Privacy Policy

1. Data we collect

• Account data — name, email, password (stored hashed), and role (shopper, creator, or brand).
• Brand/creator profile — store details, and, for payouts, business details such as GSTIN, PAN, and bank/UPI information you provide during KYC.
• Order data — items bought, and the delivery name, address, and phone needed to fulfil and ship an order.
• Payment data — handled by our payment partner (Razorpay). We receive a payment reference and status, not your full card number.
• Usage data — basic, first-party analytics (pages viewed, device/browser) to run and improve the service.

2. How we use your data

To create and run your account; to process orders, payments, payouts, and returns; to provide storefronts and dashboards; to prevent fraud and abuse; to provide support; to meet legal and tax obligations; and to improve the service. We do not sell your personal data.

3. How we share your data

• With the brand (seller of record) — for an order you place, the brand receives the delivery name, address, and phone needed to fulfil and ship it. Your email is not shared with the brand for marketing.
• With service providers — Razorpay (payments), Shiprocket (checkout and shipping), and our cloud host, who process data only to provide their service to us.
• For legal reasons — where required by law, or to protect rights, safety, and the integrity of the platform.

4. Cookies

We use essential cookies to keep you signed in and to remember your cart, and first-party analytics to understand usage. We do not use third-party advertising cookies. You can control cookies in your browser; disabling essential cookies may break parts of the service.

5. How we protect your data

Each creator's store is an isolated tenant, enforced at multiple layers so one store cannot read another's data. Customer contact details are encrypted at rest, secrets are held in secure configuration, and access is limited to what is needed to run the service. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.

6. How long we keep it

We keep personal data for as long as your account is active and as long as needed to provide the service and meet legal, tax, and accounting obligations, after which we delete or anonymise it.

7. Your rights

Subject to applicable law (including India's Digital Personal Data Protection Act), you may ask to access, correct, or delete your personal data, or to withdraw consent. Email hello@witezy.com and we will respond within the timelines the law requires. Some data may be retained where the law requires it.

8. Children

Witezy is not intended for anyone under 18, and we do not knowingly collect their data.

9. Changes

We may update this policy; we will post the new version here with a revised date and notify material changes in your dashboard.

10. Contact & grievances

For any privacy question or grievance, contact Dcrayons (operator of Witezy) at hello@witezy.com.