Privacy Policy

1. Information We Collect

From Sellers

• Account information: name, email, phone number
• Business details: store name, business address, GST number (if applicable)
• Payment details: UPI VPA, bank account information for settlement
• Store content: product listings, images, descriptions, pricing
• Usage data: login activity, feature usage, store analytics

From Buyers

• Order information: name, email, phone number, shipping address
• Transaction metadata: order amounts, payment status, timestamps
• Device and browser information: IP address, browser type, operating system

2. How We Use Your Information

• Operating and maintaining the platform
• Processing orders and facilitating payments between buyers and sellers
• Sending transactional notifications: order confirmations, shipping updates, payment receipts
• Providing customer support and resolving disputes
• Preventing fraud and ensuring platform security
• Improving platform features and performance
• Complying with legal obligations and regulatory requirements

Data Sharing

Data may be shared with:

• Payment gateways
• Service providers (analytics, infrastructure)

Only as necessary to operate the platform.

3. Data Sharing

We share personal data only as necessary to operate the platform:

• Payment gateways (Razorpay): to process transactions securely
• Sellers: buyer name, email, phone, and shipping address are shared with sellers to fulfill orders
• Email service providers (Resend): to send transactional emails
• Infrastructure providers (Cloudflare, Supabase): for hosting, storage, and CDN services
• Legal authorities: when required by law, court order, or government request

Each seller on Popup operates independently and may have their own privacy policy governing how they use buyer data received through orders. We encourage buyers to review the seller's privacy policy before making a purchase.

4. Cookies and Tracking

We use essential cookies to maintain your session and preferences. We use basic analytics to understand how the platform is used. We do not use third-party advertising trackers or cross-site tracking cookies.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Transaction records are retained for a minimum of 8 years as required under Indian tax and accounting laws. Upon account deletion, we remove personal data within 90 days, except where retention is required by law.

6. Data Security

We use industry-standard security measures including encryption in transit (TLS), encrypted storage, access controls, and regular security reviews. While we take reasonable precautions, no system is completely secure, and we cannot guarantee absolute security of your data.

7. Your Rights

Under the DPDP Act 2023 and applicable laws, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Withdraw consent for data processing
• Nominate a representative to exercise your rights

To exercise any of these rights, email us at support@mypopup.shop. We will respond within 30 days.

8. Children's Privacy

Popup is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a minor has provided us with personal data, we will take steps to delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on the platform. Continued use of the platform after changes constitutes acceptance of the updated policy.

10. Grievance Officer

In accordance with the Information Technology Act 2000 and applicable rules, the Grievance Officer for Popup can be contacted at: