Privacy Policy

1. Information We Collect

We collect information that you directly provide to us, including:

• Contact & Shipping Details: Your full name, email address, mobile phone number, delivery address, and pincode.
• Order & Transaction Information: Items purchased, order numbers, transaction references, and payment status (handled securely via Razorpay).
• Technical & Usage Data: IP address, device type, browser information, and browsing activity for security, rate-limiting, and analytics.

2. Google User Data (OAuth 2.0 / Sign In with Google)

When you choose to authenticate using Sign in with Google, our application requests access only to the basic non-sensitive scopes: email, profile, and openid.

• What We Access: Your primary Google account email address, full name, and avatar profile picture.
• How We Use It: We use your Google account information solely to verify your identity, create or link your customer account, allow you to log in seamlessly, and associate your orders and addresses with your profile.
• No Third-Party Sharing: We do not sell, rent, or transfer Google user data to any external parties or data brokers. Google user data is never used for serving advertisements.

3. How We Use Your Information

We process personal information for lawful business purposes:

• Processing, fulfilling, and dispatching orders via verified shipping partners (Shiprocket).
• Sending automated order receipts, tracking links, and customer service updates.
• Preventing fraudulent checkouts, managing rate limits, and ensuring platform security.

4. Data Protection & Security

We implement industry-standard 256-bit SSL encryption for data transmission in transit. Customer data is stored in secure, access-controlled databases with strict Row Level Security (RLS) policies. Payment transactions are processed directly through PCI-DSS compliant payment gateways (Razorpay); we do not store raw credit/debit card numbers or CVVs on our servers.

5. Data Retention and Account Deletion

We retain your account and order history only as long as necessary to fulfill orders, maintain statutory tax/accounting records, and provide customer support.

How to Request Data Deletion: You have the right to request deletion of your account and all associated personal data (including Google OAuth data). To request data removal, please send an email with the subject “Data Deletion Request” to contact.mintarabites@gmail.com. We will verify and permanently delete your customer account within 30 days.

6. Contact Information

If you have any questions or feedback regarding our privacy practices, please contact us at: