This Privacy Policy describes how Hapverse Private Limited ("Haper", "we", "us") collects, uses, shares and protects your personal information when you use the Haper mobile application, our website at haper.in, and our related services (the "Services").
We comply with the Information Technology Act, 2000 and the rules made thereunder, and the Digital Personal Data Protection Act, 2023 ("DPDP Act") to the extent applicable.
1. Information we collect
Information you provide
- Account details — your name, mobile number, email address.
- Delivery addresses — postal addresses you save for delivery.
- Order details — items you order, quantities, payment method, special instructions.
- Communications — messages you send to support, ratings and feedback.
Information we collect automatically
- Device information — device model, operating system, app version, device identifiers.
- Location — with your permission, your precise GPS location (to find your nearest store and address). You can revoke this permission at any time in your device settings.
- Usage data — pages and features you use, errors and performance metrics, collected via Firebase Analytics, Crashlytics and Performance Monitoring.
- Notifications — your Firebase Cloud Messaging token, used to send you push notifications.
Information we do not collect
- We do not store your debit/credit card numbers or banking credentials. All payments are processed by our payment gateway, Razorpay.
2. How we use your information
- To create and manage your account and authenticate you.
- To process and deliver your orders, including assigning a delivery partner.
- To process payments and refunds.
- To send transactional messages (order updates, delivery alerts, OTPs) via SMS, email and in-app notifications.
- To send promotional messages where you have opted in (you can opt out anytime).
- To provide customer support and resolve disputes.
- To improve the Services, fix bugs, and develop new features.
- To detect, prevent and respond to fraud, abuse and security incidents.
- To comply with applicable law and respond to lawful requests.
3. How we share your information
We share your information only with the following categories of recipients, and only to the extent necessary for the Services:
- Delivery partners — your name, address and phone number, so they can deliver your order.
- Razorpay — for processing your payments and refunds.
- Firebase (Google) — for push notifications, analytics, crash reporting and performance monitoring. Subject to Google's privacy policy.
- Smartping — our SMS gateway, for delivering OTPs and transactional SMS.
- AWS — for hosting and storage of files (such as images you upload).
- Government and law-enforcement authorities — when required by law, court order or legal process.
We do not sell your personal information to third parties.
4. Cookies & similar technologies
Our website at haper.in uses Google Analytics 4 to understand site traffic in aggregate. This may set cookies or similar identifiers on your device. You can disable cookies in your browser settings. Our mobile app does not use cookies but uses device identifiers as described above.
5. Data retention & account deletion
- We retain your information for as long as your account is active.
- You can delete your account at any time from the Profile screen in the app.
- When you delete your account, it is scheduled for permanent deletion after 30 days. During this 30-day window you can restore your account by logging in with the same phone number. After 30 days, recovery is no longer possible.
- On permanent deletion we remove your personal information — name, email, phone number, photo, saved addresses, push-notification tokens, and cart.
- We retain order history, payment records, wallet ledger entries, and fraud-prevention signals associated with your past account, because we are required to under Indian tax, accounting, payment-gateway and consumer-protection law. These records remain linked to an internal anonymous identifier and no longer carry your personal information.
- Anonymised, aggregated data may be retained indefinitely for analytics.
6. Your rights
You have the right to:
- Access the personal information we hold about you.
- Correct inaccurate or outdated information.
- Delete your account and associated personal information.
- Withdraw consent for processing where consent is the legal basis.
- Lodge a complaint with the Data Protection Board of India under the DPDP Act.
Account deletion is available directly from the Profile screen in the app. For other rights, email support@haper.in.
7. Children
Our Services are intended for users 18 years and above. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us so we can delete it.
8. Security
We use industry-standard technical and organisational safeguards — including HTTPS, access controls, encryption at rest where applicable, and audit logging — to protect your information. However, no system is completely secure; we cannot guarantee absolute security.
9. Cross-border transfers
Some of our service providers may store or process your data on servers outside India. Where this happens, we ensure appropriate safeguards are in place.
10. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be notified via the app or website. The "Last updated" date at the top reflects the latest revision.
11. Contact & grievances
For privacy questions or to exercise your rights, write to support@haper.in. For grievances, see our Grievance Redressal page.