Assam Crafts Privacy Policy

1. Overview & Scope

This Privacy Policy explains how Assam Crafts (“we”, “our”, or “us”) collects, uses, stores, shares, and protects information when you use the Assam Crafts Android/mobile application, customer web login, or artisan/vendor portal.

By registering an account, signing in with OTP, browsing handcrafted products, placing an order, or onboarding as a seller on Assam Crafts, you agree to the practices described in this Privacy Policy.

2. Information We Collect

We collect only the information needed to operate a safe, reliable multi-vendor marketplace:

• Customer Account & Identity Details: Full name, mobile phone number (for OTP authentication), optional email address, date of birth, gender, and optional profile photo.
• Shipping & Delivery Addresses: Recipient full name, contact phone number, street address, city, state, and PIN code required for order delivery.
• Shopping, Orders & Reviews: Items in your cart and wishlist, order history, cancellation/return requests, tracking updates, product ratings, written reviews, and review images.
• Payment & Transaction Metadata: Payment method (COD, UPI, Card, NetBanking, Online Payment), transaction reference ID, payment verification status, and invoice amount. Card numbers and UPI PINs are entered directly via third-party PCI-DSS compliant payment gateways and are never stored in plain text on Assam Crafts servers.
• Seller / Artisan Onboarding Data (Vendors Only): Business name, owner name, phone, business address, GST number, PAN details, bank settlement account details, and verification documents uploaded during merchant onboarding.
• Technical & Session Data: Basic server request logs, authentication tokens, and essential session cookies required to keep you signed in securely.

3. How We Use Information

• Verify customer identity via One-Time Passwords (OTP) and maintain secure user sessions.
• Process, pack, ship, and deliver orders purchased from Assam Crafts artisans and sellers.
• Manage cancellations, returns, refunds, and vendor payout settlements.
• Send essential transactional alerts and in-app notifications regarding order confirmations, shipping milestones, and account updates.
• Prevent fraud, duplicate registrations, unauthorized account access, and policy abuse.
• Comply with Indian tax, GST invoicing, and statutory record-keeping obligations.

4. Device & App Permissions

The Assam Crafts mobile app only requests device permissions strictly needed when you actively trigger a feature:

• Photos / Media / Camera: Requested only when you choose to upload a profile photo, product review image, or seller store/KYC verification document.
• Notifications: Used to deliver order status updates (Confirmed, Processing, Shipped, Delivered, Cancellation/Return status) and platform alerts.
• Network Access: Required to fetch live catalog listings, sync cart/wishlist state, verify OTPs, and complete payments.

5. How We Share Information

We share personal information only on a strict need-to-know basis to fulfill marketplace services:

• Verified Assam Crafts Sellers: Order item details, recipient name, phone number, and shipping address are shared with the specific seller fulfilling your order.
• Logistics & Courier Partners: Delivery address, contact number, and airway bill tracking details are shared with shipping carriers to dispatch your package.
• Payment Gateway Providers: Order totals and transaction references are processed through integrated online payment providers to verify digital payments and refunds.
• Legal & Regulatory Authorities: Disclosed only when required by applicable Indian law, court order, or tax/regulatory audit.

6. Data Security

We implement appropriate administrative, technical, and organizational safeguards to protect your data, including HTTPS/TLS encrypted transport, token-based API authentication, OTP expiration controls, role-based access enforcement, and multi-tenant isolation separating each seller’s inventory, orders, and payouts.

7. Data Retention & Account Deletion

We retain personal data only as long as necessary to provide your Assam Crafts account, complete pending deliveries or refunds, and satisfy statutory GST/tax or dispute-resolution requirements.

You may request deletion of your account and associated personal data at any time through our dedicated web portal without needing to reinstall the mobile app:

Go to Account & Data Deletion Page

8. Your Rights & Controls

• Access & Correction: View and update your profile details, email, profile photo, and saved delivery addresses directly in the app or customer portal.
• Account & Data Deletion: Request deletion of your account and personal profile data via our Account Deletion page.
• Order Cancellations & Returns: Raise cancellation or return requests directly on eligible orders and track resolution status.

9. Children’s Privacy

Assam Crafts is not intended for children under the age of 13 (or under 18 without parental/guardian supervision for online purchases). We do not knowingly collect personal information from children. If you believe a child has registered personal details with us, please contact us immediately for removal.

10. Changes to This Policy & Grievance Contact

We may update this Privacy Policy periodically to reflect improvements or legal requirements. Changes become effective once posted on this page with an updated revision date.