Privacy Policy

ShopZo is a hyperlocal commerce platform that connects customers with verified local stores and delivery partners. This policy explains what personal data we collect, why, who we share it with, how long we keep it, and how you can access or delete it, in line with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 ("DPDP Act"). In the ShopZo customer app, the sign-in screen shows the line "By signing in you agree to our Terms of Service · Privacy Policy" at the bottom. In the ShopZo Vendor app (version 1.0.3 and later), the sign-in screen shows the line "By continuing you agree to our Terms of Service and Privacy Policy". The ShopZo Partner app does not show an acceptance line at sign-up today. For all three apps, this policy and the terms that apply to you are available on this website: Terms of Use (customers), Terms for Sellers (vendors) and Terms for Delivery Partners. Where we rely on data you voluntarily provide for a specific purpose (for example, an address you type in for delivery), we process it for that purpose under DPDP Act s.7(a).

1. Who we are

ShopZo is owned and operated by AR Home Care Solutions Private Limited ("ShopZo", "we", "us"). Registered office: C/o Ratnesh, Khasra No 29, Dwarikapuri Colony, Rajendra Nagar West, Gorakhnath, Gorakhpur, Uttar Pradesh 273015. CIN: U51909UP2021PTC141705. GSTIN: 09AAUCA7734Q1ZK. Contact: info@shopzo.co.in. Website: shopzo.co.in.

2. What we collect and why

Everyone (all apps and the website)

Data	Why we collect it
Mobile number	Your account identity. We verify it with a one-time password (OTP) sent by SMS via MSG91.
Name	Shown on orders, invoices and to the people fulfilling or receiving them.
Device and app diagnostics (app version, device model, OS, IP address)	Keeping the service working, security and fraud prevention. The apps contain no crash-reporting or analytics SDK — this is limited to what our servers see in ordinary request logs.

Customers

Data	Why we collect it
Delivery address(es)	To deliver your order and show stores that serve your area.
Location (approximate or precise, only while you use the app and only if you allow it)	To find stores near you and auto-fill your address. Coordinates are sent to OpenStreetMap's Nominatim service for reverse geocoding and place search. You can type an address instead.
Orders, cart, ration lists, order history	To process, deliver and support your orders and let you re-order.
Payment status	Whether you paid on delivery or online, and the payment status of your order. ShopZo never sees or stores your card number, UPI PIN or bank login. Razorpay, a PCI-DSS compliant processor, handles online payments. We only receive a payment reference and status from Razorpay.
Microphone (only during a Ration call — from tapping "Call ShopZo" until you tap "End call", never in the background)	To turn your spoken shopping list into text. Your voice is processed by your phone's own speech-recognition service; only the resulting text is sent to ShopZo. We do not record or store audio.
Ratings, reviews, support messages	Quality and support. Your individual rating and comments are not shown to other users; your stars count towards the store's average rating, which customers see.

Vendors (store owners using the ShopZo Vendor app)

Data	Why we collect it
Store name, address, category, opening hours, store location	To list your store to customers and route orders. Store coordinates and pincode are used for reverse geocoding and to auto-fill city/state.
Business and KYC documents (e.g. Aadhaar, PAN, Shop Establishment License/Udyam, GST, store front/inside/owner photos, bank passbook or cancelled cheque)	To verify your identity and business before your store goes live, and to keep the marketplace trustworthy.
Bank account / IFSC details for settlements	To pay you for your orders. Your bank details are handled through Razorpay, our payments and payouts partner.
Product photos, prices and stock	Your catalogue, shown to customers.
Camera / gallery access (only when you choose a photo)	Uploading product and KYC images.
Email address (vendors, optional)	If you add one, we verify it with a one-time password sent by email, for account recovery and communication.

Delivery partners (ShopZo Partner app)

Data	Why we collect it
Identity and vehicle documents, bank details	A ShopZo team member checks your driving licence, vehicle RC, bank details and photo in person, and we record that each was verified. Your delivery earnings are paid out weekly or every 15 days.
Location while you are on duty	To assign nearby orders to you and give customers delivery status updates. The customer app shows order status (e.g. "out for delivery"), not a live map. Location is not collected when you are off duty.
Delivery history and earnings	Payouts, disputes and support.

3. Who we share data with

• The store fulfilling your order sees your name, delivery address, phone number and the items ordered.
• The delivery partner assigned to your order sees your name, address, phone number and the order.
• Razorpay receives a vendor's bank account/IFSC details to set up payout settlements. Delivery-partner bank details are not sent to Razorpay — they are checked in person by a ShopZo team member.
• MSG91 receives your mobile number (SMS OTP) and, for vendors who add one, your email address (email OTP), to deliver one-time passwords only.
• OpenStreetMap Nominatim and India's pincode lookup service receive coordinates or a pincode you or a vendor share, to turn them into an address.
• Amazon Web Services (AWS) hosts our servers and stores uploaded documents/photos in India-region data centres.
• Government or law-enforcement bodies, when required by Indian law.

We do not sell personal data and do not use it for third-party advertising. The apps contain no advertising SDKs.

4. How long we keep data

• Account details: while your account is active, then removed from active use within 90 days of a deletion request, except as below.
• Registration details (name, mobile number): kept for 180 days after account closure, as required by the IT (Intermediary Guidelines) Rules, 2021, then deleted.
• Orders, invoices, payment and settlement records: 8 years, as required by Indian tax and accounting law, in a form that no longer identifies you where possible.
• KYC documents: for the duration of the vendor/partner relationship plus the period required by law.
• Diagnostics and logs: up to 12 months.

5. Your rights — access, correction, deletion

You can also ask us to correct your data, request a copy or summary of it, or withdraw consent for optional processing (such as location access) at any time — this will not affect processing already carried out lawfully before withdrawal, and may switch off features that depend on it. Under the DPDP Act, 2023 you may also nominate another individual to exercise these rights on your behalf in the event of your death or incapacity; write to us at the email above to record a nominee. Location, microphone and camera permissions can be withdrawn any time in your phone's settings; the related features simply stop working. If you are not satisfied with how we have handled a complaint about your personal data, you may also complain to the Data Protection Board of India under the Digital Personal Data Protection Act, 2023.

6. Security

All traffic between the apps and our servers is encrypted (HTTPS). Vendor bank/payout details are handled by Razorpay, a PCI-DSS compliant processor; delivery-partner bank details are verified in person by a ShopZo team member rather than through Razorpay. Customers may pay on delivery or online through Razorpay; ShopZo never sees or stores a customer's card number, UPI PIN or bank login, and only receives a payment reference and status from Razorpay. Access to production data is limited to authorised staff and is logged. No system is perfectly secure; if a breach affects you, we will notify you and the relevant authorities as required by law.

7. Children

ShopZo is for users aged 18 and over. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.

8. Cookies and the website

shopzo.co.in is a static site: it sets no cookies and runs no analytics or advertising trackers. Its pages load fonts from Google Fonts, which receives your IP address and browser details when the fonts are fetched. This section covers shopzo.co.in only; the ShopZo, ShopZo Vendor and ShopZo Partner apps are covered by sections 2 and 3 above.

9. Changes to this policy

We will post any changes on this page with a new "Last updated" date and, for material changes, notify you in the app.

10. Contact and Grievance Officer

Complaints to the Grievance Officer are acknowledged within 24 hours and resolved within 15 days of receipt, as the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 require. We aim to respond to routine privacy requests within 7 working days — this is ShopZo's own commitment. For consumer complaints about an order, see our Contact & Grievance Redressal page for the applicable response timelines under Indian law.