privacypolicy

When you place an order, we process your name, contact details, delivery address, order items and payment status so we can fulfil, support and account for that order. We do not store card credentials, UPI PINs, passwords or OTPs in analytics.

Signed-in customers can save multiple delivery addresses in Account and edit or remove them without placing an order. For local deliveries in 312001, you can choose to share a one-time GPS location and confirm it for the delivery address. Location permission or sharing a precise location is not required to order. We do not track your movements in the background or send delivery coordinates to analytics. Confirmed coordinates are stored with the order and, when you save the address, with that saved address, so authorised delivery staff can find the destination. Editing or removing a saved address does not change previous orders. If you open a Google Maps link, the destination coordinates are passed to Google Maps. Saved account addresses are removed when your account is deleted; order information remains subject to the retention rules below. Guest addresses saved on a device can be removed at checkout.

If you choose “Allow analytics,” we use ShopStory’s own analytics and Google Analytics to understand pages visited and important shopping actions. This may use an anonymous or pseudonymous visitor identifier and collect device category, browser, operating system, approximate location and interaction data. We do not send names, phone numbers, full addresses, payment data or typed form contents to analytics. Google may process this information as our analytics provider. While a page is visible, ShopStory also sends a presence update about every 30 seconds so our team can see the current page of consenting visitors. Individual presence records are excluded from live reports after 90 seconds without an update and are cleaned up after two hours of inactivity when presence or reporting next runs.

We store your account notification preferences and notification inbox messages. Order updates and offers default to on for new accounts, and existing opt-outs are preserved. These preferences are shared between the website and app. Order messages are private to the account that owns the order; guest orders require a verified account link. Browser and Android push alerts separately require your permission. For Android, we store a device push token; Expo Push Service and Google Firebase Cloud Messaging process tokens and notification content to deliver alerts. For browser alerts, we store a push subscription endpoint and encryption keys, and your browser’s push provider processes subscription information and encrypted messages. You can independently turn off order updates or offers in Account, or block alerts in Android or browser site settings. The website inbox works without push permission. Logging out detaches that installation and clears displayed browser alerts. We stop using invalid registrations and devices inactive for 90 days. Inactive registrations are removed after 100 days, and registrations/preferences are removed when your account is deleted. Alerts may appear on your device’s lock screen depending on its settings.

At checkout, you may separately choose to receive one cart reminder and a feedback request. This option is unchecked by default. If selected, your name, chosen contact method and cart summary may be retained for up to seven days. You can opt out by unchecking the option before leaving checkout or by contacting ShopStory.

Order records are retained as required for fulfilment, accounting, fraud prevention and legal obligations. Notification inbox messages expire after 10 days; a daily cleanup removes old inbox messages and completed or expired delivery records. Old completed campaign content is cleared, while limited campaign identifiers remain to prevent duplicate sends. This does not delete order history or recall alerts already stored by a device or push provider. Optional abandoned-cart records expire after seven days. Analytics is retained only as long as useful for store improvement and may be processed by Google under its service terms. We do not sell personal information.

You can refuse or withdraw optional analytics below. Refusing analytics does not affect shopping, pricing, checkout or delivery. You may contact ShopStory to request access, correction or deletion where applicable.

You can request account deletion from the Account tab or our public deletion page, without installing the app. We verify ownership before deleting the login account, profile and associated data not subject to necessary retention. Certain order, bill, payment and delivery records may be retained for accounting, legal obligations, fraud prevention or unresolved cases; the deletion page explains the process and timing. Deleting an account does not automatically cancel orders or refund payments.