Privacy Policy

We collect the following categories of information:

(a) Information You Provide Directly: • Account information: Phone number, name, email address, date of birth, gender, profile photo, and bio. • Address information: Delivery addresses, GPS coordinates, and location labels (Home, Office, etc.). • KYC documents: Government-issued identity documents (Aadhaar, PAN, Driving License, Passport) including front/back photos and selfie, when required for high-value rentals. • Booking data: Product selections, rental dates, fulfillment preferences, and payment information. • Communications: Messages, feedback, reviews, and support queries you send through the Platform.

(b) Information Collected Automatically: • Device information: Device model, operating system, unique device identifiers, app version, and crash logs. • Usage data: Pages visited, features used, search queries, time spent on the app, and interaction patterns. • Location data: GPS coordinates (with your permission) for store discovery, delivery address verification, and distance-based pricing calculations. • Network information: IP address, mobile carrier, and connection type.

We use your information for the following purposes:

• Service delivery: Process bookings, facilitate payments, arrange deliveries, and enable communication with Store Owners. • Account management: Create and manage your account, authenticate your identity, and personalize your experience. • Location services: Show nearby stores, calculate delivery fees, verify delivery addresses, and provide location-based search results. • KYC verification: Verify your identity for high-value rentals as required by Store Owners. • Communication: Send booking confirmations, delivery updates, payment receipts, extension approvals, review requests, and customer support responses. • Platform improvement: Analyze usage patterns, identify bugs, measure feature effectiveness, and improve the user experience. • Safety and security: Detect and prevent fraud, unauthorized access, and other illegal activities. • Legal compliance: Comply with applicable laws, regulations, and legal processes.

We share your information only as necessary:

• With Store Owners: We share your name, phone number, delivery address, and booking details with the respective Store Owner to fulfill your rental booking. Store Owners do not have access to your full profile or payment information.

• With payment processors: Payment information is shared with our PCI-DSS compliant payment partners (Razorpay, Stripe, etc.) to process transactions. We do not store your complete card details.

• With delivery partners: If a Store Owner uses a third-party delivery service, necessary delivery information (address, time slot) is shared with the delivery partner.

• With service providers: We use third-party services for cloud hosting (Google Cloud), media storage (Cloudinary), analytics, push notifications, and customer support tools. These providers process data on our behalf under strict confidentiality agreements.

• For legal reasons: We may disclose your information if required by law, court order, or government authority, or to protect the rights, safety, or property of Pickrbox, its Users, or the public.

• We do NOT sell, rent, or trade your personal information to third parties for marketing purposes.

We implement robust security measures to protect your data:

• All data in transit is encrypted using TLS/SSL protocols. • Sensitive data at rest is encrypted using industry-standard encryption algorithms. • Payment processing is handled by PCI-DSS Level 1 certified partners. • Access to personal data is restricted to authorized personnel on a need-to-know basis. • We use secure authentication (JWT tokens, OTP verification) and session management. • Our infrastructure includes firewalls, intrusion detection, rate limiting, and regular security audits. • KYC documents are stored in encrypted, access-controlled cloud storage.

Despite our best efforts, no system is completely secure. We encourage you to use strong device passwords and keep your app updated to the latest version.

We retain your personal information for as long as your account is active or as needed to provide our services. Specific retention periods:

• Account data: Retained until you request account deletion, plus a 30-day grace period for account recovery. • Booking records: Retained for 3 years from the booking date for legal and business purposes. • Payment records: Retained for 7 years as required by Indian financial regulations. • KYC documents: Retained for 1 year after the last associated booking, then securely deleted. • Usage logs and analytics: Retained in anonymized form for up to 2 years. • Communications and support tickets: Retained for 1 year after resolution.

When data is no longer needed, it is securely deleted or anonymized.

You have the following rights regarding your personal data:

• Access: You can view your profile information, booking history, and saved data at any time through the App. • Correction: Update your personal details through Profile > Edit Profile. For changes to your registered phone number, contact support. • Deletion: Request permanent deletion of your account and associated data through Profile > Privacy > Delete Account. Active bookings must be completed or cancelled before deletion. • Data portability: Request a copy of your personal data in a machine-readable format by contacting support. • Opt-out of marketing: Manage notification preferences through Profile > Notifications. You can opt out of promotional messages while still receiving transactional notifications. • Location permissions: Revoke location access through your device settings at any time. Some features (nearby stores, delivery fee calculation) may be limited. • Withdraw consent: You may withdraw your consent to data processing at any time, though this may affect your ability to use certain features.

To exercise any of these rights, contact us at privacy@pickrbox.com.

As a mobile application, we do not use traditional browser cookies. However, we use:

• Device identifiers: To recognize your device and maintain login sessions. • Analytics SDKs: To understand usage patterns, measure feature adoption, and identify app issues. Analytics data is aggregated and does not identify individual users. • Push notification tokens: To deliver real-time notifications about your bookings and account.

You can control analytics tracking through Profile > Privacy settings. You can manage push notifications through your device's notification settings.

The Platform may contain links to third-party websites, services, or applications (e.g., payment gateways, map services, social media platforms). These third parties have their own privacy policies, and we are not responsible for their data practices. We encourage you to review the privacy policies of any third-party services before providing them with your personal information.

Key third-party services we integrate with: • Google Maps: For location services and address autocomplete. • Cloudinary: For secure media storage. • Payment gateways: For payment processing. • Firebase/APNs: For push notifications.

The Pickrbox Platform is not intended for use by individuals under the age of 18. We do not knowingly collect, store, or process personal information from children under 18. If we become aware that we have inadvertently collected information from a child under 18, we will take immediate steps to delete such information from our systems. If you are a parent or guardian and believe your child has provided personal information to Pickrbox, please contact us at privacy@pickrbox.com.

Your data is primarily stored and processed in India using cloud infrastructure provided by Google Cloud Platform. In some cases, data may be processed by our service providers in other countries. When data is transferred internationally, we ensure appropriate safeguards are in place, including contractual protections and compliance with applicable data protection laws.

We may update this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated through:

• In-app notifications • Email to your registered email address • A prominent notice within the App

We will provide at least 7 days' notice before material changes take effect. Your continued use of the Platform after the updated policy takes effect constitutes your acceptance of the revised Privacy Policy. We encourage you to periodically review this page for the latest information on our privacy practices.

In accordance with the Information Technology Act, 2000 and the rules made thereunder, the Grievance Officer for the purposes of this Privacy Policy is:

Name: Pickrbox Grievance Officer Email: grievance@pickrbox.com Address: Pickrbox Technologies Pvt. Ltd., Bangalore, Karnataka, India

The Grievance Officer shall address your concerns within 30 days of receiving a written complaint.