1. Introduction
Shomay ("we," "us," or "our") is an independently operated digital platform. We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and mobile applications (iOS and Android) (collectively, the "Platform").
By accessing or using the Platform, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy.
1.1 Scope
This Privacy Policy applies to all users of the Platform and describes:
- Information we collect
- How we use your information
- How we share your information
- Your rights regarding your information
- Security measures we implement
1.2 Compliance
We comply with applicable Indian laws, including:
- The Information Technology Act, 2000
- The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
- The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021
2. Information We Collect
2.1 Information You Provide to Us
Account Information:
When you create an account, we collect:
- Full name
- Email address (currently only Gmail addresses are supported for registration and password recovery)
- Password (securely encrypted and stored)
Mobile Phone Number:
- Mobile phone numbers are collected only for store owner accounts
- We may collect phone numbers from users in the future if required for additional features
Profile Information:
- We do not currently collect profile pictures
Saved / Favourite Information:
- Products or stores you choose to save or mark as favourites
Communications:
If you contact us, we collect:
- The content of your messages
- Your email address
- Support request details
Feedback:
If you submit feedback:
- The content of your feedback
- Date and time of submission
2.2 Information Collected Automatically
Location Data:
When you open the Platform or log in, we collect approximate location data (such as city or area-level information) to provide nearby store and product discovery.
- Location data is collected only while the app or website is actively in use
- We do not continuously track your location
- We do not store long-term location history
Device Information:
We may collect limited technical information such as:
- Device type and model
- Operating system and version
- IP address
Usage Analytics:
- We do not store search history, product-view history, or store-visit history in our databases.
- Our analytics provider may collect limited information about the screens or features you use to help us understand overall Platform usage.
2.3 Information from Third Parties
Merchant Data:
We receive product and store information from merchants or third-party systems, including:
- Product details
- Store names, locations, and operating hours
- Product availability
Service Providers:
We use trusted third-party services for:
- Analytics (Google Analytics – GA4)
- Push notifications (Firebase Cloud Messaging – FCM)
- Cloud hosting and infrastructure
Future Advertising Services:
We may introduce advertising services in the future. If implemented, this Privacy Policy will be updated accordingly.
2.4 Sensitive Personal Data
We do not collect sensitive personal data such as:
- Financial or payment information
- Health data
- Biometric information
- Political, religious, caste, or ethnicity-related data
3. How We Use Your Information
3.1 Primary Uses
We use your information to:
Provide Platform Services:
- Display nearby stores and products
- Enable product discovery and favourites
- Personalize basic Platform functionality
Account Management:
- Create and maintain user accounts
- Authenticate users
- Send essential service-related notifications
Improve Our Platform:
- Understand usage patterns through analytics
- Improve performance and features
- Identify and fix technical issues
Customer Support:
- Respond to inquiries and support requests
Legal and Security Purposes:
- Prevent misuse and fraud
- Enforce our Terms and Conditions
- Comply with applicable legal obligations
3.2 Legal Basis for Processing
We process personal information based on:
- Your consent
- Performance of our services
- Compliance with legal obligations
- Legitimate business interests
4. How We Share Your Information
4.1 We Do NOT Sell Your Information
We do not sell, rent, or trade your personal information.
4.2 Sharing with Third Parties
We may share information with:
Merchants:
- Only anonymized and aggregated insights (such as general interest trends).
- We do not share personal contact details or location data with merchants.
Service Providers:
- Third-party partners that help us operate the Platform (analytics, push notifications, hosting). These providers are required to protect your information.
Legal Requirements:
- When required by law or to protect our rights, users, or Platform.
Business Transfers:
- If Shomay is involved in a merger, acquisition, or asset transfer, user information may be transferred with appropriate safeguards.
4.3 Aggregated Data
We may use and share anonymized, aggregated data that cannot identify you individually.
5. Data Retention
We retain personal information only for as long as necessary to:
- Provide our services
- Comply with legal obligations
- Resolve disputes
- Enforce our agreements
When you delete your account, we will delete or anonymize your personal information unless retention is required for legal purposes.
6. Data Security
6.1 Security Measures
We implement reasonable safeguards, including:
- Secure data transmission
- Access controls
- Secure server infrastructure
- Regular system updates
6.2 Data Breach
If a data breach occurs, we will take reasonable steps to notify affected users and authorities as required by law.
6.3 Your Responsibility
You are responsible for keeping your account credentials secure.
7. Your Rights and Choices
You may:
- Access and update your account information
- Request account deletion
- Control location access through device settings
At present, we send only service-related communications and do not send marketing or promotional emails.
Requests can be made by contacting shomayofficial@gmail.com.
8. Location Data
8.1 Purpose
Location data is used solely to:
- Identify nearby stores
- Improve relevance of product discovery
8.2 Control
You can disable location access through your device or browser settings. Some features may be limited if location access is disabled.
9. Analytics and Technologies
We use:
- Google Analytics (GA4) to understand Platform usage
- Firebase Cloud Messaging (FCM) for push notifications
These services may collect limited technical and usage data in accordance with their own privacy policies.
10. Children's Privacy
- The Platform is intended for users aged 13 and above.
- We do not knowingly collect personal information from children under 13.
11. Third-Party Links
The Platform may contain links to third-party websites or services. We are not responsible for their privacy practices.
12. Grievance and Contact
For privacy-related concerns or grievances, contact us at:
Requests will be handled in accordance with applicable Indian law.
13. International Data Transfers
Some service providers may process data outside India. Appropriate safeguards are used to protect your information.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Continued use of the Platform constitutes acceptance of the updated policy.
BY USING THE PLATFORM, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY.