1. Overview

RapidCart ("RapidCart", "we", "us", or "our") operates the website at rapidcart.app and the related services that let sellers create and run a live online storefront (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

By using RapidCart, you agree to the practices described in this policy. If you do not agree, please do not use the Service.

2. Information We Collect

We collect the following categories of information:

a. Seller account information

Name, email address, phone number, and an optional profile photo.
A password (stored as a salted hash) or a Google sign-in identifier.
One-time passwords (OTPs) sent by SMS or email for verification.

b. Store information

Store name, slug, logo, theme settings, layout choices, and store description.
Business details such as GST number, shipping configuration, and seller notes.
Razorpay key identifiers and secrets you provide to receive payments (encrypted at rest).

c. Product data you add

Product names, prices, images, descriptions, categories, variants, and any other details you add in the built-in product editor.

d. Buyer data placed through your store

Buyer name, phone number, email (if provided), and shipping address.
Cart contents, order details, order numbers, and order status.
Payment metadata returned by Razorpay (such as payment ID, order ID, and status). We do not store full card numbers, UPI PINs, or net-banking credentials.

When you, the seller, use RapidCart, you act as the data controller for your buyers' personal data and RapidCart acts as a data processor on your behalf.

e. Technical data

IP address, browser type, device information, and approximate location derived from IP.
Pages visited, actions taken, and basic usage analytics.
Logs from API requests, used for debugging, security, and abuse prevention.

3. How We Use Your Information

To create and operate your seller account and storefront.
To publish the products you add in the editor to your storefront.
To process orders and route payments through Razorpay.
To send transactional emails and SMS, such as OTPs, order confirmations, and account notices.
To provide customer support and respond to your requests.
To monitor, secure, and improve the Service, including preventing fraud and abuse.
To comply with applicable laws and enforce our Terms of Service.

4. Google User Data

When you sign in with Google, we receive basic profile information — your name, email address, and a Google account identifier — to create and authenticate your account. We use this only to sign you in and operate your account.

We do not sell, share, or use Google user data for advertising.
We do not use Google user data to train generalized AI or machine learning models.
You can revoke access at any time from your Google Account permissions page.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. Payments

Online payments on storefronts are processed by Razorpay. When a buyer pays, Razorpay collects and processes payment details directly under their own privacy terms. RapidCart receives only payment metadata (such as a payment identifier and status) needed to mark an order as paid.

For Cash on Delivery, no payment data is collected by RapidCart; the seller collects payment directly from the buyer.

6. How We Share Information

We share information only as needed to run the Service:

Service providers: hosting, database, email and SMS delivery, analytics, and error monitoring vendors who process data on our behalf.
Payments: Razorpay, for payment processing.
Google: for sign-in (OAuth) and account authentication.
Sellers: buyer order details are shared with the seller whose store the order was placed on, so they can fulfill the order.
Legal: when required by law, court order, or to protect the rights, property, or safety of RapidCart, our users, or others.
Business transfers: in connection with a merger, acquisition, or sale of assets, subject to a successor honoring this policy.

We do not sell personal information.

7. Cookies & Local Storage

We use cookies and browser local storage to keep you signed in, remember onboarding progress, store cart contents, and gather basic analytics. You can clear or block these through your browser settings, but some parts of the Service may not work without them.

8. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Order and tax-related records may be kept longer to meet legal and accounting requirements. When you delete your account or store, we delete or anonymize the related data within a reasonable period, except where retention is required by law.

9. Security

We use industry-standard measures including HTTPS in transit, encrypted storage of secrets such as Razorpay keys, hashed passwords, and access controls. No system is fully secure; we cannot guarantee absolute security and you use the Service at your own risk.

10. Your Rights

Depending on where you live, you may have the right to:

Access the personal information we hold about you.
Correct inaccurate information.
Delete your account and associated data.
Export a copy of your data in a machine-readable format.
Withdraw consent or revoke Google sign-in access at any time.

To exercise these rights, email us at support@rapidcart.app. We will respond within a reasonable timeframe.

11. Children

RapidCart is not intended for children under 16 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have, please contact us and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, notify you by email or in-app message. Your continued use of the Service after the change means you accept the updated policy.

13. Contact Us

Questions or requests about this Privacy Policy can be sent to support@rapidcart.app.