Privacy

What this site stores about you, and why.

What we collect

If you create an account: your phone number or email address, and a password.
If we raise a bill for you: your name, your phone number, and the pieces on that bill.
If you tap “Enquire on WhatsApp”: which piece you were looking at, and when. This is recorded against a one-way identifier, not against your account.
Nothing else. There is no analytics service, no advertising network, and no third-party tracker on this site — which is why you are not being asked to accept cookies.

Passwords are hashed with Argon2id and are never stored in a form anyone can read, including us.
One-time codes sent to you are stored hashed, expire after five minutes, and can be used once.
Signing in sets one cookie. It holds a random identifier and nothing about you; it is marked HttpOnly and Secure so it cannot be read by a script.

Invoices are kept indefinitely. Indian GST rules require invoice records to be retained for several years, and we keep them rather than deleting on a schedule.
Your account exists until you ask us to remove it. Ask, and we will.
One-time codes are deleted as soon as they expire or are used.

We do not sell your details, and we do not share them with anyone for marketing.
Product photographs are served by an image hosting provider. That provider sees the request for the image, as it would for any website.
Messages you send us go through WhatsApp, and WhatsApp’s own privacy terms apply to them.

To see what we hold about you, correct it, or have it removed, message us. Ask for the bills we hold and we will send them.