Skip to content

Privacy Policy

Effective 7 November 2026

Draft — highlighted details are still to be filled in and the text reviewed by a lawyer before launch.

This policy explains how [[Registered business name, e.g. Pocketshelf Technologies Pvt Ltd]] handles personal data under India's Digital Personal Data Protection Act, 2023. It covers shop owners who use pocketshelf and the customers who message those shops.

  1. 1. Our role

    • For shop owners' accounts, we decide how data is used (we are the data fiduciary).
    • For a shop's customers, the shop decides; we process the data on the shop's behalf to run its WhatsApp bot, shop page and orders.

  2. 2. What we collect

    • Shop owners: name, email, mobile number, shop details, UPI ID, bank details you choose to add, GSTIN.
    • Customers of a shop: WhatsApp number and name, messages sent to the shop, delivery address, orders, booked time slots, payment screenshots and UTR numbers.
    • Technical: a login session cookie and server logs (IP address, time). We use no advertising or tracking cookies.

  3. 3. Why we use it

    • To log you in, run the bot, take orders, show invoices, and send order updates.
    • To send offers only to customers who said yes (they can reply STOP any time).
    • To keep the service secure, prevent abuse, and meet legal duties (for example tax records).

  4. 4. Who we share it with

    • Meta (WhatsApp Business Platform), to deliver messages.
    • Our hosting and email providers, under contract, only to run the service.
    • Authorities, when the law requires it.

  5. 5. How long we keep it

    Account and order data stay while the shop is active, and up to 8 years after for tax and legal records. Chat messages are kept up to 12 months. When a shop closes, the rest is deleted within 90 days.

  6. 6. Your rights

    You can ask to see, correct or erase your data, withdraw consent, nominate someone to act for you, and complain. Customers of a shop can ask the shop directly or write to us and we will pass it on. Write to the grievance officer below.

  7. 7. Security

    Data is sent over HTTPS, login codes and WhatsApp access tokens are stored encrypted or hashed, and each shop can only see its own data.

  8. 8. Children

    The service is for businesses. We do not knowingly collect data of children under 18.

  9. 9. Grievance officer

    [[Grievance officer name]], [[Registered business name, e.g. Pocketshelf Technologies Pvt Ltd]], [[Registered office address]]. Email: [[grievance@yourdomain.in]]. We acknowledge complaints within 24 hours and resolve them within 15 days. You may also approach the Data Protection Board of India.