Privacy Policy

We collect information you provide directly to us, information we collect automatically when you use our Services, and information we obtain from third parties.

Information You Provide

• Phone number for SMS OTP login verification via our telecom partners
• Name, optional email address, and saved profile preferences
• Delivery addresses, building names, flat numbers, and postal codes
• Payment methods and transaction references (processed securely via RBI-licensed Razorpay; card numbers/CVVs are never stored on our servers)
• Order history, cart items, customer notes, and replacement preferences
• Customer support chat messages, ratings, and product reviews

Automatically Collected Information

• Precise GPS and coarse location coordinates (used solely to assign your closest dark store, calculate delivery ETA, and route riders)
• Device model, operating system (Android/iOS), and unique Firebase Cloud Messaging (FCM) tokens for push notifications
• IP address and approximate network region
• App and website usage telemetry, search queries, and crash diagnostic logs

We use the information we collect to operate our 9–15 minute hyperlocal delivery service, process transactions, and communicate with you:

• Fulfill, pick, pack, and deliver your orders from local dark stores
• Send real-time order tracking updates, SMS OTPs, and push notifications
• Manage your TakeSMARTs Smart Money wallet, cashbacks, and refunds
• Personalize catalog availability based on your dark store delivery polygon
• Prevent fraudulent orders, account takeovers, and payment abuse
• Comply with Indian statutory requirements, GST invoicing, and financial regulations
• Send promotional offers and discounts (which you can opt out of at any time)

We do not sell, rent, or trade your personal information to third parties. We share information only in the following strictly necessary circumstances:

• With delivery riders to navigate to your doorstep and complete your order
• With RBI-authorized payment processors (Razorpay) to verify and settle payments
• With SMS providers (Message Central) to deliver login OTPs and order SMS
• With secure cloud infrastructure partners (MongoDB Atlas, AWS, Firebase) who host our systems
• When required by Indian courts, statutory authorities, or law enforcement
• In connection with an enterprise merger, acquisition, or restructuring

All third-party partners are bound by strict non-disclosure and data security agreements under Indian law.

We retain your personal information only as long as your account is active or as needed to provide you with Services:

• Account profile: Retained while your account remains active
• Order and tax records: Retained for 5 years for GST and statutory tax compliance
• Payment records: Retained as required by RBI financial audit rules
• Customer support chats: Retained for 2 years after ticket resolution

You may request account deletion at any time via the mobile app profile or by emailing our Data Protection Officer.

Under Indian data protection standards, you have extensive control over your data:

• Access: Request an export of your personal information
• Correction: Update incorrect phone numbers, addresses, or profile details
• Deletion: Request permanent removal of your account and personal history
• Opt-out: Turn off promotional notifications or marketing SMS at any time
• Location permissions: Manage GPS permissions in your mobile device settings

To exercise your rights, email us at privacy@takesmarts.com. We respond within 30 days.

We employ enterprise-grade security controls to safeguard your data against unauthorized access, loss, or misuse:

• All communication is encrypted using modern TLS 1.3 protocol
• Sensitive databases are encrypted at rest using AES-256
• Payment information is handled by RBI-approved, PCI-DSS Level 1 certified processors
• Strict role-based access control (RBAC) with audit logging across our dark stores and admin teams

Our Services are intended for individuals aged 18 and older. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal information, please notify us immediately for prompt deletion.

We may update this Privacy Policy periodically. Any revisions will be reflected on this page with an updated "Last Updated" date. Continued use of our mobile app or website after revisions constitutes acceptance of the modified policy.