Privacy Policy — StreetCart

Last updated: August 2026

StreetCart ("we," "us," "our") operates a hyperlocal fashion discovery platform that connects users with nearby shops for product discovery and pickup. This policy explains what personal data we collect, why, and how you can control it, in line with India's Digital Personal Data Protection Act, 2023 ("DPDP Act").

1. What We Collect

Data	Source	Why we collect it
Phone number	WhatsApp login / magic link	To identify your account and send order/reservation updates
Location (approximate/precise)	Device GPS, entered address	To show nearby shops via our PostGIS-based location matching
Reservation & session history	Your activity on the platform	To manage pickups, prevent double-booking, show order history
Shop inventory images & operating hours	Shop owners (not end users)	Processed via AI to extract product listings and enforce reservation timing rules
Messages sent via WhatsApp	WhatsApp Cloud API	To process your requests, confirm reservations, prevent duplicate processing

We do not collect payment card details — payments (if enabled) are handled by a third-party payment gateway that is separately regulated.

2. How We Use Your Data

To match you with nearby shops and available products
To create and manage reservations (pickup-only — no delivery data is collected)
To communicate with you via WhatsApp (confirmations, reminders, support)
To improve product matching and prevent platform abuse (e.g., duplicate/fraudulent reservations)

We do not sell your personal data to third parties.

3. Third Parties We Share Data With

WhatsApp / Meta Cloud API — to send and receive messages
Supabase — our database and authentication infrastructure (data stored on Supabase's servers)
Google (Gemini Vision API) — to process shop-submitted product images into listings
Replicate — to process virtual try-on (VTON) image generation, where applicable

Each of these processors is bound by their own data-handling terms; we only share the minimum data needed for them to perform their function.

4. Data Retention

Account and reservation data: retained while your account is active, and for 24 months after your last activity, after which it is anonymized or deleted
Location data: retained only as long as needed to serve nearby-shop matching; not stored as a historical trail beyond 30 days unless required for dispute resolution

5. Your Rights (Under the DPDP Act)

You have the right to:

Access the personal data we hold about you
Correct inaccurate data
Withdraw consent at any time
Request erasure of your data (subject to legal/operational retention needs, e.g. active reservations)
Grievance redressal — raise a complaint about how your data is handled

To exercise any of these, contact us at: support@streetcart.co.in

6. Grievance Officer

As required under the DPDP Act:

Name: Grievance Officer
Email: support@streetcart.co.in
Response timeline: We aim to respond within 7 business days.

7. Data Security

We use reasonable technical safeguards (encrypted connections, access-controlled databases via Supabase Row Level Security) to protect your data. No system is 100% secure, and we encourage you to report any suspected vulnerability to us directly.

8. Children's Data

StreetCart is not intended for users under 18. We do not knowingly collect data from minors.

9. Changes to This Policy

We may update this policy as the platform evolves. Material changes will be notified via WhatsApp or in-app notice before they take effect.

10. Contact

Questions about this policy: support@streetcart.co.in

Back to Home