Privacy policy

KiDukaan lets neighbourhood shops run an online store and receive orders on WhatsApp. This policy explains what information we handle for shop owners and for the customers who order from their stores, and the choices you have. It is written to meet India's Digital Personal Data Protection Act, 2023.

Information we collect

From shop owners: store name and web address, the WhatsApp number orders are sent to, a password (stored only as a one-way hash), products, prices and stock, photos and logos you upload, and store settings.

From customers placing an order: name, phone number, delivery address, any note you add, and the items in the order.

Technical information: your IP address is used briefly to limit abuse (for example, too many sign-in attempts). Your cart and language choice are stored in your own browser.

How we use it

• To show the store, prepare the order message and send it to the shop on WhatsApp.
• To let the shop see, confirm and track its orders, and let customers track theirs.
• To run shop-owner accounts, plans and sales reports.
• To keep the service secure and prevent misuse.

We do not sell personal information or use it for advertising.

Who we share it with

• The shop you order from receives your order details so it can fulfil the order. The shop is responsible for how it uses them after that.
• WhatsApp (Meta) carries the order message you choose to send. WhatsApp's own privacy policy applies to messages on WhatsApp.
• Our hosting provider runs the servers and database that store this information for us.
• Authorities, where the law requires it.

Cookies

We use only essential cookies: one keeps shop owners and administrators signed in. We do not use advertising or tracking cookies.

How long we keep it

Store information is kept while the store is active. Order records are kept so shops and customers can look them up and for accounting, and are deleted when a store is closed, unless the law requires us to keep them longer.

Your rights

You can ask us for a summary of the personal information we hold about you, to correct or update it, or to delete it, and you can withdraw consent at any time. Customers can also ask the shop directly. To make a request or raise a grievance, write to us at support@kidukaan.in. We aim to respond within 30 days.

Security

Connections are encrypted (HTTPS), passwords are hashed, sign-in cookies are protected, and access to the database is restricted. No system is perfectly secure; if we learn of a breach affecting you, we will notify you and the authorities as the law requires.

Children

The service is meant for adults. Shop accounts must be created by someone aged 18 or over.

Changes

If we change this policy, we will update the date above and, for significant changes, tell shop owners in their dashboard.