Privacy policy

This explains what personal data Mystery Wheels ([Your legal name / business name]) collects, why, and who it is shared with.

What we collect

• Account: your name and email (if you sign in with Google), or your mobile number (if you sign in by phone).
• Shipping: the addresses you save (name, phone, address, PIN code). A copy of the address is kept with each order it was used for.
• Orders and payments: what you bought, amounts, and payment status. We receive payment references from Razorpay, never your card or UPI details.
• Queue activity: when you joined and were last active in a drop's queue, so we can offer boxes fairly.

Why

To run your account, sell and deliver your order, process refunds, prevent fraud and abuse, and meet legal and tax obligations. We don't sell your data or use it for advertising.

Who we share it with

• Google Firebase: signing you in (email or phone number).
• Razorpay: processing payments and refunds.
• Shiprocket and its courier partners: your name, phone and address, to deliver your order.
• Resend: sending order and shipping emails to your email address.
• Our hosting providers (Vercel, Railway, Supabase, Cloudflare): they store and run the service for us. Some of them process data outside India (e.g. Singapore).
• Sentry: error reports about the service, configured to exclude your personal data.

Cookies

We use one essential cookie to keep you signed in. We don't use advertising or tracking cookies.

How long we keep it

Order and payment records are kept as long as the law requires for accounting and tax. [DECIDE: retention for accounts and saved addresses after an account is closed.]

Your rights

You can see and edit your name, email and addresses on your Profile page, and delete saved addresses there. To ask for a copy of your data, a correction, or deletion of your account, contact our grievance officer below.

Contact

Grievance officer: [Grievance officer name], [grievance officer email]. Postal address: [Full postal address, city, state, PIN].