This Privacy Policy explains how Growpefy ("Growpefy", "we") collects, uses and protects personal data when you visit growpefy.com, use our merchant dashboard, or shop through a checkout powered by Growpefy.
1. Who this covers
- Merchants: businesses and their team members who create a Growpefy account.
- Shoppers: customers who place orders on a merchant's checkout. For shopper data, the merchant is the data controller and we process it on the merchant's behalf.
2. Data we collect
- Merchant account data: name, email, password (stored only as a secure hash), business and billing details such as GSTIN and address, and wallet and invoice records.
- Store connections: store platform, payment gateway and Meta ad account credentials you provide, stored to run the Service.
- Shopper order data: name, phone number, email, delivery address, items ordered, order value, payment method and status. We do not collect or store full card numbers, UPI PINs or bank passwords; payments are handled by the merchant's payment gateway.
- Technical data: IP address, device and browser information, pages visited, and cookies needed for login sessions and checkout. Merchants may enable advertising pixels (such as Meta Pixel) on their checkout.
3. How we use data
- To provide checkout, create orders in the merchant's store, apply offers, COD and RTO rules (including the merchant's block list), and show analytics.
- To verify phone numbers and send order messages (OTP, WhatsApp) when the merchant enables them.
- To bill merchants, issue GST invoices and maintain the wallet ledger.
- To secure the Service, prevent fraud and abuse, and meet legal obligations.
- To contact merchants about their account and important changes. We do not sell personal data.
4. Sharing
We share data only as needed to run the Service: with the merchant whose checkout was used; with the store platform, payment gateways, messaging providers (SMS and WhatsApp) and Meta as configured by the merchant; with our hosting and infrastructure providers; and with authorities where required by law.
5. Storage and security
Data is stored with reputable cloud providers using encryption in transit, hashed passwords, access controls and automatic session timeouts. No system is perfectly secure, but we work to protect your data and will notify affected parties of a breach as required by law.
6. Retention
We keep account and order data while the account is active and for as long as needed for legal, tax and accounting purposes (generally up to 8 years for invoices). Merchants can ask us to delete store data after closing their account.
7. Your rights
You can ask to access, correct or delete your personal data, or withdraw consent, as provided under the Digital Personal Data Protection Act, 2023 and other applicable law. Shoppers should first contact the merchant they bought from; we will help merchants respond.
8. Cookies
We use essential cookies to keep you logged in, remember the selected store and run checkout. Merchants may add analytics or advertising pixels to their checkout, governed by their own privacy policy.
9. Changes
We may update this policy and will post the new version here with the date it changed.
10. Contact and grievance officer
For privacy questions or complaints, write to support@growpefy.com. Growpefy.