Privacy Policy

Last Updated: May 17, 2025

AapaniSHOPPY ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website.

1. Information We Collect

1.1 Personal Information

Full name
Mobile number (used for OTP verification)
Email address
Delivery addresses
KYC documents (Aadhaar, PAN) — for money transfer and wallet services
Bank account details — for vendors and money transfer

1.2 Transaction Information

Order history and purchase details
Recharge and bill payment records
Money transfer transaction details
Wallet top-up and usage history
Payment method details (processed securely via Razorpay)

1.3 Device & Usage Information

Device type, model, and operating system
IP address and browser type
App usage patterns and session duration
Push notification tokens

2. How We Use Your Information

To create and manage your account
To process orders, recharges, bill payments, and money transfers
To verify your identity (KYC compliance)
To send OTPs, order updates, and transaction confirmations
To provide customer support
To personalize your experience and show relevant products
To detect and prevent fraud
To comply with legal obligations and RBI regulations
To send promotional offers (with your consent)

3. Information Sharing

We do NOT sell your personal information. We may share your data with:

Vendors: Name and delivery address for order fulfillment.
Payment Processors: Razorpay for secure payment processing.
Service Providers: Pay2All for recharge and bill payment services.
Banking Partners: For IMPS/NEFT money transfers.
Legal Authorities: When required by law, court order, or government regulation.

4. Data Security

All data is transmitted over HTTPS with SSL/TLS encryption.
Passwords are hashed using bcrypt algorithm.
Payment information is processed by PCI-DSS compliant payment gateways.
KYC documents are stored securely on encrypted AWS S3 storage.
Access to personal data is restricted to authorized personnel only.
Regular security audits are conducted to identify vulnerabilities.

5. Data Retention

Account data is retained as long as your account is active.
Transaction records are retained for 7 years as per financial regulations.
KYC documents are retained as per RBI guidelines.
Upon account deletion request, personal data is removed within 30 days (except data required by law).

6. Your Rights

Under applicable Indian data protection laws, you have the right to:

Access your personal data stored with us.
Correct inaccurate or incomplete information.
Request deletion of your account and personal data.
Withdraw consent for promotional communications.
Request a copy of your data in a portable format.

7. Cookies & Tracking

We use cookies on our website to improve user experience.
Analytics tools may be used to understand usage patterns.
You can disable cookies through your browser settings.

8. Third-Party Links

Our Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies.

9. Children's Privacy

Our Platform is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If we discover that a minor has provided us with personal data, we will delete it immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of the Platform after changes constitutes acceptance.

11. Grievance Officer

In accordance with the Information Technology Act, 2000, the designated Grievance Officer for any concerns regarding data privacy is:

Address: Block A, 606 Prahladnagar Trade Centre, B/H Titanium City Centre, Vejalpur, Ahmedabad, Gujarat — 380051
Phone: +91 8460214290
Email: privacy@apanishoppy.com
Response Time: Within 48 hours of receiving the complaint.