Usage data: pages visited, features used, device and browser info.
Content you submit: product listings, reviews, messages.
How We Use It
To provide and improve the Thriftora service.
To process payments and prevent fraud.
To communicate with you about orders and updates.
To comply with legal obligations.
Sharing
We do not sell your personal data. We share information only with:
Payment processors (Razorpay) to handle transactions.
Cloud storage and hosting providers (e.g. Cloudflare R2).
Law enforcement when legally required.
Cookies
We use cookies and similar technologies to keep you signed in and to remember your preferences. You can disable cookies in your browser, but some features may not work.
Data Retention
We keep your account data for as long as your account is active. If you delete your account, we delete personal data within 90 days, except where retention is required by law.
Your Rights under India's DPDP Act, 2023
Right to access: Sign in and visit GET /api/users/me/export for a JSON dump of your data.
Account profile data is retained until you delete it. Order history and payment records are retained for 7 years under the Indian Income Tax Act, 1961. Dispute records are retained for 5 years under the Consumer Protection Act, 2019. Full details in our Data Retention policy.
Breach Notification
In the event of a personal data breach, Thriftora will notify affected users and the Data Protection Board of India within 72 hours (DPDP §8).
Security
We use industry-standard encryption (HTTPS) and access controls. No system is perfectly secure , please use a strong password and protect your account credentials.
Children
Thriftora is not intended for users under 18. We do not knowingly collect data from children.
Changes
We may update this policy. Material changes will be announced on the site or via email.