Privacy Policy

Effective Date: 10 April 2026

---

This Privacy Policy explains how IshiKart collects, uses, stores, and protects information on our Social Commerce SaaS Platform. We empower local stores with complete POS and Online Store management tools while enabling direct, transparent connections between buyers and sellers. Your privacy is fundamental to our mission of building trust in local commerce.

1. Information We Collect

• Account Information: Name, email address, phone number, profile photo, and secure login credentials for both buyers and store owners.
• Store & SaaS Data: Store name, business address, owner identification (Aadhaar/PAN), tax details, verification documents, POS inventory data, online store catalog, pricing, and stock levels.
• Social & Communication Data: Direct messages between buyers and stores, bargain negotiations, store follows, product ratings, reviews, and social interactions on the platform.
• Transaction Details: Order history, payment reference IDs, shipping details, and handshake verification records between buyers and stores.
• Medical Information: In cases of pharmacy orders, we temporarily process and store doctor-issued prescriptions uploaded by the user for verification by the licensed seller.
• Technical & Location Data: IP address, device type, browser information, approximate location (for finding nearby stores), and activity logs to ensure platform security and performance.

2. How We Use Your Information

• Platform Operations: To power our Social Commerce Network, enabling direct buyer-store connections, bargain negotiations, and community features.
• SaaS Services: To provide stores with complete POS management, online storefront tools, inventory tracking, sales analytics, and customer relationship management.
• Direct Commerce: To facilitate transparent direct transactions between users and stores. Platform fees: daily POS billing fee only on days you bill from POS; 2% commission on online storefront orders only.
• Trust & Safety: To verify store authenticity, prevent fraud, and maintain our secure Handshake System for transaction verification.
• AI Support: To process support requests via Zorro (AI Assistant) and our human support team.
• Legal Compliance: To ensure compliance with the Information Technology Act, data protection laws, and other applicable Indian regulations.

3. Data Sharing & Disclosure - Direct Commerce Model

As a Social Commerce SaaS Platform, we facilitate direct connections while protecting your privacy. We never sell your data to marketing agencies. Information is shared only as follows:

• Direct Buyer-Store Connection: When you place an order or message a store, relevant details (name, contact, delivery address) are shared directly with that specific store to enable commerce. Platform fees apply only for POS usage (daily fee on active POS billing days) and online orders (2% commission on online sales).
• Social Features: Your public profile, store follows, and reviews are visible to other platform users to build community trust and social commerce engagement.
• Service Providers: Payment gateways and logistics partners (like Shiprocket) necessary to fulfill your orders.
• Legal Requirements: When required by law, court order, or government regulation to prevent fraud or illegal activities.

4. Data Storage & Security

Your data is stored using industry-standard encryption and secure cloud infrastructure (including Amazon S3 for documents). While we implement robust technical safeguards to prevent unauthorized access, please note that no method of transmission over the internet is 100% secure. We encourage users to use strong passwords and protect their login details.

5. Your Rights & Control

Cookies: You can manage cookie preferences through your browser settings to control tracking and session management.

6. Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices or legal obligations. Continued use of the platform after an update constitutes your consent to the revised policy.

---