Shopsetu

Privacy Policy

Effective date: 4 October 2026

Shopsetu ("the App", "we", "us") is a business-to-business ordering app that connects wholesale distributors with retail shopkeepers. This policy explains what the App collects, why, who it is shared with, and the choices you have. By using the App you agree to the practices described here.

1. Information We Collect

We collect only what is needed to run the ordering service.

Category	What we collect	Why
Sign-in details	Shopkeepers: phone number and password. Distributors: email address and password. Passwords are stored only in hashed form by our sign-in provider.	To sign you in and keep your account secure
Recovery email	The email address on your account	To send password-reset emails when you ask for one
Shop information	Shop name, owner name, phone, email, address, area, city and pincode	To set up your shop and deliver your orders
Orders	Items, quantities, prices, delivery address, order status and payment status (paid or not paid). The App does not take card, UPI or bank details.	To place, track and fulfil orders
Terms acceptance	The version of the Terms and Conditions you accepted and when	To record that you agreed to the current terms
Product photos and files (distributors)	Photos you take or pick for products; spreadsheet (.xlsx) files you upload	To show product images and bulk-import the catalogue
Distributor access requests	Business name, contact number and email you submit when asking to join as a distributor	To review the request and contact you
App diagnostics and usage	Crash reports and app usage events (see section 3)	To fix problems and improve the App
On-device settings	Session, theme, language and biometric-lock settings, and a short-lived offline copy of the catalogue	To keep you signed in and remember your choices

We do not collect your location, contacts or advertising ID. Address fields are typed in by you or your distributor.

2. How We Use Your Information

To create and manage your account and shop
To process orders between shopkeepers and distributors and show their status
To show in-app notifications about your orders (for example confirmed, packed or delivered)
To keep the platform secure (for example blocking an account that is misused)
To find and fix crashes and understand which features are used
To answer you when you contact us

3. How Information Is Shared

We do not sell your personal information. It is shared only as follows:

Supabase (supabase.com) hosts our database, sign-in and file storage, and sends password-reset emails.
Firebase Crashlytics (Google) receives crash reports: device model, Android version, app version, the error, and your user ID. For distributors the report also carries the account email; for shopkeepers the shop code and shop name. This helps us fix the problem you hit.
Firebase Analytics (Google) receives usage events: screens opened, sign-in (with your role), items added to the cart, and orders placed (value and number of items). It is not used for advertising.
Between users of the App: your distributor sees your shop details and the orders you place with them. Shopkeepers never see other shops' data.
Legal requirements: we may disclose information if the law requires it or to protect the safety and integrity of the platform and its users.

4. Data Storage & Security

Your data is stored on Supabase-managed servers and protected by database access rules (Row Level Security), so a shopkeeper can only reach their own shop and orders. All traffic between the App and our servers is encrypted (HTTPS).

Biometric sign-in and app lock (optional): your fingerprint or face is checked by Android itself and never reaches the App or us. If you turn on biometric sign-in, your login ID and password are kept encrypted on your phone (Android Keystore) and are used only to sign you in.

5. Data Retention

We keep account and order data while your account is active, and afterwards as long as needed to provide the service, meet legal and accounting duties, resolve disputes and enforce our agreements. Crash reports and analytics events are kept by Firebase for its standard retention period.

6. Your Choices & Rights

Shopkeepers can view and update their shop and contact details in the App (Settings, Account Information).
You can turn biometric sign-in and the app lock on or off at any time in Settings.
You can ask us for a copy of your data, a correction, or deletion (see below).

7. Delete My Account

You can ask us to delete your Shopsetu account and personal data at any time.

How to request deletion:

Email shopsetu.info@gmail.com with the subject "Account Deletion Request".
Include the phone number or email you sign in with and, if known, your shop name or shop code.
We will verify the request and complete it within 30 days.

What gets deleted:

Your sign-in details, profile, and shop contact and address details.
Product photos you uploaded, where applicable.

What may be kept, and why:

If your account has past orders, it is blocked (access removed) instead of fully deleted, and those order records are kept. Order history must be preserved for accounting, tax and dispute resolution, and because other users' records refer to it.
Accounts with no orders are deleted outright, apart from what the law requires us to keep.

8. Children's Privacy

Shopsetu is for business use by shop owners and distributor staff. It is not meant for children, and we do not knowingly collect information from anyone under 18.

9. Permissions Used by the App

Internet and network state: to talk to our servers and tell you when you are offline.
Biometrics (optional): for fingerprint or face sign-in and the app lock.
Camera and photos (distributors, optional): only when you add a product photo; the App reads only the photo you take or pick.
Files (distributors): only the spreadsheet you pick for bulk product upload.

The App does not use the advertising ID.

10. Changes to This Policy

We may update this policy. When we do, we change the effective date at the top of this page. Continuing to use the App after a change means you accept the updated policy.

11. Contact Us

Questions about this policy or your data? Contact us:

Email: shopsetu.info@gmail.com