Legal
Privacy Policy
Last updated 2 November 2026
This policy explains how J@RSY, India ("J@RSY", "we", "us") collects, uses and protects your personal data when you use the J@RSY website and the J@RSY apps for Android and iOS. We follow India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.
1. What we collect
- Account details, if you create an account: name, email, mobile number (optional) and a securely hashed password. We never store your password itself.
- Order and delivery details: name, mobile number, email, delivery address, the items you buy, sizes, amounts and order status.
- Payment details: online payments are processed by Razorpay. We receive only a payment reference, the method (e.g. UPI or card) and the payment status. We never see or store your card number, CVV, UPI PIN or bank login.
- Technical data: a login cookie that keeps you signed in, and your shopping bag, which is stored on your own device.
We do not use advertising trackers, do not build marketing profiles, and do not access your contacts, photos, location or camera.
2. How we use it
- To process, pack, ship and deliver your orders, including Cash on Delivery collection.
- To take payments and handle refunds, exchanges and order questions.
- To keep your account secure and show your order history.
- To keep tax and accounting records as Indian law requires (e.g. GST).
3. Who we share it with
We never sell your data. We share only what each partner needs to do their job:
- Razorpay, to process online payments (Razorpay privacy policy).
- Courier and delivery partners: your name, phone number and address, to deliver your parcel.
- Hosting providers that securely store our website and database.
- Authorities, only when required by law.
4. How long we keep it
Your account data is kept until you delete your account. Order records are kept for as long as tax and accounting laws require (usually up to 8 years). When you delete your account, those orders are unlinked from you, and contact details on completed orders are removed.
5. Your rights
- See and correct the personal data we hold about you.
- Delete your account at any time from Account → Delete my account in the app or website, or at /account/delete.
- Withdraw consent and raise a complaint with our Grievance Officer (below), or with the Data Protection Board of India.
6. Security
All traffic is encrypted with HTTPS. Passwords are hashed, admin access needs a password plus a security PIN, and payments run on Razorpay's PCI-DSS compliant platform.
7. Children
J@RSY is not meant for children under 18. We do not knowingly collect data from children. A parent or guardian can contact us to have such data removed.
8. Changes
If we update this policy, we will change the date at the top of this page. Important changes will also be shown in the app.
9. Contact & Grievance Officer
For privacy questions, data requests or complaints, contact J@RSY at the contact details on our website. We reply within 7 days and resolve complaints within 30 days.
