Product Category
    • Home

    Privacy Policy

    Privacy Policy - Mepto Shop

    Privacy Policy

    Effective Date: 14 August 2025

    Welcome to Mepto Shop (“we”, “our”, “us”). We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, how it is shared, your choices, and your rights when you use our Android app and our website(s), including meptoshop.blogspot.com and related pages (collectively, the “Services”).

    Quick compliance note for Google Play users:
    • We sell physical goods. Google Play Billing is not used for payments; we redirect to approved third-party payment options (e.g., UPI, Net Banking, Cards). We do not collect or store payment card/UPI PINs.
    • Our Android app uses WebView to display our website, supports file upload/download, and uses Firebase Cloud Messaging for optional push notifications.

    1) Information We Collect

    A. Information you provide

    • Account & Order details: name, email, phone number, shipping/billing address, product selections, order notes.
    • Support messages: content you submit via contact forms or email.
    • Uploads: images/files you choose to upload (e.g., receipts, issue screenshots) through in-app WebView forms.

    B. Information collected automatically

    • Device & log data: IP address, device model, OS version, app version, approximate location derived from IP, timestamps, diagnostics, crash logs.
    • Usage data: pages viewed, buttons tapped, referral URLs, in-app events.
    • Cookies & similar technologies: our website uses cookies, local storage, and similar tools to keep you signed in, remember cart items, and improve the experience.

    C. Third-party data sources

    • Analytics & messaging: limited aggregated data from service providers (e.g., Google/Firebase) about app performance, installs, messaging delivery.
    • Payment providers: confirmation/status of your payment; we do not receive your full card details, UPI PIN, or net-banking credentials.

    2) How We Use Your Information

    • Process, fulfill, and deliver orders; provide invoices and order updates.
    • Customer support and service improvement (including debugging and preventing fraud/abuse).
    • Send optional marketing or promotional messages (only if you opt in; you can opt out anytime).
    • App functionality: WebView browsing, file uploads/downloads, pull-to-refresh, offline page, and notifications.
    • Analytics, performance monitoring, and security (e.g., crash reports, error logs).

    3) Legal Bases (where applicable)

    We process personal data based on: consent (e.g., marketing, push notifications), contract (order fulfillment), legal obligations (tax/invoice), and legitimate interests (security, fraud prevention, service improvement).

    4) Sharing & Disclosure

    We do not sell your personal information. We may share limited data with:

    • Service providers: hosting, analytics, cloud messaging, customer support, logistics, and payment processing (e.g., UPI intent, gateway partners). They are bound by confidentiality obligations.
    • Logistics/courier partners: to ship your orders (name, address, contact number).
    • Law enforcement or legal requests: when required to comply with applicable laws or protect our rights/users’ safety.
    • Business transfers: in case of a merger, acquisition, or asset sale, subject to this Policy.

    5) Payments & Financial Data

    • We sell physical goods. Payments are processed via third-party providers (e.g., UPI/Net Banking/Card gateways) or UPI intent apps. We do not store your card numbers, UPI PIN, CVV, or net-banking passwords on our servers.
    • Payment confirmations and limited transaction references may be received for reconciliation and order support.

    6) Firebase, Google & Other SDKs

    • Firebase Cloud Messaging (FCM): for optional push notifications (offers, order updates). You can disable notifications in the app/OS settings at any time.
    • Analytics/Crash Reporting: we may use Google services to understand app performance and errors. These services may collect device identifiers, crash logs, and basic usage data.

    7) WebView-Specific Disclosures

    • The app uses Android WebView to load our website content. In-app pages may set cookies/local storage for sign-in, cart, and preferences.
    • External links (payments, WhatsApp share, maps, etc.) may open your device browser or a supported app via intent.
    • If you choose to upload files/images via WebView forms, those files are transmitted to our servers or service providers to process your request.

    8) Data Retention

    We retain personal data for as long as necessary to fulfill the purposes described above—typically the duration of your account/order plus any period required by law (e.g., tax/finance). When no longer needed, we securely delete or anonymize data.

    9) Your Choices & Rights

    • Access/Correction/Deletion: You can request access, correction, or deletion of your personal information.
    • Marketing opt-out: Unsubscribe links are provided in emails; push notifications can be turned off in device settings.
    • Cookies: You can control cookies via your browser settings; disabling some cookies may impact site features.

    10) Children’s Privacy

    Our Services are not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal data, please contact us to delete it.

    11) International Data Transfers

    Your information may be processed on servers located outside your state or country. Where required, we implement safeguards for cross-border transfers.

    12) Security

    We use reasonable technical and organizational measures to protect your data (encryption in transit via HTTPS, access controls, and monitoring). However, no method of transmission or storage is 100% secure.

    13) Links to Other Sites/Apps

    Our Services may link to third-party sites or apps (including payment providers). Their privacy practices are governed by their own policies.

    14) Region-Specific Notices

    • India (DPDP Act 2023): By using our Services, you consent to data processing as described. You may exercise access/correction/erasure and grievance redressal via the contact below.
    • EEA/UK: You may have GDPR rights (access, rectification, erasure, restriction, portability, objection). You also have the right to lodge a complaint with a supervisory authority.
    • California: If applicable, you may have rights under CCPA/CPRA (access, deletion, opt-out of “sale/share” of personal info). We do not sell your personal information.

    15) Changes to this Policy

    We may update this Policy from time to time. Material changes will be posted on this page with a new “Effective Date”. Continued use of the Services means you accept the updated Policy.

    16) Contact & Data Deletion Requests

    For privacy questions, complaints, or data deletion requests, contact us:

    Developer/Entity: Mepto Shop