Privacy Policy

At Tokri Bazaar, your privacy matters. This policy explains what information we collect, why we collect it, who we share it with, how long we keep it, and the rights you have over it. It is published in accordance with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and the Consumer Protection (E-Commerce) Rules, 2020.

Information we collect

You give us some of this directly; some is created as you use the service:

• Account & contact: your name, email address and phone number.
• Delivery addresses: the addresses and landmarks you save, and the PIN code you enter to check serviceability. We do not collect precise GPS location.
• Order & payment: your order history, delivery slots, wallet, cashback and referral activity. For online payments, the transaction is processed by our payment gateway — we receive a payment confirmation and reference, and never store your full card or UPI credentials.
• Delivery verification: a one-time delivery OTP, and a proof-of-delivery photo taken by the rider at your door to confirm hand-over.
• Photos you upload: images attached to a refund or return request, or to a support ticket, when you choose to add them.
• Device & usage: basic technical and usage data (device type, pages visited, performance) collected through privacy-friendly analytics on our hosting to keep the site fast and secure.
• Cookies & local storage: essential data to keep you signed in and remember your cart and chosen delivery area.

How we use your information

We use your data to:

• Process, fulfil, deliver and verify your orders (including the delivery OTP and proof photo)
• Take and reconcile payments, and process refunds, wallet credit and cashback
• Provide customer support, handle refund/return requests, and send order updates
• Send transactional messages (order confirmations, OTPs, password resets)
• Prevent fraud and abuse, and improve our products, service and security

Who we share it with

We do not sell your personal data. We share the minimum necessary with the service providers who help us run Tokri Bazaar, who process it only on our instructions:

• Payment gateway (Razorpay) — to take online payments and process refunds.
• Hosting & analytics (Vercel) — to run the site and measure performance.
• Database (Neon) — to store your account and order data.
• Image storage (Cloudinary) — to store delivery-proof, refund and support photos.
• Email provider (Resend) — to send transactional email.
• SMS provider (MSG91 / Twilio) — to send OTPs by SMS.

We may also disclose data where required by law, or to protect our rights, safety and property or those of others.

How long we keep it

We keep your account and order data for as long as your account is active and as required to meet legal, tax and accounting obligations (tax invoices, for example, must be retained for the period required under GST law). Delivery-proof and refund photos are retained while they may be needed to resolve a delivery or refund dispute. When data is no longer needed, we delete or anonymise it.

How we protect it

Passwords are hashed and never stored in plain text. Data is transmitted over encrypted connections (HTTPS) and access is restricted to authorised personnel. We never sell your personal data to third parties.

Your rights

Under the Digital Personal Data Protection Act, 2023, you have the right to access, correct and erase your personal data, to withdraw consent, and to grievance redressal. You can view and update your profile and addresses from your dashboard at any time. To request a copy or the deletion of your account and associated data, or to withdraw consent, email us at support@tokribazaar.com.

Children

Tokri Bazaar is not intended for children under 18, and we do not knowingly collect their personal data.

Cookies

We use essential cookies and local storage to keep you signed in and remember your cart and delivery area. We do not use cookies for third-party advertising.

Grievance Officer

In accordance with the Information Technology Act, 2000 and the Consumer Protection (E-Commerce) Rules, 2020, the details of our Grievance Officer are:

• Name: Arjun Kushwaha
• Email: support@tokribazaar.com
• Phone: +91 70650 91511

We acknowledge grievances within 48 hours and aim to resolve them within 30 days.

Contact

Questions about this policy? Reach us at support@tokribazaar.com.