Privacy policy

At Spen Cart, we value the trust you place in us when sharing your personal information. This Privacy Policy describes how Spen Cart collects, uses, shares, and protects your personal data when you use our mobile application ("App"), website, and associated delivery services (collectively, the "Services").

By accessing or using our Services, you consent to the collection, transfer, storage, disclosure, and use of your information as outlined in this Privacy Policy.

---

### 1. Information We Collect

To deliver a seamless shopping and hyper-local delivery experience, we collect the following categories of information:

#### A. Information You Provide to Us
* **Registration & Account Setup:** When you create an account, we collect your name, mobile phone number, and email address. Account verification is secured via a One-Time Password (OTP) sent to your mobile device.
* **Delivery Information:** We collect physical delivery addresses, landmarks, and associated coordinates (latitude and longitude) that you save in your address book.
* **Profile Customization:** If you upload a profile picture, the App accesses your camera or photo library.
* **Customer Support:** Correspondence, feedback, or photographs you submit when contacting our support team regarding order issues.

#### B. Information Collected Automatically
* **Precise Real-Time Location:** With your explicit permission, we collect precise location coordinates (via GPS/network) even when the App is running in the background. This is required to:
* Show nearby partner stores and dynamic delivery zones.
* Estimate delivery charges and transit times.
* Allow real-time tracking of the delivery rider on the map.
* **Device Details:** Push notification tokens (Firebase Cloud Messaging), device model, operating system version, internet connectivity status, and latency speeds.
* **Transaction History:** Details of orders placed, payment methods selected, items purchased, and total billing amounts.

#### C. Voice Search Data
* **Microphone Access:** If you use our voice search feature to find products, we temporarily access your device microphone to convert speech into search queries. We do not store or record your voice data on our servers.

---

### 2. How We Use Your Information

Spen Cart processes your personal data for the following operational purposes:
* **Fulfillment:** Processing orders, managing active carts, verifying payment success signatures, and routing assigned delivery riders.
* **Real-time Syncing:** Using secure WebSockets to synchronize cart items, update delivery boy locations, and send instant status notifications.
* **Support & Alerts:** Sending critical transactional updates, invoice receipts, safety alerts, and promotional messages (subject to your notification settings).
* **Security & Prevention:** Safeguarding against fraudulent transactions, unauthorized account access, and automated abuse.

---

### 3. Data Sharing and Disclosures

We share your information only under strict conditions to ensure operational efficiency:
* **Assigned Delivery Riders:** The rider assigned to your order receives your name, phone number, address, and delivery coordinates to locate you.
* **Partner Merchant Stores:** Store owners receive order detail manifests to pack your purchased items correctly.
* **Payment Gateways (Razorpay):** Transaction totals and identifiers are shared securely to authorize online payments.
* **Legal Obligations:** We may disclose data if required to do so by applicable laws, court orders, or government regulations.

---

### 4. Data Security

The security of your personal data is our primary concern:
* All network traffic is encrypted using **Secure Socket Layer (SSL/HTTPS)**.
* Sensitive login credentials and API authorization tokens are encrypted and stored in the device's secure hardware sandbox (Android Keystore / iOS Keychain).
* We implement request throttling, cache expiry, and automatic token invalidation upon unauthorized access (401 error response).

---

### 5. Your Rights and Choices

* **Location Access Control:** You can enable or disable location tracking at any time in your device's operating system settings. Note that disabling location will prevent order placement.
* **Notification Preferences:** You can manage push notifications and WhatsApp alerts inside the App Settings.
* **Data Rectification:** You can edit your profile information and saved addresses directly in the App.
* **Account Deletion:** You have the right to request the permanent deletion of your account. Upon deletion, all associated personal data will be completely wiped from our active databases.

---

### 6. Children's Privacy

Spen Cart does not knowingly collect or solicit personal data from anyone under the age of 18. If we discover that we have accidentally collected personal data from a minor, we will delete that information immediately.

---

### 7. Contact Us

For any questions, concerns, or data requests regarding this Privacy Policy, please contact our Spen Cart Support Team at:

* **Email:** support@spencart.com
* **Address:** Spen Cart Private Limited, Rajkot, Gujarat - 360002, India.