Privacy Policy

This Privacy Policy explains how Company ("Express Cart", "we", "us", or "our") collects, uses, stores, and protects your personal information when you use expresscart.net, our online store platform, and our iOS and Android mobile applications (collectively, the "Service").

1. Who this policy applies to

Merchants — businesses and individuals who create a store on Express Cart.
Shoppers — people who buy from stores built on Express Cart.
Visitors — anyone browsing our website.

For shopper data, the merchant who runs the store decides how it is used, and Express Cart processes it on the merchant's behalf.

2. Information we collect

Account details — name, email address, phone number and password (stored encrypted).
Store details — store name, logo, products, settings and business contact details.
Order details — items purchased, delivery address, order and delivery status, courier and tracking number.
Payment details — payments are processed by Razorpay, Stripe or PayPal. We do not store full card numbers or CVV; we receive only payment status and reference IDs.
Usage and device data — IP address, browser, device type and pages visited, used for security and to improve the Service.
Communications — messages you send to support, and email preferences.

3. How we use information

To create and run stores, process orders and show order tracking.
To send service emails such as order updates and password resets.
To send marketing emails, only where permitted — you can unsubscribe at any time.
To keep the Service secure and prevent fraud.
To provide support and improve our features.
To meet legal, tax and accounting obligations.

4. Sharing information

We do not sell personal data. We share it only with:

Payment gateways (Razorpay, Stripe, PayPal) to process payments.
Courier partners chosen by the merchant, to deliver orders.
Service providers who host our servers and send email, under confidentiality obligations.
Authorities, when required by law.

5. Cookies

We use essential cookies to keep you signed in and to remember your cart. You can block cookies in your browser, but parts of the Service may stop working.

6. Data retention

We keep data while your account is active and as long as needed for the purposes above or as required by law (for example, tax records). You can ask us to delete your account.

7. Security

We use encrypted passwords, secure (HTTPS) connections, access controls and regular reviews to protect data. No system is 100% secure, but we work to protect your information.

8. Your rights

Subject to applicable law, including India's Digital Personal Data Protection Act, 2023, you can ask to access, correct or delete your personal data, withdraw consent and raise a grievance. Shoppers should first contact the store they bought from. To make a request, email support@expresscart.net.

9. Children

The Service is not intended for children under 18, and we do not knowingly collect their data.

10. Changes to this policy

We may update this policy. We will change the "Last updated" date above and, for significant changes, notify merchants by email.

11. Contact

Email: support@expresscart.net