Privacy Policy

Last Updated: 14 July 2026

1. Information We Collect

We collect information that you provide directly to us, information generated through your use of the App, and information collected automatically through your device.

1.1 Information You Provide

• Identity information: Full name, vendor/business name, profile photo.
• Contact information: Mobile number, email address, business and delivery/pickup address, city, pincode.
• Business information: Store category, GST/business registration details (if provided), bank account or UPI details for payouts, product catalog details.
• Content you upload: Product images, store banners, promotional/spotlight images or videos, descriptions.
• Verification data: OTP verification records, government or business ID documents submitted for vendor onboarding (if applicable).
• Communications: Messages, complaints, or feedback you send to our support team.

1.2 Information Generated Through Use

• Order and transaction data: Orders received, order status, payment history, coupon usage, refunds and cancellations.
• Usage data: Screens visited, features used, session duration, in-app actions and error logs.

1.3 Information Collected Automatically

• Device information: Device model, operating system and version, unique device identifiers, app version.
• Network information: IP address, mobile network carrier, approximate location derived from IP (if location permission is not separately granted).
• Diagnostic data: Crash logs, performance data, and app diagnostics used to identify and fix bugs.

2. How We Use Your Information

• To create, verify, and manage your vendor account on Bastar Basket.
• To list and manage your products, store details, and pricing on the platform.
• To process, track and fulfil customer orders placed with your store.
• To process payouts, refunds, and maintain transaction/payment history.
• To send order notifications, account alerts, OTPs, and service-related messages.
• To provide customer and vendor support, and respond to queries or complaints.
• To detect, prevent, and investigate fraud, abuse, or security incidents.
• To analyze usage patterns and improve app performance, features, and user experience.
• To comply with applicable legal, tax, and regulatory obligations.
• To send promotional or informational communications related to the platform, where permitted (you may opt out at any time).

3. Legal Basis for Processing

We process your personal data on the following grounds: (a) performance of the vendor agreement/terms of service between you and Bastar Basket; (b) your consent, where required, such as for camera or location access; (c) compliance with legal obligations, including tax and consumer protection laws; and (d) our legitimate business interests, such as fraud prevention and service improvement, balanced against your rights.

4. Permissions Used by the App

Permission	Purpose
Internet / Network Access	Required for core app functionality, syncing orders and data with our servers.
Camera / Photos / Media	To capture or upload profile photos, product images, and store banners (only when you choose to upload).
Notifications	To deliver order alerts, account updates, and important service announcements.
Location (optional)	Used only where required to display or confirm vendor/store location for delivery coordination. Not collected continuously in the background.
Storage	To temporarily cache images and files needed for uploads and app performance.

You can grant or revoke any of these permissions at any time through your device settings. Disabling certain permissions may limit specific app features.

5. Sharing and Disclosure of Information

We do not sell your personal information to any third party. Information may be shared only in the following limited circumstances:

• Payment providers: To process payments and payouts securely.
• Delivery partners: To coordinate pickup and delivery of orders.
• Customers: Certain store/vendor details (store name, product listings, delivery address relevant to fulfilment) are visible to customers placing orders.
• Service providers: Hosting, cloud storage, SMS/OTP, and analytics providers who process data strictly on our behalf under confidentiality obligations.
• Legal and regulatory authorities: Where required by law, court order, or to protect the rights, property, or safety of Bastar Basket, its users, or the public.
• Business transfers: In connection with a merger, acquisition, or sale of business assets, subject to continued protection under this Policy.

6. Data Security

We implement reasonable technical and organizational safeguards to protect your data, including:

• Encrypted transmission of data (HTTPS/TLS) between the app and our servers.
• Access controls restricting internal access to personal data on a need-to-know basis.
• OTP-based verification for sensitive account actions.
• Regular monitoring for unauthorized access, misuse, or security vulnerabilities.

While we strive to protect your information, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your personal information only for as long as necessary to provide our services, fulfil the purposes described in this Policy, or comply with legal, accounting, or reporting obligations (such as tax and transaction records). Order and payment records may be retained for longer periods as required by applicable law, even after account deletion.

8. Your Rights and Choices

• Access & Correction: You may access and update your profile and business information within the app at any time.
• Opt-out of communications: You may opt out of promotional notifications while continuing to receive essential service/order alerts.
• Withdraw consent: You may withdraw permissions (camera, location, notifications) via device settings.
• Deletion: You may request deletion of your account and associated data as described in Section 9.
• Grievance: You may raise concerns about your data with our Grievance Officer (Section 14).

9. Account Deletion

You can request deletion of your BB Vendor account from within the application (if available) or through our official account deletion page:

https://bastarbasket.com/account_delete.php

After identity verification, your account and associated personal data will normally be deleted within 7 working days, except where:

• Records must be retained to comply with legal, tax, or regulatory obligations;
• Data is needed to resolve disputes, complaints, or pending transactions;
• Order/transaction history must be retained for accounting purposes.

10. Third-Party Services

The App may use third-party services (such as cloud hosting, SMS/OTP gateways, payment gateways, and crash analytics) that collect information used to identify and process data on our behalf. These providers are contractually obligated to use such data only for the services they provide to us and in accordance with applicable data protection laws. This Policy does not cover the practices of third-party websites or services linked from within the App.

11. Data Storage and International Transfer

Your information is primarily stored on secure servers located in India. In limited cases, where our service providers (such as cloud or notification infrastructure) operate internationally, your data may be processed outside India, subject to appropriate safeguards consistent with applicable law.

12. Children's Privacy

BB Vendor is intended for use by business owners and vendors and is not intended for children under the age of 13. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a child, we will take steps to delete such information promptly.

13. Changes to this Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. The updated Policy will be posted on this page with a revised "Last Updated" date. Continued use of the App after changes are posted constitutes acceptance of the revised Policy.

14. Grievance Officer

In accordance with applicable data protection and information technology laws, any grievances or concerns regarding the processing of your personal data may be addressed to our Grievance Officer using the contact details below. We aim to acknowledge and resolve grievances within a reasonable time frame.

15. Contact Us