This Privacy Policy explains how ShopZer ("we", "us"), India, collects, uses, shares and protects personal data when you use the ShopZer Android app and related website (the "Platform"). It is written to align with the Digital Personal Data Protection Act, 2023 and its Rules, the Information Technology Act, 2000, and the Consumer Protection (E-Commerce) Rules, 2020.
By using the Platform you agree to this Policy. If you do not agree, please do not use the Platform.
ShopZer is a marketplace/listing platform. Merchants subscribe to create shops and product listings. Customers browse and contact merchants directly by WhatsApp or phone. ShopZer does not take orders, collect payments for purchases, settle merchant proceeds, or deliver products. The app includes a cart that only adds up the listed prices of products you select; it does not place an order, and it asks you to contact the merchant by WhatsApp or phone. The only payments we process are merchant subscription fees. We do not run ads and we do not sell your personal data.
We do not collect Aadhaar, PAN, bank account details, or GST or food-licence documents. There are no chats, reviews or ratings on the Platform. Customers do not upload content other than an optional profile photo.
We process data based on your consent and, where the DPDP Act permits, for legitimate uses such as legal compliance and security. You can withdraw consent at any time (Section 8); this may limit what you can do on the Platform. You can turn off location access or notifications in your device settings.
| Data | Why we use it | Basis |
|---|---|---|
| Mobile number | Login by OTP, account security, fraud prevention | Consent; legitimate use |
| Name (optional) | Personalise the app, support | Consent |
| Profile photo (optional) | Show on your own profile (not shown to others) | Consent |
| Precise and approximate location | Nearby shops, map features | Consent (permission) |
| Device, usage, screens, searches | Run and improve the Platform | Consent |
| Crash and performance data | Fix bugs and stability | Legitimate use |
| WhatsApp/Call taps | Understand feature use, prevent abuse (not shown to merchants) | Consent |
| Cart items | Calculate totals shown to you | Consent |
| Push token | Send notifications | Consent |
| Merchant details and listings | Show your shop and products | Consent; contract |
| Shop location pin | Display your shop on the map | Consent |
| Subscription records | Billing, accounting, disputes | Contract; legal obligation |
| Support messages | Resolve your request | Consent |
The Android app may request: location (precise and approximate) for nearby shops and maps; notifications to send updates; camera and photos/media so merchants can upload shop and product images, and so customers and merchants can add a profile photo; and internet access. Each is requested at the time of use, and you can change or withdraw it in device settings. Declining a permission may limit related features, such as nearby shops.
Merchant shop details that you publish are visible to all users: shop name, address, city, shop location pin, contact or WhatsApp number, and your listings and photos. Do not include personal information in listings that you do not want shown publicly.
Merchants cannot see customer information through the Platform. A merchant learns a customer's details only if the customer chooses to contact them by WhatsApp or phone.
Profile photos of customers and merchants are not shown to other users. They are visible only to you in your own account.
We do not sell your personal data. We share it only as follows:
Transfers outside India: Because our servers and some providers are outside India, your personal data will be transferred and processed outside India. We do this only as the DPDP Act and Indian government notifications permit, and we require providers to protect data under contract.
Security measures: We use encryption in transit (HTTPS/TLS), access controls and row-level access rules on the database, limited staff access, secure authentication tokens, and monitoring for abuse. We review these measures from time to time. No system is completely secure, and we cannot guarantee absolute security.
Breaches: If a personal data breach occurs, we will investigate and contain it, notify the Data Protection Board of India and affected users as the law requires, and take steps to prevent recurrence.
Under the DPDP Act you have the right to:
How to exercise them: use the in-app options (profile and delete account) or email support@shop-zer.com or legal@shop-zer.com from the contact details linked to your account. We may verify your identity first. We aim to respond within 30 days, or sooner where the law requires. We may decline requests that are unlawful, repeated without basis, or that require us to keep data by law, and will tell you why.
The Platform is for people aged 18 and above. We do not knowingly collect data from children, track or monitor them, or target advertising at them. If we learn that a user is under 18, we will delete the account and related data. If you believe a child has given us data, contact support@shop-zer.com or legal@shop-zer.com.
Our website and app may use cookies, local storage and device identifiers for login sessions, security and analytics. You can manage cookies in your browser.
WhatsApp, phone calls and merchants' own channels are operated by third parties under their own policies. We are not responsible for their practices.
We may update this Policy. The latest version will be posted with its date, and material changes will be notified in the app or by other reasonable means. Continued use means you accept the update.
Grievance Officer: Mohammed Tahir
Email: legal@shop-zer.com / support@shop-zer.com
We acknowledge complaints within 48 hours and aim to resolve them within one month, or sooner where the law requires.
We do not show ads, do not use advertising IDs or personalised advertising features, and do not sell or rent personal data. We do not make decisions about you that have legal effects solely by automated means. Listings may be checked by automated tools for prohibited products, and flagged items are reviewed by a person where needed.
The Platform uses Google (Firebase, Google Analytics, Crashlytics, FCM), Mappls, Supabase, Railway, Cloudflare and Razorpay. Each processes data under its own terms and privacy policy, and we choose providers that commit to protecting data. Razorpay handles card, UPI and bank details securely under its own standards.