Privacy Policy

1. Who We Are & Applicability

MyPadosi (operated by Macrova Technologies Pvt. Ltd, CIN: U47912KA2025PTC208089, having its registered office at Aratt Requizza, Electronics City Phase-1, Bangalore - 560100, Bangalore, Karnataka — "we", "us", "our") operates an online neighbourhood marketplace that connects local store owners ("Sellers") with residents of their community ("Buyers").

This Privacy Policy applies to all individuals who interact with the MyPadosi platform in any capacity:

• Buyers Residents who browse stores, place orders, and write reviews.
• Sellers Store owners who list products, manage their store, and fulfil orders.
• All Users Anyone who visits mypadosi.in or uses either app.

By accessing or using our platform and/or registering for an account, you agree to this Privacy Policy and provide your informed consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree, please do not use the platform.

Permissible Age: Our services are intended for individuals aged 18 years and above. By using the platform, you confirm you meet this requirement or have the express consent of a parent or legal guardian.

2. Data We Collect

2.1 Account & Identity All Users

2.2 Buyer-Specific Data Buyers

2.3 Seller-Specific Data Sellers

2.4 Communications & Support All Users

• Messages you send to our support team via email or in-app chat
• Survey responses and feedback you voluntarily provide
• Information you provide when reporting a problem with an order or user

3. Automatic Data Collection All Users

When you use the platform, we and our technology partners automatically collect:

Cookies

Our website uses cookies and similar tracking technologies (pixel tags, web beacons) to authenticate sessions, remember preferences, measure the effectiveness of features, and deliver analytics. By using our website with your browser set to accept cookies, you consent to our use of cookies. You can modify cookie preferences through your browser settings; however, disabling certain cookies may limit platform functionality.

4. How We Use Your Information

• Service Delivery: Process orders, facilitate payments, calculate delivery charges, match buyers with nearby stores based on location, send order status notifications.
• Account Management: Create and maintain your account; authenticate you on sign-in; manage role selection (buyer vs. seller); process seller onboarding.
• Platform Operations: Detect and prevent fraud, abuse, and policy violations; maintain platform security; moderate user-generated content (reviews, photos).
• Personalisation: Customise store recommendations, product suggestions, and promotional offers based on your location, order history, and preferences.
• Communications: Send transactional messages (OTP, order confirmations, status updates) via SMS, push notification, and email; send marketing communications with your consent (see Section 10).
• Analytics & Improvement: Analyse aggregated, anonymised usage data to understand how features are used and improve the platform.
• Legal Compliance: Comply with Indian law including tax record-keeping, respond to lawful government and court requests, enforce our Terms of Service.
• Seller Performance: Generate analytics on order volumes, product performance, and customer ratings to help sellers manage their business.

5. How We Share Your Information

5.1 Between Buyers and Sellers

When a buyer places an order, their name, delivery address, and order details are shared with the specific seller to enable fulfilment. The seller's store name, address, products, prices, and ratings are visible to buyers on the platform.

5.2 With Service Providers

We share data with third-party processors who provide services on our behalf (see Section 6). All processors are bound by contractual data processing agreements and may only use data for the specified purpose.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the successor entity. We will notify you of any such change via in-app notice or email.

5.4 Legal & Safety Disclosures

We may disclose your information when required or permitted by law:

• To comply with a court order, summons, government notice, or other legal obligation under the IT Act 2000 or other applicable Indian law
• To detect, prevent, or investigate fraud, illegal activity, or a safety threat
• To protect the rights, property, or safety of MyPadosi, our users, or the public
• To enforce our Terms of Service and Seller Agreement

5.5 With Your Consent

We may share your information in other ways not described here if we notify you and obtain your explicit consent at the time of sharing.

6. Third-Party Service Providers

The following processors handle personal data on our behalf under binding data processing agreements. Each link leads to their own privacy policy.

7. Data Retention

After the applicable retention period, we will delete or anonymise your data. Where deletion is technically constrained (e.g., backup storage), we will isolate and protect data from further processing until deletion is possible.

8. Data Security

• All data in transit between your device and our servers is encrypted using TLS 1.2 or higher.
• Firebase Firestore and Cloud Storage apply Google's AES-256 encryption at rest.
• Firebase Security Rules are configured to ensure sellers can only access their own store and order data; buyers can only access their own order history.
• Phone authentication uses Firebase OTP with reCAPTCHA verification to prevent automated abuse.
• Payment data is handled exclusively by Razorpay (PCI DSS Level 1 certified) — we do not store, log, or transmit full card numbers or CVVs.
• Access to production systems is restricted to authorised personnel only, with audit logging enabled.

Despite these measures, no system is completely secure. You are responsible for keeping your account credentials confidential. If you discover a security vulnerability, please report it to security@macrovatech.com.

9. Your Rights Under the DPDPA

As a data principal under India's Digital Personal Data Protection Act, 2023, you have the following rights. To exercise them, use the in-app options listed, or email privacy@macrovatech.com. We will respond within 30 days.

Your rights may be subject to limitations under applicable law where: (a) the request is abusive or disproportionate; (b) exercising the right would endanger the safety of another person; or (c) the data is required to comply with a legal obligation or enforce a legal claim.

You may also raise a complaint with India's Data Protection Board of India once it is operational.

10. Marketing Communications & Opt-Out

By registering on the platform, you opt in to receive communications from MyPadosi. We may contact you via push notification, SMS, email, and WhatsApp for:

• Transactional messages (OTPs, order confirmations, status updates, payment receipts) — you cannot opt out of these as they are necessary for the service
• Platform alerts (policy changes, account notices) — cannot be opted out
• Marketing messages (new store alerts, deals, promotions, seasonal offers) — you may opt out

To opt out of marketing communications:

• Push notifications: App → Profile → Notification Preferences, or via device Settings
• Email: Click "Unsubscribe" in any marketing email
• SMS/WhatsApp: Reply STOP to any marketing message, or email privacy@macrovatech.com

11. Cookies & Tracking

Our website uses cookies for session authentication, preference storage, and analytics. Our mobile apps do not use browser cookies, but use device identifiers (e.g., FCM tokens, Android Advertising ID) for push notifications and anonymised analytics.

We use Firebase Analytics for app usage measurement. Firebase Analytics on mobile does not access Apple's IDFA or Android Advertising ID for advertising purposes — it uses pseudonymous app instance IDs. No advertising SDK is embedded in MyPadosi apps.

Third-party links in the app or website may have their own tracking practices; we are not responsible for these and encourage you to review their privacy policies.

12. Children's Privacy

The MyPadosi platform is not directed at or intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors. If you are a parent or guardian and believe your child has registered an account, contact us immediately at privacy@macrovatech.com and we will delete the account promptly.

13. Data Transfers Outside India

Some of our service providers — specifically Google Firebase (authentication, Firestore, analytics) and Sentry (crash reporting) — operate infrastructure outside India and may process your data on servers located outside Indian territory. Such transfers are subject to the respective providers' data processing agreements, which include standard contractual protections, and we ensure compliance with applicable Indian data protection law.

Payment data processed by Razorpay and order data processed by Shiprocket remain within India.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, or our data practices. When we do, we will revise the "Last updated" date at the top of this page. For material changes, we will notify you via push notification or in-app message at least 15 days before the new policy takes effect. Your continued use of the platform after the effective date constitutes acceptance of the updated policy.

15. Grievance Officer & Contact

If you have questions, concerns, or complaints regarding this Privacy Policy or our data practices, please contact our Grievance Officer:

For general support: support@macrovatech.com
For security vulnerabilities: security@macrovatech.com