Privacy Policy

This Privacy Policy explains what personal data StoreFiller collects when you use the Platform, why we collect it, who receives it, how long we keep it, how we protect it and the choices and rights you have. It applies to shops, company (Seller) staff, warehouse staff and riders. We process personal data in line with the Digital Personal Data Protection Act, 2023 and the rules under it, and the Information Technology Act, 2000 and its rules. Atavishaala Agro Exports Private Limited is the data fiduciary for the data described here.

In this document "StoreFiller", "we", "us" and "our" mean Atavishaala Agro Exports Private Limited, the company that operates the StoreFiller mobile apps, the partner portal at partner.storefiller.in and the website at storefiller.in (together, the "Platform").

1. Personal data we collect

Data you give us

• Account: mobile number, name, email address (if you give one), preferred language and your role (shop, company staff, hub staff or rider).
• Shop details: shop name, owner name, address, the map location you set for delivery, GSTIN (optional) and shop photos.
• Company and warehouse details (Sellers): legal name, GSTIN, PAN, licences such as FSSAI, business documents, warehouse addresses, contact persons and bank account details for payouts.
• Rider details: name and mobile number, as added by the rider's hub.
• Communications: what you tell us in support requests, complaints, return reports (including photos and videos), reviews and calls with our team.

Data created when you use the Platform

• Orders and payments: what you order, prices, invoices, delivery details, delivery codes, payment method and status, refunds and wallet credits. Card and bank details are entered with our payment partner and are not stored by us.
• Delivery records: rider location during active deliveries, delivery time, handover photos and failed-delivery reasons.
• Device and log data: a push-notification token, app version, device type and operating system, IP address and security logs needed to deliver notifications, keep the Platform secure and fix errors.
• Usage: products you view, open, add to cart and search for, used to show relevant suggestions.
• Preferences: notification settings, language and saved items.

Data from others

• Payment status from our payment partner, and one-time-code verification results from our sign-in provider.
• Details about a shop that a referrer or a Seller gives us, such as a referral code.

2. How and why we use it

• To provide the service: create and secure your account, verify you with one-time codes, show products that can be delivered to your location, take and process orders and payments, deliver, issue invoices, refund and resolve complaints.
• To verify Sellers and riders: check business identity, licences and bank accounts before a company can sell or be paid.
• To communicate with you: send order and delivery updates and, if you agree, offers and reminders, in the language you choose.
• To improve StoreFiller: understand which products and features are used, so that we can improve search, suggestions and the app.
• For safety and fraud prevention: set order limits, detect fake accounts, fake orders and coupon misuse, and protect users and riders.
• To meet legal duties: tax and accounting records, GST and income-tax reporting, and lawful requests from authorities.

3. Our legal basis

We process personal data on the basis of the consent you give when you sign up and when you turn on optional features, such as offers and reminders. We also process it for legitimate uses the law allows without fresh consent, including where you voluntarily give data for a purpose (for example, placing an order), to comply with law and court orders, and to respond to medical emergencies or threats to safety.

4. Who receives your data

• Sellers and their warehouses receive what they need to fulfil and invoice your order: shop name, owner name, delivery address and location, GSTIN for the invoice, and the order details.
• Riders receive the shop name, delivery address and location and the amount to collect. Phone numbers are masked where possible.
• Shops see the Seller's legal name, address and GSTIN on products and invoices.
• Service providers who process data on our behalf under contract, only for our purposes:
  • Google Cloud and Firebase: hosting, database, sign-in, push notifications and file storage;
  • Cashfree Payments: payments, refunds and payouts;
  • our email and SMS providers: one-time codes and service messages.
• Professional advisers such as auditors and lawyers, under confidentiality.
• Authorities where the law requires it, such as tax authorities, courts and law-enforcement agencies with a valid request.
• A successor, if StoreFiller's business is merged or sold, under the same protections as this policy.

We do not sell personal data, and we do not share it with advertisers.

5. Where your data is stored

Our servers and database are hosted by Google Cloud in its Singapore region, and some services, such as push notifications and file storage, run on Google's global infrastructure. Your data may therefore be processed outside India. Such transfers are made in line with Indian law, to providers bound by contract to protect it, and not to any country the Government of India has restricted.

6. How long we keep it

• Account and shop details: while your account is active. When you delete your account, personal details are removed or anonymised at that time.
• Orders, invoices and payment records: for the period tax and accounting law requires, generally eight years from the end of the financial year, in anonymised form after account deletion.
• Usage events for suggestions: 90 days.
• Rider location: only during active deliveries and as part of that delivery's record.
• Return photos and videos, support records and call recordings: as long as needed to resolve the matter and any dispute about it, and then deleted.
• Security logs: for the period the law requires.

7. How we protect it

• Mobile numbers, GSTINs, bank details and other identifiers are encrypted in our database, and shown masked in most screens.
• Data travels over encrypted connections (HTTPS).
• Access is limited to staff who need it for their job, every access to protected data is logged, and staff are bound by confidentiality.
• Payment card data is handled only by our PCI-DSS compliant payment partner.
• If a personal data breach occurs, we will inform the affected users and the Data Protection Board of India as the law requires, and take steps to limit its effect.

8. Your rights

• Access: ask for a summary of the personal data we hold about you and how we use it.
• Correction and update: correct inaccurate or incomplete data. Most details can be edited in the app under Profile.
• Erasure: delete your account and personal data from the app (Profile, Account settings, Delete account), subject to records the law requires us to keep.
• Withdraw consent: switch off offers and reminders in Notifications, or withdraw consent entirely by deleting your account. Withdrawal does not affect processing already done.
• Nominate: nominate another person to exercise your rights if you die or become unable to.
• Grievance: complain to us, and if you are not satisfied, to the Data Protection Board of India.

To use any right not available in the app, write to support@storefiller.in from the email on your account, or call +91 87488 21287. We may need to verify your identity first, and we respond within the time the law sets.

9. Your duties

Please give only true and current information, do not upload other people's personal data except what is needed (for example, a customer's details in a complaint), and do not impersonate anyone.

10. Cookies and similar technologies

The partner portal uses essential cookies to keep you signed in and secure. The apps store your sign-in session and settings on your device. We do not use advertising cookies or third-party tracking or analytics tools.

11. Notifications and permissions

• Notifications: used for order updates and, if you opt in, offers. You can switch them off in the app or in your phone settings.
• Location: the shop app uses the location you set on the map, not live tracking. The rider app uses location only during active deliveries.
• Camera and photos: used only when you choose to take or upload a photo, for example for a return report or proof of delivery.

12. Children

StoreFiller is for businesses and is not intended for anyone under 18. We do not knowingly collect data about children. If you believe a child has given us data, contact us and we will delete it.

13. Third-party links

The Platform may link to other websites, such as a payment page or a Seller's website. Their privacy practices are their own; please read their policies.

14. Contact and complaints

Grievance Officer, Atavishaala Agro Exports Private Limited, H. No. 107/B, Jaibhim HSG, Kedgaon, Ahmednagar (Ahilyanagar), Maharashtra 414001, India. Phone +91 87488 21287, email support@storefiller.in, Monday to Saturday, 10:00 AM to 7:00 PM IST (closed on Sundays and national holidays). We acknowledge complaints within 24 hours and resolve them within 15 days. If you are not satisfied with our response, you may approach the Data Protection Board of India.

15. Changes to this policy

We will post updates here with a new version and date, and tell you in the app when a change is material, for example a new purpose or a new kind of recipient.