Version 1.0 · Last updated: June 2026
ShopConnect is operated by NVIPANI TECHNOLOGY SOLUTIONS PRIVATE LIMITED (CIN: U72200KA2015PTC080937), registered under the Companies Act 2013, with its registered office at 1st Floor, NMS Arcade, 854/1 8th B Cross, 6th Main, Opp. LIC Colony, New Tippasandra, Bengaluru, Karnataka 560075, India (referred to as "ShopConnect", "we", "us", or "our").
We are the Data Fiduciary under India's Digital Personal Data Protection Act 2023 (DPDP Act) for all personal data processed through the ShopConnect platform, including this website (shopconnect.live) and our mobile applications.
Questions about this policy? Write to us at privacy@shopconnect.live.
We collect only what we need to connect you with your local kirana store. Here is exactly what we collect, why, and how long we keep it.
What: Mobile number (required), name (optional), email address (optional).
Why: To create your account, send order confirmations, and let your store
contact you about your order.
Retention: For the life of your account, plus 3 years after deletion
(required by tax and consumer protection law).
What: Recipes you save, meals you plan, dietary preferences you set
(e.g. vegetarian, gluten-free), and ingredients you add or remove.
Why: To build your grocery list and improve your plan suggestions over time.
Retention: Until you delete your account. You can clear your plan history
at any time in app settings.
What: Number of people in your household and any dietary requirements
you choose to enter (e.g. "one vegetarian, two children").
Why: To scale quantities correctly and suggest relevant recipes.
Retention: Until you edit or delete it. We do not share this data with
third parties.
What: Your approximate location (at the neighbourhood level, not precise
GPS coordinates) to match you with nearby kiranas. We request location permission only when
you search for stores. We do not track your location in the background.
Why: Store matching — so we show you shops within walking distance.
Retention: We store your last saved delivery address. We do not store a
location history. You can delete saved addresses at any time.
What: Items you have ordered, quantities, the store you ordered from,
and order status.
Why: To show you your order history, let you reorder quickly, and help
your store pack accurately.
Retention: 3 years from the date of order (required for accounting and
Consumer Protection Rules 2020).
What: Your mobile number is used for OTP login and, if you opt in,
for WhatsApp order updates from your store.
Why: Authentication and order communications only. We do not send
marketing messages to your number without a separate, explicit opt-in.
Retention: For the life of your account. Opt-out from WhatsApp updates
at any time in app settings.
What: Device type, operating system version, app version, session
duration, screens visited, and crash reports. This data is collected only after you
grant cookie/analytics consent.
Why: To understand how the app is used, fix crashes, and improve
performance.
Retention: 13 months in Google Analytics 4, in line with Google's
standard retention. Crash logs are deleted after 90 days.
We use your data for these purposes only:
We do not use your food preference or household data for advertising profiling. We do not sell your personal data to any third party.
We share data with third parties only where necessary to run the service. All processors are contractually bound to process your data only for the specified purpose.
We use Google Analytics 4 to understand how visitors use shopconnect.live. GA4 collects anonymised usage data (pages visited, session duration, device type). It only runs after you accept analytics cookies. Google's privacy policy: policies.google.com/privacy.
When you place an order, we share your name, delivery address, and order contents with the store you selected. This is necessary to fulfil your order. The store does not receive your full account history, your meal plan data, or your household composition.
We use an SMS gateway (MSG91) to send OTP codes for login. Your mobile number is passed to this provider only for OTP delivery. It is not stored or used by the provider for any other purpose.
Your data is stored on servers hosted by Amazon Web Services (AWS) in the ap-south-1 (Mumbai) region. Your data does not leave India for storage or processing.
India's Digital Personal Data Protection Act 2023 gives you the following rights. To exercise any of them, write to privacy@shopconnect.live. We will respond within 72 hours.
You can request a summary of all personal data we hold about you, including what it is, why we hold it, and who we have shared it with.
You can ask us to correct inaccurate data. You can ask us to erase your data. On an erasure request, we will delete your account and all associated personal data within 30 days, except data we are legally required to retain (e.g. order records for 3 years under tax law). We will tell you exactly what we retained and why.
If you believe we have handled your data incorrectly, you can raise a grievance. See the Grievance Officer section below. If we do not resolve it to your satisfaction, you have the right to approach the Data Protection Board of India (once constituted) or a consumer forum.
You can nominate another individual to exercise your data rights on your behalf in the event of your death or incapacity. To register a nominee, write to privacy@shopconnect.live with the nominee's name and contact details.
We rely on your consent as the lawful basis for processing analytics data (cookies). We rely on contractual necessity for processing data required to fulfil your order.
To withdraw analytics consent: Click "Manage cookies" in the footer,
or clear your browser's localStorage key sc_consent. Withdrawing consent
stops all future analytics data collection. It does not affect data already collected.
To delete your account: Go to app Settings → Account → Delete account. This triggers the erasure process described above.
Withdrawing consent does not affect the core ShopConnect service. You can still plan meals and send orders to your kirana without analytics cookies enabled.
ShopConnect is not intended for use by anyone under 18 years of age without verifiable parental consent, in accordance with DPDP Act 2023 Section 9. If we become aware that we have collected personal data from a child under 18 without parental consent, we will delete it promptly. If you believe your child has registered without your consent, write to privacy@shopconnect.live.
We use one category of cookies on shopconnect.live:
We do not use advertising cookies, retargeting pixels, or social media tracking cookies on this website. The Meta Pixel, Hotjar, Clarity, and Intercom are not installed.
Consent is stored locally in your browser (localStorage) with a version
number and timestamp. We re-ask for consent if we update this policy in a way that
changes how we use cookies.
| Data type | Retention period | Reason |
|---|---|---|
| Account & contact data | Account lifetime + 3 years | Tax & consumer law |
| Meal plan & food preferences | Until account deleted | Service delivery |
| Household composition | Until you edit or delete | Service delivery |
| Location (saved address) | Until you delete | Store matching |
| Order history | 3 years from order date | Consumer Protection Rules 2020 |
| Analytics data (GA4) | 13 months | Google Analytics default |
| Crash logs | 90 days | Debugging |
We use TLS 1.2+ for all data in transit. Data at rest is encrypted using AES-256 on AWS. Access to personal data within ShopConnect is limited to employees who need it to support users or fulfil orders. We conduct access reviews quarterly.
If we ever experience a data breach that is likely to cause harm to you, we will notify you and, where required, the relevant authority within the timeframes required by law.
When we make changes that affect how we use your data, we will update this page, increment the version number, and — where required by DPDP — seek fresh consent. The "Last updated" date at the top of this page always shows when it was last revised.
Under the IT Act 2000 (Rule 3(11)) and DPDP Act 2023, you have the right to raise a grievance about how we handle your personal data. Our Grievance Officer will acknowledge your complaint within 24 hours and resolve it within 72 hours.
Grievance Officer: ShopConnect Grievance Officer, NVIPANI TECHNOLOGY SOLUTIONS PRIVATE LIMITED
Email: grievance@shopconnect.live
Phone: 080 4125 2425
Postal address: Grievance Officer, ShopConnect, 1st Floor, NMS Arcade, 854/1 8th B Cross, 6th Main, Opp. LIC Colony, New Tippasandra, Bengaluru, Karnataka 560075, India
Response SLA: Acknowledgement within 24 hours. Resolution within 72 hours.
If you are not satisfied with the resolution, you may approach: