Privacy Policy

1. Who we are

FeroMart (FeroMart) runs the FeroMart app for customers, the FeroMart Partner app (for shops and Delivery Persons) and this website. We connect people with local shops and local Delivery Persons. This policy explains what personal data we collect when you use them, why, and what you can do about it. It follows the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 of India.

2. What we collect

Everyone who uses an app

• Account: mobile number (required, to log in with an OTP), name, email (only if you add it), app language.
• Location and addresses: the location of your phone when you open the app, to check whether we deliver there, and the addresses you save, with their map pin.
• Orders: what you order, from which shop, the amount and charges, delivery details, and the status of the payment.
• Phone and app: an installation id made by the app, phone model and brand, Android version, app version, screen size, language, time zone, the notification token, IP address and when you were last active. We use these to keep your login safe (one phone at a time), send notifications and fix problems.
• Messages with us: what you send to customer care, and "Notify me" requests from areas where we do not deliver yet.

Shops and Delivery Persons (in addition)

• Shop name, address, GSTIN and licences (for example FSSAI), or vehicle type and number.
• KYC documents and their numbers. For Aadhaar we keep only the last 4 digits.
• Bank account or UPI id for payments, and the cash collected on cash orders.

What we do not collect

We never see or store your card number, CVV, UPI PIN or net-banking password: payments are made inside the payment company's page or your UPI app. This website uses no advertising or tracking cookies; it only remembers your light / dark choice in your browser.

3. How we use it

• To log you in with an OTP and keep your account secure.
• To show the shops that deliver to you, take your order to the shop and the Delivery Person, and deliver it. Your order is handed over against a delivery code.
• To take payments, give refunds and pay shops and Delivery Persons.
• To send order updates by notification and SMS, and OTP codes by SMS or email.
• To check shops and Delivery Persons before they can work with us.
• To stop fraud and misuse, and to keep records the law asks for (for example GST and tax records).
• To decide which areas to open next, using "Notify me" requests.

We use your data because you asked for our service, because you agreed, or because the law requires it.

4. Who we share it with

We do not sell your personal data. We share only what is needed:

• The shop you order from: your name, phone, delivery address and the order.
• The Delivery Person carrying your order: your name, phone, address and map pin.
• Customers see a shop's name and address, and the first name of their Delivery Person.
• Service providers who work for us: payment companies (such as PhonePe and Cashfree), SMS and email services, Google Firebase for notifications, maps, and our server hosting. They may use the data only to provide that service to us.
• Authorities, when the law requires it.

5. How long we keep it

• While your account is open, we keep what we need to run it.
• When you delete your account, you are logged out at once, and after 30 days your name, phone, email, addresses, phone details and IP addresses are removed. Until then you can cancel by logging in again.
• Orders, payments and invoices stay for as long as tax law requires, shown as "Deleted user". Invoices keep the name and address printed on them.
• Shops and Delivery Persons are our business partners: their accounts stay while they work with us (the shop, its orders and their settlements). They cannot delete the account in the app or on the website; when they ask us, our team deletes it, and the same steps as above follow.
• KYC documents and bank details of shops and Delivery Persons are deleted 2 years after their account is deleted.
• Login history is kept for 365 days. OTP codes stop working after a few minutes.

6. How we protect it

Data travels over HTTPS. Document numbers, bank accounts and UPI ids are stored encrypted; OTP codes and login tokens are stored only in a scrambled (hashed) form. Our team sees only what their work needs, every action in our admin panel is recorded, and sensitive actions need a second code. No system is perfectly safe; if a breach affects you, we will tell you and the authorities as the law requires.

7. Your choices and rights

• See and correct: your name, language and other details are in the app under Account.
• Delete: in the app (Account → Delete account) or on our Delete your account page. Shops and Delivery Persons: ask our team.
• Notifications and location: turn them off in your phone settings. Without location you can still type an address.
• Ask or complain: write to us or our Grievance Officer (below). You may also approach the Data Protection Board of India.

8. Children

Our apps are meant for people aged 18 and above. Younger people should use them only with a parent or guardian.

9. Changes

We will update this policy when our service changes. The date at the top shows the last change; for important changes we will also tell you in the app.

10. Contact and grievances

Business

FeroMart

Customer care

The phone number and email will be added here soon. Until then, use Help in the app.

Grievance Officer

The name and email of our Grievance Officer will be added here soon. We acknowledge a complaint within 48 hours and try to resolve it within 30 days.