My Durga Mart ("we", "our", or "us") operates the My Durga Mart mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.
By using the App, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
1.1 Personal Information You Provide
- Name (optional at signup)
- Mobile phone number (required for OTP-based login)
- Email address (optional, for order receipts)
- Delivery address (full name, address line, city, pincode, phone) — required only at checkout
- Order history (products, prices, timestamps)
1.2 Automatically Collected Information
- Device information: device model, OS version, unique device ID
- Approximate & precise location (only when you grant permission, used for delivery routing)
- App usage logs: screens visited, features used, errors encountered
- IP address and general connectivity metadata
1.3 Payment Information
Currently, we accept Cash on Delivery (COD) only. No payment card data is collected. When online payments launch, they will be processed by PCI-DSS compliant third-party providers (Razorpay/Stripe) — we will never store your card or UPI PIN details on our servers.
2. How We Use Your Information
- Verify your identity via SMS OTP
- Process, dispatch, and deliver your orders
- Assign delivery partners and share your address with them (only after you place an order)
- Provide live order tracking
- Send order confirmations and delivery updates
- Improve the app, fix bugs, and analyze usage patterns
- Comply with Indian laws (GST, TRAI, consumer protection)
- Respond to customer support requests
3. SMS Communications
We send transactional SMS via MSG91 (our approved SMS partner) for:
- Login OTPs
- Order confirmations, dispatch, and delivery notifications
- Delivery partner approval OTPs (to authorized admins)
We do not send marketing or promotional SMS unless you explicitly opt in.
4. Location Data
We request location permission to:
- Calculate delivery time estimates
- Help our delivery partner navigate to your address
- Show accurate store availability in your area
You may deny location permission and still use the app; you will need to manually enter your delivery address at checkout.
5. Data Sharing with Third Parties
We share your data only with:
- Delivery partners (name, address, phone — only for your active order)
- MSG91 (mobile number — for SMS delivery)
- Payment processors (when applicable, only after online payments launch)
- Government authorities (when legally required)
We do not sell your data to advertisers, brokers, or any third party for marketing purposes.
6. Data Retention
- Account data: retained while your account is active + 3 years after your last order for tax/legal compliance
- Order history: retained for 7 years (Indian tax law requirement)
- OTP records: deleted 15 minutes after generation
- Location data: retained only for the duration of your active order, then deleted
You may request full deletion of your account and associated data by emailing us (see Section 11).
7. Data Security
- HTTPS/TLS 1.2+ encryption for all data in transit
- Bcrypt password hashing for delivery partner accounts
- JWT tokens for session management (30-day expiry)
- IP whitelisting for SMS provider access
- MongoDB access controls — data accessible only to authorized backend services
- OTPs are one-time-use and expire in 5 minutes
Despite our efforts, no system is 100% secure. In the unlikely event of a data breach, we will notify affected users within 72 hours as required by the Indian Digital Personal Data Protection Act, 2023.
8. Children's Privacy
My Durga Mart is intended for users aged 18 and above. We do not knowingly collect data from children under 18. If you believe a child has provided us with data, please contact us for immediate removal.
9. Permissions Requested by the App
| Permission | Purpose | Optional? |
|---|
| Phone (SMS auto-read) | Auto-fill OTPs (Android) | Yes |
| Location (foreground) | Delivery routing & ETA | Yes |
| Internet | API communication | No |
| Notifications | Order status updates | Yes (opt-in) |
10. Your Rights (Under Indian DPDP Act, 2023)
- Access your personal data
- Correct inaccurate data (edit profile in-app)
- Delete your account and data ("Right to be Forgotten")
- Withdraw consent for optional data (location, notifications)
- Portability — receive your data in a machine-readable format
- File a grievance with our Grievance Officer (see Section 11)
11. Contact Us — Grievance Officer
Email: support@mydurgamart.in
Phone: +91 8809273293
We will respond within 7 business days as per Indian regulations.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified via in-app banner and email (if provided). The "Last updated" date at the top of this policy reflects the latest revision. Continued use of the app after changes constitutes acceptance.
13. Governing Law
This Privacy Policy is governed by the laws of India. Any disputes shall be subject to the exclusive jurisdiction of courts in Jamshedpur, Jharkhand.