Privacy Policy

ShopQ ("the Platform") is operated by PULSECOMMERCE PRIVATE LIMITED. ShopQ is a connecting platform (an "intermediary" under the Information Technology Act, 2000) — we introduce buyers, sellers, and service providers to each other and provide trust and verification rails. We do not take custody of your money, hold your funds, or act as a party to the transactions you enter into with other users; those are settled directly between you and the other party. For the purposes of the Digital Personal Data Protection Act, 2023, PULSECOMMERCE PRIVATE LIMITED is the Data Fiduciary for the personal data described here.

Account information: Phone number (required), name, profile photo, your contact preference, saved addresses (including block, floor, flat and a map pin for deliveries), and UPI IDs you choose to save. We do not store your card, bank-account, or full payment-instrument details.

Identity verification (KYC): For partners, sellers, and riders we run Aadhaar-based verification through DigiLocker and licensed KYC partners. From this verification we do not store your Aadhaar number — we retain only the partner's verification reference, the last four digits, the name and photo returned by the verification, and a one-way irreversible identifier derived from your Aadhaar (used solely to ensure one verified identity per account, and from which the number cannot be recovered).

Business and credential verification: When a seller or partner submits a credential for checking — GSTIN, Udyam, FSSAI licence, PAN, driving licence, or vehicle registration — we store the number and any document you upload, and check it against the issuing government source.

Travel bookings (Tickets), with your consent: To book travel through an agent on ShopQ, you may give us the details the booking needs — traveller names, date of birth, gender, an identity document type and number (which may be Aadhaar, PAN, passport or voter ID), passport number and expiry, phone, email, and an emergency contact. We store these only with your consent, to share with the agent you book through. If you choose to scan an ID card, the image is processed by our AI provider (see §4) to read the details for you.

Delivery partners (riders): Driving licence and vehicle registration numbers, payout UPI ID, and an emergency contact.

Transaction data: Your listings, orders, bids, and bookings; payment records (such as a UPI reference or a payment screenshot you upload, and whether the other party confirmed it); invoices a seller issues to you; ratings and reviews; and records of any service fees you pay to ShopQ. Because settlement is peer-to-peer, we do not hold a stored-value balance on your behalf.

Device and usage data: Device model, OS and app version, network type, approximate city, the screens and pages you use, precise location (GPS) when you permit it, IP address (in security and audit logs), crash diagnostics, and product-analytics events (see §4 and §7).

Camera, microphone and photos: Used only when you use a feature that needs them — scanning a code, taking product photos, or recording a short shelf video. If you turn on app lock, your fingerprint or face is checked by your device; ShopQ never receives it.

Communications: In-app chat messages, support tickets, and feedback you submit.

We use your information to:
- Provide and improve Platform services
- Connect you with nearby buyers, sellers, and service providers
- Collect ShopQ service fees, where you choose a paid ShopQ service
- Verify identity (KYC) and business credentials, and prevent fraud
- Send transactional notifications (OTP, order updates, bid alerts)
- Provide customer support
- Comply with legal obligations
- Generate analytics to improve the Platform

We share your information only as follows:

With other users: Your display name, ratings, and approximate location are visible on your listings and storefront. When you place an order, make a booking, or a deal is accepted, the other party sees what they need to complete it — your name, the delivery address you gave (including block, floor and flat), and, according to your contact preference, your phone number for calls and WhatsApp. Contact for calls and WhatsApp is on by default; you can change it in your settings. A seller's business name, address and contact details are shown on their storefront, and an invoice a seller issues carries the buyer's details the invoice needs.

With service providers (processors): The following receive only the limited data needed to perform their function:
- Payments: Razorpay (for ShopQ service fees you choose to pay)
- SMS / WhatsApp / OTP: MSG91, MTalkz
- Identity verification (KYC): DigiLocker, Surepass, Cashfree. Used only when you choose to get verified.
- Business & document verification: Cashfree, Surepass (GSTIN, Udyam, FSSAI licence, PAN, driving licence, vehicle registration) — used when a seller or partner submits a credential for checking.
- Maps & places: Google Maps Platform, MapmyIndia (Mappls), OpenStreetMap (location, addresses, place search)
- AI features: Anthropic — powers in-app assistance, listing suggestions, photo checks, and reading an ID card you choose to scan. Text and images you give those features are sent for processing; do not include anything you would not want processed by a third party.
- Push notifications: Expo (delivering via Apple APNs and Google FCM)
- Cloud, media storage and security: Cloudflare (Cloudflare R2 storage, content delivery, and Turnstile bot protection at sign-in)
- Crash diagnostics: Sentry (device + error data, linked to your account ID)
- Product analytics: PostHog, in the mobile app (in-app usage events, linked to your account ID)
- Delivery services: Shiprocket — only when a seller connects their own account to send an order; it receives the pickup and drop addresses, names and phone numbers.

With authorities: When required by law, court order, or to protect the safety of our users.

We do not sell your personal data to third parties, and we do not use advertising trackers.

Our database and application servers are hosted in India (Mumbai). Some of the service providers in §4 — for example Anthropic, PostHog, Sentry, Expo and Cloudflare — may process the limited data they receive outside India, only to perform their function and as permitted under the Digital Personal Data Protection Act, 2023. We use encryption in transit (TLS) and at rest, and access to personal data is restricted to authorized personnel on a need-to-know basis.

We collect location data to show nearby listings, calculate delivery distances, and match riders with orders. We do not collect your location in the background. You can control location permissions through your device settings. Disabling location may limit certain features.

On the web, your sign-in is kept in your browser's local storage, and we do not set advertising or tracking cookies; Cloudflare Turnstile may set a cookie at sign-in to tell people from bots. While you are signed in, we record the pages you use in our own analytics, which is not shared with third parties. In the mobile app we use product analytics (PostHog) and crash diagnostics (Sentry), which collect usage events, device details and errors linked to your account ID, so we can fix bugs and improve the Platform. You can object to non-essential processing by contacting our Grievance Officer (see §12).

We retain your account data for as long as your account is active. Request logs are kept for 30 days and notification delivery records for 90 days.

Deleting your account: You can delete your account at any time from the app (Profile → Settings → Delete account), or by emailing privacy@shopq.ai from your registered number. On deletion we anonymise your profile (name, photo, phone), delete your saved addresses, locations, devices and UPI IDs, take your listings down, and revoke every logged-in session.

What we keep: Records of past listings and transactions are retained for up to 8 years, as required by Indian tax and commercial law and for dispute resolution. Verification records you submitted (credential numbers and documents, the KYC reference and one-way identifier) and travel-booking details may also be retained to prevent fraud and meet legal obligations. To ask for any of these to be removed where the law allows, write to privacy@shopq.ai. Because ShopQ never holds your funds, there is no balance to settle on deletion.

Under the Digital Personal Data Protection Act, 2023, you have the right to:
- Access a summary of your personal data and how it is processed
- Correct or complete inaccurate data
- Request erasure of your data
- Withdraw consent for data processing
- Nominate a representative to exercise your rights
- Have your grievances addressed

To exercise these rights, contact our Grievance Officer (see §12). If you are not satisfied with our response, you may complain to the Data Protection Board of India.

ShopQ is not intended for users under 18 years of age. We do not knowingly collect data from minors, other than travel-booking details of a minor traveller entered by an adult who confirms they have the consent of the minor's parent or guardian. If we discover that we have otherwise collected data from a minor, we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes through the app or via SMS. Continued use after changes constitutes acceptance.

In accordance with the Information Technology Act, 2000, the IT (Intermediary Guidelines) Rules, 2021, and the Digital Personal Data Protection Act, 2023:

Name: Ravisankar Velidi, Grievance Officer, PULSECOMMERCE PRIVATE LIMITED
Email: grievance@shopq.ai
Address: 1606-B, Orbit, Raidurg, Hyderabad Knowledge City, Cyberabad, Shaikpet, Hyderabad – 500081, Telangana, India
We acknowledge complaints within 24 hours and aim to resolve them within 15 days of receipt.

For privacy-related questions, contact us at: privacy@shopq.ai
PULSECOMMERCE PRIVATE LIMITED, 1606-B, Orbit, Raidurg, Hyderabad Knowledge City, Cyberabad, Shaikpet, Hyderabad – 500081, Telangana, India
CIN: U62099TS2026PTC216644 · GSTIN: 36AARCP0949H1ZZ