Privacy Policy

1. What we collect

• Account details — name, phone number, email, and (for vendors) shop name, business address, GST or PAN if you provide them.
• Profile data — profile photo, delivery addresses, saved wishlists.
• Order data — items ordered, amount, payment method, delivery address.
• Location — coarse GPS location only when you allow it, used to surface nearby vendors. You can revoke this anytime from your device settings.
• Device data — device model, OS version, app version, crash logs. Used solely for stability monitoring.
• Communications — messages you exchange with vendors or our support team through the in-app chat.

2. Why we collect it

• To create your account and let you place orders.
• To show you vendors near you and recommend products.
• To process payments (via our payment partners — we never store your full card or UPI PIN).
• To let vendors fulfil your order (your name, address, and phone are shared with the vendor who is selling to you).
• To send you order updates, password resets, OTPs, and important notices.
• To keep the Service safe — detecting fraud, abuse, and broken features.

3. Who we share it with

We share only what is needed, and only with the parties below:

• Vendors — your shipping name, address and phone are shared with the specific vendor you ordered from, so they can deliver your order.
• Payment processors — Razorpay (UPI / cards / netbanking). We pass them the order amount; they never expose your card details to us.
• Cloud hosting — MongoDB Atlas (database), Emergent / Kubernetes (servers), Google Cloud (mobile push notifications).
• OTP / messaging — MSG91 (SMS / WhatsApp OTPs), Firebase (auth OTPs).
• AI providers — for the AI Photoshoot / Video features, anonymised product photos are sent to Google Gemini and fal.ai. No customer personal data is ever sent to these providers.
• Law enforcement — only when required by valid Indian law.

We never sell your data to advertisers or data brokers.

4. Your rights

• Access — request a copy of everything we hold on you.
• Correction — update wrong details from your Profile screen.
• Deletion — request your account and all associated data be erased viaAccount Deletionor by emailing help@mybuzzar.in. We complete deletion requests within 14 days unless we're legally required to retain data (e.g. invoices for tax purposes are kept for 7 years per Indian accounting law).
• Withdraw consent — turn off location, notifications, marketing emails from your device settings or in-app settings at any time.

5. Data security

All traffic between your device and our servers is encrypted with TLS 1.3. Passwords are hashed with bcrypt before storage. Sensitive credentials (API keys, tokens) live in environment variables on hardened cloud servers and are rotated periodically. No system is 100 % safe; we'll notify affected users by email within 72 hours if a breach materially affects your data.

6. Children

MyBuzzar is not intended for users under 18. We do not knowingly collect data from children. If a parent or guardian becomes aware that a child has provided us with personal data, please contact us so we can erase it.

7. Cookies & local storage

The web app stores small amounts of data on your browser (login token, cart, last-viewed items, your section preference) so the site loads instantly on return visits. You can clear this anytime from your browser settings. The mobile app uses the equivalent on-device storage — clear it via your phone's app settings.

8. Changes to this policy

If we change anything material, we'll bump the “Last updated” date at the top and, if the changes affect your data rights, notify you via in-app banner or email.

9. Contact

Questions, complaints, data requests — write to us at: