Privacy Policy

1. Introduction

TheGrowSetu ("we", "us", "our") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal information.

2. Information We Collect

We collect the following information:

• Account Information: Name, email, phone number, company name
• Delivery Information: Full address (address line, area, city, district, state, PIN code, country)
• Order Information: Products, quantities, order history, payment status
• Technical Information: IP address, device type, browser, pages visited
• Authentication: Login timestamps, session data, Google account info (if using Google sign-in)

3. How We Use Your Information

• To create and manage your account
• To process and deliver your orders
• To communicate order status, confirmations, and updates
• To improve our Platform and user experience
• To prevent fraud and ensure Platform security
• To comply with legal requirements

4. Information Sharing

We do NOT sell your personal information. We share data only with:

• Suppliers: Product, quantity, and delivery address (for order fulfillment)
• Logistics Partners: Name, phone, and delivery address (for delivery)
• Service Providers: Hosting (Vercel), database (Supabase), email (Brevo/Resend) — bound by confidentiality
• Legal Authorities: When required by law

5. Data Security

• All data is encrypted in transit (HTTPS) and at rest.
• Passwords are hashed — we never store them in plain text.
• Sessions use secure, HttpOnly cookies.
• Row-level security (RLS) ensures users can only access their own data.
• We regularly audit our systems for security vulnerabilities.

6. Your Rights

• Access: Request a copy of your personal data
• Correction: Update or correct your information
• Deletion: Request deletion of your account and data
• Portability: Request your data in a portable format
• Opt-out: Unsubscribe from marketing emails

To exercise these rights, email privacy@thegrowsetu.com.

7. Cookies

We use essential cookies only — for authentication and session management. We do not use tracking or advertising cookies.

8. Third-Party Services

We use the following trusted services:

• Supabase (database & authentication)
• Vercel (hosting)
• Brevo (transactional emails)
• Google OAuth (optional sign-in)

9. Data Retention

We retain your data as long as your account is active. After account deletion, we retain minimal data for legal compliance (up to 7 years for tax records).

10. Children's Privacy

Our Platform is not intended for users under 18. We do not knowingly collect data from minors.

11. Changes to This Policy

We may update this policy periodically. Material changes will be notified via email or Platform announcement.

12. Consent

By creating an account, you explicitly consent to the collection and processing of your personal data as described in this policy. You must be 18 years or older to use the Platform.

You may withdraw your consent at any time by:

• Deleting your account from Dashboard → Profile settings
• Emailing privacy@thegrowsetu.com

13. Grievance Officer

In accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the details of our Grievance Officer are:

14. Data Breach Notification

In the event of a personal data breach, we will:

• Notify the Data Protection Board of India within 72 hours
• Inform affected users without undue delay
• Provide details of the breach and steps taken
• Offer support and remediation where applicable

15. Contact

For privacy concerns, contact us at privacy@thegrowsetu.com.