Epomart User Privacy Policy
A transparent, point-wise explanation of how we collect, use, protect, and handle your data on the Epomart app and website.
1. About Epomart & Operating Entity
This Privacy Policy is issued by Epomart Technologies Private Limited (“Epomart”, “we”, “us”, or “our”), a company incorporated under the laws of India.
- • Company Name: Epomart Technologies Private Limited
- • Corporate Identity Number (CIN): U72900KA2026PTC123456
- • Registered Office: Epomart Technologies Private Limited, Sector 4, HSR Layout, Bengaluru, Karnataka 560102, India
- • Official Support Email: [email protected]
- • Date of Incorporation / Effective Date: January 1, 2027
- • Platforms Covered: Epomart Android Application and the official marketplace website (https://epotech.com).
Epomart operates an online marketplace that allows customers to discover, order physical goods from sellers, and book on-demand professional home services (such as electricians, cleaning, home maintenance, and other listed services).
2. Information We Collect (Point-wise)
We only collect information necessary to provide, deliver, and improve our services to you:
- Mobile Phone Number: Primary identifier used for secure OTP (One-Time Password) sign-up and login.
- Full Name & Email Address: Used for account identity, order confirmations, and invoices.
- Profile Picture: Optional image uploaded by you to personalize your account.
- Shipping Address: House number, street name, area, city, pin code, and contact recipient details for delivering physical items.
- Service Premise Address: The physical location where you request an on-demand service (such as electrical or cleaning work) to be carried out.
- Payment Gateways: All payments are processed through RBI-authorized payment processors (e.g. Razorpay).
- Card & PIN Safety: Epomart never stores your raw credit/debit card numbers, CVV, or net banking passwords.
- Transaction Records: We only store the transaction reference ID, order amount, payment status, and timestamp.
- Items purchased, service categories booked, appointed dates/times, merchant or technician assigned, and customer support chats.
- Customer reviews, star ratings, and feedback uploaded for purchased items or completed services.
3. Device Permissions & Sensitive Data (Google Play Disclosure)
In compliance with the Google Play Developer Policy, our mobile application only requests permissions that are directly required to deliver core functionality:
- Why we need it: To auto-detect your current address for accurate product delivery and to find nearest verified service professionals.
- How it works: Location is requested only while the app is in use. We do not track background location without your explicit knowledge and active booking state.
- Why we need it: Only when you choose to take or upload a profile photo, provide a photo review of a product, or show an issue/damage for return or service support.
- How it works: The app never scans your personal photo gallery or private files. Access is limited strictly to files you manually choose to attach.
- Why we need it: To send real-time alerts regarding order status, technician arrival, delivery tracking, and critical security OTPs.
- User Control: You can disable notifications anytime in your Android device settings.
4. How We Use Your Data
We process your personal information strictly for legitimate business and fulfillment purposes:
- Order & Service Fulfillment: Processing orders, arranging couriers, dispatching service technicians, and issuing GST-compliant invoices.
- Authentication & Account Management: Sending OTPs for secure login, verifying account ownership, and maintaining order history.
- Customer Support & Dispute Handling: Resolving refunds, order cancellations, delivery inquiries, and customer feedback.
- Safety & Fraud Prevention: Detecting fraudulent transactions, unauthorized account access, and verifying service technician identity badges.
- Legal & Regulatory Compliance: Maintaining accounting and tax records in accordance with Indian commercial laws.
6. Data Security & Storage
We follow strict security standards to protect your data:
- 256-Bit SSL/TLS Encryption: All communications between the app/browser and our backend servers are encrypted in transit.
- Secure Data Centers: Our servers and databases are hosted in secured cloud environments with strict role-based access control.
- Tokenized Authentication: Secure JWT session tokens prevent unauthorized access to your account.
- Regular Monitoring: Automated threat detection and vulnerability scans are executed continuously.
7. Data Retention Policy
We retain your personal data for as long as your account is active and as necessary to fulfill your orders, provide customer support, and satisfy statutory tax and commercial recordkeeping obligations under Indian law (typically 7 to 8 years for financial transaction records). Once data is no longer required, it is securely deleted or anonymized.
8. Account & Data Deletion (Google Play Compliance)
In accordance with the Google Play Store User Data Policy, we provide transparent, straightforward mechanisms for users to delete their account and associated personal data.
How to Request Account & Data Deletion:
- From Within the Epomart Android App: Open the app → go to Profile → tap Settings → select Delete My Account and confirm your request.
- Via Email / Web Request: Send an email from your registered email address or mentioning your registered phone number to [email protected] with the subject “Request for Account & Data Deletion”.
What Data Is Deleted:
- • Your name, phone number, email address, profile picture, and saved delivery addresses.
- • Stored device tokens, session IDs, and active cart items.
- • Any non-mandatory logs are purged within 30 days of verified deletion request.
- • Note on Statutory Records: Past financial transaction and invoice records are retained exclusively for statutory tax compliance as required by Indian law.
9. Your Rights & Controls
Under the Digital Personal Data Protection Act (DPDP Act, 2023), you hold the following rights:
10. Children’s Privacy
Epomart is a commercial e-commerce and home service marketplace intended for individuals aged 18 years and older who have the legal capacity to contract. We do not knowingly solicit or collect personal information from minors under the age of 18. If we discover that a minor has created an account without parental consent, we will take immediate steps to delete the account and associated information.
12. Policy Updates & Amendments
We may periodically update this Privacy Policy to reflect enhancements in our application, changes in statutory requirements, or Google Play policy revisions. Any material modifications will be updated on this page with an updated “Effective Date”. We encourage you to review this page periodically.
13. Grievance Officer & Contact Information
In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, the details of our designated Grievance Redressal Officer are published below: