Privacy Policy

1. What we collect

From everyone

• Your mobile number, which you log in with, your name and, if you add it, your email address.
• Your messages with our support team.

From customers

• Your delivery addresses, with their place on the map, a label (like “Home”) and a phone number for the delivery.
• Your orders: the items, stores, amounts, how you paid, and your ratings.
• Your location, if you allow it, to show stores near you and fill in your address.
• Your carts and favourite products, which stay on your phone.

From stores

• The store's name, category, description, address and map pin, opening hours, photos, products and prices.
• The owner's name, mobile number and email address.
• The owner's identity proof (its type, its number and a photo of it) and PAN card (number and photo), and for stores selling food the FSSAI licence (number, expiry date and photo).
• The store's GST number, if it has one, and its bank account details.
• Its orders, earnings and payouts.

From delivery partners

• Your name, mobile number, date of birth, email address (if you add it) and a photo of you.
• Your identity proof (its type, its number and a photo of it) and PAN card (number and photo).
• Your vehicle (its type, make and model and registration number) and, for a motor vehicle, your driving licence (number, expiry date and photo) and photos of its registration certificate and insurance.
• Your bank account details.
• Your location while you're online, to offer you nearby leads and to guide and track deliveries.
• Your trips, earnings, payouts and ratings.

Aadhaar

You never have to give us your Aadhaar: a passport, voter ID or other identity proof works too. If you choose Aadhaar, we keep only the last four digits of the number, and we ask for a photo of a masked Aadhaar, with the first eight digits hidden. We don't use Aadhaar authentication.

Collected automatically

When the app talks to our servers, they record technical details such as the time, your IP address, the app's request and whether it worked, to keep audoor secure and fix problems. We don't use advertising identifiers or third-party ad trackers in the app. Our website, audoor.in, sets no cookies; if you join its city waitlist, we keep the city and mobile number you enter.

2. How we use it

• To create your account, keep it secure and let you log in.
• To run orders and deliveries: show you stores, send orders to stores, match them with delivery partners, guide partners, track deliveries and take payments.
• To check that stores and delivery partners are who they say they are, and that their documents are valid.
• To pay stores and delivery partners, and keep the records tax and accounting laws require.
• To help you when something goes wrong, and to sort out disputes.
• To keep audoor safe: preventing fraud and abuse, and protecting our systems.
• To improve audoor, using statistics that don't identify you.
• To send you messages about your orders and your account. We only send offers if you agree to them.

We process your personal data with your consent, which you give when you create an account and add your details, and for the other lawful uses the Digital Personal Data Protection Act, 2023 allows, such as meeting our legal obligations.

3. Who sees your data

The people on your order

• The store sees your name (first name and initial), the items you ordered, your area, and a way to call you about the order.
• Your delivery partner sees your name, phone number and the pickup and drop addresses, and how much to collect.
• You see your delivery partner's name, photo and vehicle, and their live location during the delivery.
• Everyone using audoor can see a store's name, address, photos, opening hours, products and ratings.

Companies that help us run audoor

We share only what each needs, under contracts that require them to keep it safe:

• Render and Neon, which host our servers and database;
• Cloudflare, which stores photos;
• Apple, whose Maps service the iPhone app uses for maps and address search;
• payment providers, when you pay by UPI, and messaging providers, when we text you;
• Vercel, which hosts our website.

When the law requires it

We share personal data with the government, courts or police when the law requires us to, for example in response to a lawful order, for tax, or under social security schemes for platform workers, and when it's needed to protect someone's safety.

If audoor is merged with or bought by another company, your data moves with it, still protected by this policy. We never sell your personal data, and we don't share it for other companies' advertising.

4. Your documents

Photos of documents, and of delivery partners, are kept in private storage. They can only be opened through links that stop working after 15 minutes, by you and by the members of our team who verify accounts. A store's storefront and product photos are public, as they're shown to customers.

5. Where it's stored

Our servers and database currently run in data centres in the United States, and photos are stored with Cloudflare. The Digital Personal Data Protection Act, 2023 allows personal data to be processed outside India, except in countries the government restricts; we use providers with strong security wherever your data is.

6. How long we keep it

• We keep your data while your account is open.
• When you delete your account, we delete your profile, addresses, documents and photos. Photos are usually gone within minutes and always within a day.
• We keep the records the law requires, such as orders, payments, invoices, payouts and tax records, for as long as it requires (usually up to eight years), and nothing else.
• Photos you upload but never save are deleted within a day.
• Technical records of requests are kept only for a short time, usually a few weeks.

7. Keeping it safe

Everything you send to audoor travels encrypted (HTTPS). Documents are stored privately and opened only through short-lived links, only our team members who need personal data can see it, and you can log out of your account on a device at any time. If a breach ever affects your personal data, we tell you and the Data Protection Board of India as the law requires.

8. Your rights

Under the Digital Personal Data Protection Act, 2023, you can:

• ask for a summary of the personal data we hold about you, what we do with it, and who we've shared it with;
• correct and update your data (most of it right in the app) and complete what's missing;
• have your data erased: delete your account in the app (under Profile), or ask us;
• withdraw your consent, which means closing your account, as we can't run audoor for you without your data;
• nominate someone to use these rights for you if you die or can't act yourself;
• complain to our Grievance Officer and, if you're not satisfied with the answer, to the Data Protection Board of India.

To use any of these rights, write to [grievance email]. We may ask you to confirm it's you before we act.

9. Children

audoor is for people aged 18 and over, and we don't knowingly collect children's personal data. If you think a child has given us their details, tell us and we'll delete them.

10. Permissions on your phone

• Location, while you use the app: to show stores near you and set addresses, and for delivery partners to get leads and guide deliveries.
• Camera: for stores and delivery partners to photograph documents, storefronts and themselves.
• Photos: the app only gets the photos you pick.

11. Changes to this policy

We post every update to this policy here and tell you in the app before a significant change takes effect.

12. Grievance Officer and contact

[Company's registered name], [registered address], is responsible for your personal data on audoor (its Data Fiduciary).

Our Grievance Officer is [Grievance Officer's name], at [grievance email]. We acknowledge every complaint within 24 hours and resolve it within 15 days. For anything else, email support@audoor.in or chat with us from the app.