AccountMy cartYour information, handled responsibly.
This policy explains how Mavora's Mart handles personal and device information across our website and Android application.
1. SCOPE
Who this policy covers
This Privacy Policy applies when you browse, create an account, sign in, place an order, subscribe to updates, contact support or otherwise use the Mavora's Mart website or mobile application.
2. INFORMATION WE COLLECT
Data used to provide the service
- Account and contact data: name, email address, mobile number and sign-in method.
- Delivery data: saved addresses, PIN code, recipient details and delivery preferences.
- Order data: products, quantities, charges, discounts, delivery slot, order history and fulfilment status.
- Payment records: Razorpay order/payment identifiers, amount, status and refund records. Complete card numbers, CVVs, UPI PINs and banking passwords are processed by Razorpay and are not stored by Mavora's Mart.
- Security and device data: login-attempt records, encrypted or hashed authentication credentials, session tokens and a basic device name for mobile sessions.
- Communications: support messages, refund evidence and newsletter email preferences that you choose to provide.
- Technical data: ordinary server logs such as IP address, browser or app information, request time and diagnostic information needed for security and reliability.
3. HOW WE USE DATA
Purposes of processing
- Create and protect accounts, authenticate sign-ins and maintain secure sessions.
- Process payments, fulfil orders, manage delivery slots and display order history.
- Send order confirmations, service messages and customer-support responses.
- Apply coupons, process cancellations or refunds and prevent payment or account fraud.
- Maintain, troubleshoot and improve the website, app, catalogue and customer experience.
- Send promotional email only where you have chosen to subscribe; you may unsubscribe at any time.
- Meet accounting, tax, consumer-protection, security and other legal obligations.
4. SERVICE PROVIDERS
When information is shared
We do not sell or rent personal information. We share only the information reasonably required for a provider to perform its service.
- Razorpay and participating banks or payment networks for payment processing, verification, fraud checks and refunds.
- Google when you choose Google sign-in, subject to Google's own privacy terms.
- Resend and email infrastructure for transactional emails and subscribed communications.
- Hosting, database, security and technical providers that operate the service on our behalf.
- Delivery or fulfilment partners when needed to deliver an accepted order.
- Authorities or professional advisers where disclosure is required by law or necessary to protect customers, the public or our legal rights.
5. SECURITY
How data is protected
We use HTTPS encryption in transit, access controls, password hashing, restricted administrative access, secure session handling, payment-signature verification and operational backups. No internet service can guarantee absolute security, but we review and improve safeguards as the service develops.
6. RETENTION & DELETION
How long information is kept
We retain account and operational information only while it is needed to provide the service, resolve disputes, prevent abuse and meet legal obligations. Failed login-attempt records are used for short-term security controls. Session records expire or are revoked.
- When an account is deleted, saved addresses, login credentials, mobile sessions and unnecessary profile details are removed or anonymised.
- Completed transaction, payment, refund and invoice-related records may be retained where necessary for tax, accounting, fraud prevention, dispute resolution or another legal requirement.
- Where a service provider holds data on our behalf, we instruct it to delete or restrict that data when applicable and legally permitted.
7. YOUR CHOICES
Access, correction and control
You can update profile and address information from your account. You may request access, correction or deletion by contacting support@mavorasmart.com. We may verify account ownership before completing a sensitive request.
8. CHILDREN
Not directed to children
Mavora's Mart is a general-audience commerce service intended for adults who can enter into a purchase contract. We do not knowingly create accounts for children under 18.
9. UPDATES & CONTACT
Questions about this policy
We may update this policy as the service or legal requirements change. Material changes will be reflected on this page with a revised update date. Privacy questions can be sent to support@mavorasmart.com. Mavora's Mart is based in Visakhapatnam, Andhra Pradesh, India.