Welcome to Kuruvi. Your privacy is a priority for us. This document outlines how Kuruvi Q Commerce Private Limited handles the collection, processing, and protection of your data when you use our mobile application and website.

1. Detailed Information Collection

We collect information through three primary channels:

• Direct Disclosure: Information you provide during registration, including your Legal Name, Mobile Number, and Permanent Email Address.
• Service-Specific Data: Your precise GPS Coordinates (requested to ensure delivery partners can find your doorstep) and your Transaction History.
• Automated Data: Technical logs including your IP Address, Operating System, and App Interaction Patterns (via Google Analytics for Firebase).

2. Utilization of Data

Your data is processed under the following legal bases:

• Contractual Necessity: To verify your identity, process payments via encrypted gateways, and assign delivery partners to your location.
• Service Communication: Sending automated updates regarding order status, delivery partner tracking, and support queries.
• Platform Safety: To monitor for fraudulent transactions, account takeovers, and unauthorized usage of promotional codes.

3. Third-Party Data Disclosures

We may share limited datasets with the following entities:

• Logistics Partners: Only your name, phone number, and address are shared with assigned couriers.
• Payment Processors: We use industry-leading aggregators. We do not store raw Credit/Debit card numbers on our local servers.
• Regulatory Authorities: If required by Indian law to comply with legal processes or government requests.

4. Cookies & Tracking Technologies

Our website uses "Cookies" to maintain your session and remember your preferences. You can configure your browser to reject cookies, though some features of the Kuruvi platform may become unavailable.

5. Data Retention & Security

We retain your data as long as your account is active. We employ AES-256 Encryption for data at rest and TLS 1.3 for data in transit. While we implement bank-grade security, no internet-based system is 100% secure.

6. User Rights (Grievance Redressal)

Under the Digital Personal Data Protection (DPDP) norms, you have the right to:

• Request a copy of the data we hold about you.
• Correct inaccurate or incomplete information.
• Withdraw consent for location tracking (note: this will disable delivery services).
• Request account deletion and "Right to be Forgotten."