account and all associated personal data will be permanently and irrecoverably deleted from our systems. This includes:

• Your profile information (name, email, phone number)
• Saved delivery addresses
• Order history and transaction records
• Wallet balance and loyalty points
• Active subscriptions

7.5. Non-Deletable Records: Certain anonymized transaction records may be retained for mandatory tax, audit, and legal compliance purposes as required under Indian law, even after account deletion.

7.6. Email Request: Alternatively, you can also request account deletion by emailing us at hello@shopath.in with your registered mobile number.

8. LINK TO THIRD-PARTY INTERFACES

Our Platform may contain promotional banners or web hyperlinks redirecting to outside websites or payment gateways. Once you exit the physical domain of shopath.in or our mobile app shell, you are bound by the privacy guidelines of those external parties, and Shivanya Grocers Private Limited accepts no liability for their direct data operations.

9. AMENDMENTS TO THIS PRIVACY POLICY

The Company reserves the right to modify, change, or update this Privacy Policy at any time to reflect changing technological requirements, business expansion, or evolving statutory consumer protection laws in India. Any updates will be pushed to this page with an updated "Last Updated" date. Your continuous usage of the application post-update signifies your automatic acceptance of the revised policy.

10. GRIEVANCE REDRESSAL OFFICER

In alignment with the Information Technology Act, 2000 and the Consumer Protection Rules, any grievances, privacy concerns, or data disputes should be formally communicated to our designated Grievance Team:

• Designation: Privacy Grievance Officer
• Corporate Head: Shivanya Grocers Private Limited
• Email Contact: hello@shopath.in
• Regional Hub: Alambagh, Lucknow, Uttar Pradesh, India.