Privacy Policy — PickBazaar Customer App

App: PickBazaar Customer | Operator: PickBazaar Technologies

Welcome to PickBazaar. We are committed to protecting your personal information and your right to privacy. This Privacy Policy outlines our standards and practices concerning how we collect, store, utilize, disclose, and protect your information when you download, install, or use our mobile application (the "App") or our website (pickbazaar.co).

This policy complies with global consumer data protection principles and the mandatory privacy mandates specified under the Google Play Store Developer Policies (2026 Edition) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules.

1. Information We Collect

We only collect data that is strictly essential to deliver, optimize, and secure your grocery shopping experience:

• Profile & Account Information: Full name, verified mobile number, email address, and profile picture (if voluntarily uploaded).
• Delivery Address & Location: Delivery addresses provided manually by you, including street names, landmarks, apartment/house numbers, and pin codes to fulfill orders.
• Order & Transaction Records: Purchased grocery items, quantities, transaction date & time, payment mode (e.g. UPI, Card, Cash on Delivery), and receipt references. Note: We do not store your raw credit/debit card numbers or bank passwords; payments are securely processed by RBI-licensed payment gateways.
• Device & Diagnostics Data: Device model, operating system version, unique device identifiers, and Firebase Cloud Messaging (FCM) tokens to send real-time order status notifications.

2. What We Explicitly Do NOT Collect

3. Device Permissions Requested and Justification

In accordance with Google Play Store permission guidelines, we declare the exact reason for each runtime permission:

• Photos / Media / Storage: Required only when you choose to upload a custom profile avatar or attach photographic proof when requesting a refund for damaged goods.
• Approximate / Fine Location (Foreground Only): Used strictly while the app is open to auto-populate your current address pin on the delivery map for accurate drop-off.
• Notifications (POST_NOTIFICATIONS): Required to alert you regarding order acceptance, packing progress, out-for-delivery status, and OTP verification.
• Internet & Network State: Fundamental to connect to our cloud infrastructure, sync available inventory, and process orders.

4. How We Utilize Your Data

• To register, authenticate, and maintain your customer account.
• To facilitate order routing to the nearest store partner and assign delivery riders.
• To communicate essential order tracking updates, digital invoices, and customer service support.
• To prevent fraudulent orders, abusive chargebacks, and security breaches.
• To comply with statutory accounting and tax obligations.

5. Data Sharing and Third-Party Disclosures

We never sell your personal data to third-party data brokers or marketing aggregators. Data is shared strictly on a need-to-know basis with:

• Assigned Delivery Partner: Only your name, delivery address, and contact number are shared for the duration of the active delivery.
• Fulfilling Merchant / Store Partner: Items ordered and customer first name for packaging.
• Cloud Infrastructure Providers: Secure Google Cloud Platform (GCP) and Firebase servers for encrypted data storage.
• Legal & Law Enforcement: Strictly when mandated by a valid judicial court order or government warrant.

6. Data Security and Retention

We employ industry-standard 256-bit SSL/TLS encryption for all data in transit and robust AES encryption for stored data. Access to production databases is strictly restricted through multi-factor authentication and role-based access control.

Your personal account information is retained only as long as you maintain an active PickBazaar account. If you close your account, your data is permanently scrubbed or anonymized within 30 days, subject to legal record-keeping requirements.

7. User Rights: Account & Data Deletion

You have the complete right to access, rectify, export, or permanently delete your account and personal information at any time. In full adherence to Google Play Store data deletion mandates, you can request account deletion directly through our dedicated self-service portal without needing the mobile app installed:

👉 Click here to access the PickBazaar Account Deletion Request Portal

8. Children's Privacy

Our services are not intended for individuals under the age of 18 without parental supervision. We do not knowingly solicit or collect personal information from minors.

9. Grievance Redressal & Contact Officer

In accordance with the Information Technology Act 2000 and consumer rules, you may contact our designated Grievance Officer with any questions or concerns: