Privacy policy

Information we collect

We collect only what we need to run SanthaiApp:

• Account details: your name, mobile number (verified by a one-time password, OTP) and, if you add it, your email address.
• Location: with your permission, your device's GPS location to show nearby shops and services, set delivery addresses, and arrange ride pickups and drops. Drivers and delivery partners share their location during active jobs.
• Addresses you save for delivery, and pickup and drop points for rides and parcels.
• Orders and bookings: items, quantities, prices, shop, payment mode (cash on delivery, UPI to the seller or pay at shop), delivery status, ride and parcel details. We do not collect card numbers or UPI PINs.
• Content you share: reviews, ratings, feed posts, photos, chat messages, reports and support requests.
• Workforce: job applications and the profile details you choose to share with employers.
• Business details for sellers, delivery partners and drivers, such as shop details, licences, vehicle details and verification evidence.
• Device and usage data: device model, operating system, app version, IP address, notification token, crash and security logs.
• Cookies and local storage: to keep you signed in, remember your cart, language and location choice, attribute referrals and, as described below, count page views.

How we use information

We use personal data to: sign you in and keep your account secure; show shops, products and services near you; send your order to the seller and arrange delivery, rides and parcels; let sellers, delivery partners, drivers and employers contact you about your order, booking or application; send order, booking and account notifications; provide support and handle complaints; prevent fraud, abuse and unsafe activity; improve the service; and meet legal duties. We send promotional messages only with your consent, which you can withdraw at any time.

Legal basis

We process personal data with your consent, which you give when you sign up, grant a permission or choose an option, and for the legitimate uses allowed by the Digital Personal Data Protection Act, 2023, such as providing a service you asked for, meeting legal obligations and responding to emergencies. You can withdraw consent at any time; this does not affect processing already done, and some features may stop working.

Sharing

When you place an order, the seller receives your name, phone number, delivery address, location pin and order details so it can fulfil the order. The delivery partner or driver receives the details needed to complete the delivery or ride, such as your name, phone number and pickup and drop locations. When you apply for a job, the employer receives the application details you submit. Our service providers (hosting, SMS and OTP, maps, notifications and analytics) process data for us under contract. We may disclose data when the law requires it, to protect people's safety, or as part of a business transfer. Sellers, delivery partners, drivers and employers are responsible for their own use of the details they receive. SanthaiApp does not sell personal information.

Device-only business drafts

If you choose Save draft on this device in the mobile Sales composer, customer details, notes and product references are stored locally, not as a server invoice. Android and iOS use secure device storage; the web preview uses browser storage. Signing out does not automatically delete a draft. Discard it from Sales when no longer needed and use only a trusted device. Starting submission replaces saved draft details with a request reference for recovery. Do not clear storage while a sales request is unresolved.

Device permissions

The mobile app requests optional permissions when you use a feature that needs them. Foreground location can show nearby shops and services or share a driver's position during an active assignment. In builds with Move background sharing enabled, a driver can separately consent and grant background location permission to share GPS with the authorised transport office for an active assignment while the app is in the background. This is not enabled by placing an order. Stop sharing in Driver Jobs or withdraw location permission in device settings; background sharing uses a time-limited assignment grant. Camera is used for barcode scanning and photos that you explicitly capture or choose for a product, store, chat or delivery-proof feature. Barcode scanning analyses frames on your device; scan frames are not uploaded or recorded. Chosen photos may be uploaded for the relevant action. Photo access is used when you attach a product, store or chat image. Notifications deliver order, message and business alerts. Files you select for CSV import or PDF attachment are read only after you choose them. You can withdraw any permission at any time in your device settings; features that need that permission will be unavailable.

Private shop verification evidence

Shop owners may submit evidence for identity, authority, business registration, licence, address, contact or physical-premises checks. Aadhaar is not compulsory; use an accepted alternative or a masked copy and provide only what is necessary. Do not include full Aadhaar/PAN numbers in notes, passwords or OTPs. Verification files are encrypted separately from public catalogue photos and restricted to authorised owners and administrators. Public profiles show only check results, completion counts and review/expiry dates, not identity documents, private notes or reviewer identities. A paid subscription does not grant verification, and completed checks are not a safety or purchase guarantee. Owners can withdraw evidence in Business → Shop Verification; withdrawal revokes public credit and file access and requests deletion of active evidence. Displayed evidence-retention dates limit download access. Minimal review/audit records and protected backups may remain for security, disputes and applicable retention duties. Changing relevant shop details or reaching an expiry requires fresh review.

Payments

You pay sellers directly by cash on delivery, UPI to the seller or at the shop, so SanthaiApp does not receive your bank, card or UPI credentials for orders. We record the payment mode and status that you or the seller report. Payments for business plans may use a payment provider, which processes your payment details under its own terms; we keep the transaction reference and status. Never include passwords, OTPs, UPI PINs or full card details in a chat, review or support message.

Shop referral attribution

Opening a shop referral link stores signed first-party cookies for up to 30 days. We count at most one browser visit per link per UTC day, not unique people, and associate eligible submitted enquiries or orders with that shop's referrer. Shop-specific attribution and marketplace attribution remain separate. The shop can record its payment receipt, and the purchasing account or original guest browser can confirm or dispute it. Referrers see limited purchase/reward statuses and amounts, not customer names, phone numbers, browser identifiers or purchase payment evidence. Clearing cookies removes browser attribution and access to guest confirmation; it does not erase retained financial/audit records. Recorded payments are not automatic bank verification or money transfers.

Basic anonymous website page counts

When site analytics is enabled, public page views are counted in the background unless a previous analytics opt-out is saved or your browser sends Do Not Track or Global Privacy Control. The browser sends only a fixed page label without cookies; counts are combined by minute and page label. These records contain no names, contact details, IP addresses, cookies, visitor or session identifiers, full URLs, query strings, typed searches or GPS. Routine connection information may be processed separately for security and abuse prevention, not stored in these page-count records. These totals measure page views, not unique people or concurrent visitors. No detailed signed analytics session is created by default. Admin, Santhai BuizOS, private account pages and local desktop mode are excluded. Basic totals are subject to scheduled 30-day cleanup and cannot be linked to an individual for deletion. Counting starts only when this feature is active; it does not reconstruct or backfill previous visits. The website does not display analytics prompts, buttons or preference panels. To stop future website analytics, enable Do Not Track or Global Privacy Control in your browser; shopping is unaffected.

Optional detailed website analytics

Browsers with a previously saved explicit analytics opt-in may continue to share fixed public page labels, published product/category references, cart actions and server-confirmed order/checkout submissions under a random signed browser session. New visitors use basic anonymous counts only and are not opted in to detailed collection automatically. Previous explicit opt-outs remain off. We do not record names, contact details, typed searches, raw URLs, form contents, visitor IP addresses or GPS in this analytics dataset. Sessions expire after 30 minutes of inactivity; raw analytics is subject to scheduled deletion after 30 days. A saved opt-out, Do Not Track or Global Privacy Control stops detailed collection and requests deletion of the current signed session; network failures can delay deletion. Clearing site storage resets the preference to basic counts only, not detailed consent, but does not itself erase previously retained server or provider data. If configured, only explicitly opted-in limited events are sent to Google Analytics with advertising use denied; already-sent Google data follows that property's retention/deletion controls and is not erased by local session deletion. Microsoft Clarity session recordings are not enabled.

Optional Meta advertising measurement

If you opt in, the website loads Meta Pixel and sends page views from the Join and registration pages, an AccountCreated event after successful mobile verification, and a ShopCreated event after a new online shop is saved. These events help measure advertising and may be used by Meta for ad attribution and optimization. We do not supply names, phone numbers, email addresses, shop details or form entries as event parameters. Meta may receive browser and connection data, the page URL and its own cookies under its terms. The Pixel first loads only after your opt-in and does not load when Do Not Track or Global Privacy Control is enabled. You can withdraw consent below; withdrawal stops future events from this browser but cannot erase events Meta already received. This option does not affect account or shop creation.

How long we keep data

We keep personal data only as long as needed for the purpose it was collected for, or as the law requires:

• Account and profile data: while your account is active; cleared when you delete your account, except as listed here.
• Orders, invoices and payment records: as long as tax and accounting laws require, generally up to 8 years.
• Ride, delivery and location records linked to a booking: up to 180 days after completion, longer only if needed for a complaint, safety issue or legal claim.
• Security and access logs: up to 180 days, or longer where the law requires.
• Analytics: as described above (30 days for raw records). Referral cookies: up to 30 days.
• Complaints and grievance records: up to 3 years after closure.
• Backups are overwritten on a rolling schedule.

Retention and security

We use signed sessions, access controls, encryption for sensitive files and device-secure token storage. Account deletion disables sign-in, clears direct account contact fields and removes saved addresses and shop ratings. It does not automatically erase product reviews, enquiries, seller-held contacts, device-only drafts or all operational and audit records. Ask our Grievance Officer to review remaining personal data. Retention for tax, accounting, safety, fraud prevention and disputes may limit deletion; seller-held copies require a separate request to the seller.

Your rights

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Access a summary of the personal data we process about you and who we have shared it with.
• Correct, complete or update inaccurate or incomplete data. You can edit your profile and addresses in the app.
• Erase personal data that is no longer needed, unless the law requires us to keep it. You can delete your account from the app or the Account deletion page.
• Withdraw consent you have given, as easily as you gave it.
• Have your complaints addressed by our Grievance Officer, and then by the Data Protection Board of India.
• Nominate another person to exercise these rights for you if you die or become unable to do so.

Children

SanthaiApp is meant for people aged 18 or older. A child may use it only with the verifiable consent of a parent or lawful guardian. We do not knowingly track children's behaviour or show them targeted advertising. If you believe a child has given us personal data without consent, contact our Grievance Officer.

Changes to this policy

We will update this policy when our practices or the law change, show the new last-updated date, and tell you about important changes in the app or on the website.