Privacy Policy

4PawsLabs ("we", "us", "our") operates Door2Door, a mobile application that connects local shop owners with customers for grocery and food delivery and pickup in towns we serve. This Policy explains what personal data we collect through the app, why, and what rights you have over it.

Door2Door is a multi-tenant platform — each shop ("tenant") you order from operates independently, but all customer data is processed by 4PawsLabs as the platform operator. We do not accept payments in-app: all orders are Cash on Delivery, so we never collect card, UPI, or bank details through the app.

1. Who this applies to

This Policy covers customers using the Door2Door app to place orders. Shop owners, sub-shop staff, and riders use accounts created and managed by the shop owner (mobile number + password) rather than Google Sign-In, and are covered separately under the operating agreement each shop owner signs with us.

2. Information we collect

2.1 Information you provide directly

• Google account details — when you sign in with Google, we receive your name, email address, and a unique account identifier from Google. We do not receive your Google password.
• Mobile number — optional, added by you after sign-in so shops and riders can reach you about an order. You can use the app to browse without it, but a mobile number is required before placing an order.
• Delivery addresses — the address text, a delivery zone, and GPS coordinates captured only when you tap "Use my current location" (we never track your location in the background or continuously).
• Orders placed "for someone else" — if you place an order for another person, we store the recipient's contact mobile number so the rider can reach the right person. We do not collect the recipient's name or any other data about them beyond that number.
• Order history and cart contents — items ordered, quantities, order status, and any return requests you raise.

2.2 Information collected automatically

• Push notification token (Firebase Cloud Messaging) — used solely to deliver order-status notifications to your device.
• Basic technical data — device type and app version, used only for debugging crashes and compatibility issues.

3. How we use your information

• To create and maintain your account and authenticate you via Google Sign-In
• To place, route, and fulfil your orders — including sharing your delivery address and contact number with the shop and assigned rider for that order only
• To send order-status push notifications (placed, accepted, out for delivery, delivered, etc.)
• To determine delivery zone eligibility and applicable delivery charges
• To respond to support requests and return/refund queries
• To maintain records required for accounting, tax, and legal compliance

4. Who we share data with

We do not sell your personal data to anyone, and we do not share it with advertisers or data brokers.

5. Data retention

We retain account data for as long as your account remains active. Order records are retained for 7 years [DEFAULT — CONFIRM RETENTION PERIOD] after completion to meet standard accounting and tax record-keeping requirements under Indian law. You may request deletion of your account and associated personal data at any time (see Section 6); order records we are legally required to retain for accounting purposes may be retained in anonymized form even after account deletion.

6. Your rights (Digital Personal Data Protection Act, 2023)

As a data principal under India's DPDP Act, 2023, you have the right to:

• Access a summary of the personal data we hold about you
• Correct or update inaccurate or incomplete data (name and mobile number can be edited directly in the app under Profile)
• Erase your personal data, subject to our legal retention obligations described above
• Withdraw consent at any time by deleting your account, without affecting the lawfulness of processing carried out before withdrawal
• Nominate another individual to exercise these rights on your behalf in the event of death or incapacity
• Register a grievance with us, and if unresolved, with the Data Protection Board of India

To exercise any of these rights, contact us using the details in Section 8.

7. Grievance Officer

8. Security

All data in transit between the app and our servers is encrypted (HTTPS/TLS). Passwords for staff/rider accounts are stored using industry-standard one-way hashing. Access to production data is restricted to authorized 4PawsLabs personnel only.

9. Children's privacy

Door2Door is not directed at children. If you believe a child has provided us personal data without appropriate consent, contact us and we will delete it.

10. Third-party services

Google Sign-In is provided by Google LLC and governed additionally by Google's own Privacy Policy. We are not responsible for Google's data practices outside the scope of what we receive from them.

11. Changes to this Policy

We may update this Policy from time to time. Material changes will be notified via an in-app notice or updated "Effective date" above.

12. Contact us

For any privacy questions or requests:
Email: [support@4pawslabs.in — TO BE FILLED IN]
Website: github.com/4pawslabs