Privacy Policy

Information We Collect

• Account information such as your name, email address, mobile number, login method, and account status.
• Authentication information needed to sign you in, including phone number verification through WhatsApp OTP, secure email magic links, and Google login details when you choose Google sign-in.
• Order and checkout information such as recipient name, email, phone number, address, landmark, city, state, PIN code, products, quantity, size, subtotal, shipping, and order total.
• Payment information connected with an order, such as payment status and payment/order identifiers returned by Razorpay. VRAJORA does not store your card number, UPI PIN, or banking password.
• Basic technical information needed to keep the site working, prevent misuse, and protect OTP or login flows, such as request timing, rate-limit records, and limited device/browser context provided by your browser.

How We Use Information

• To create and manage customer accounts, verify login attempts, and keep your account secure.
• To process orders, verify payments, confirm stock, arrange shipping, provide order updates, and respond to support requests.
• To send WhatsApp OTPs, email sign-in links, order-related messages, and customer-service communications.
• To detect abuse, enforce resend and verification limits, protect payment and checkout flows, and troubleshoot errors.
• To improve VRAJORA's website experience, product availability, and customer support based on lawful and reasonable business needs.

Authentication

VRAJORA supports customer login through WhatsApp OTP, secure email magic link, and Google login when configured. OTPs and magic-link tokens are stored as hashes, not as plain verification codes. OTP attempts, expiry, resend cooldowns, and rate limits are used to reduce misuse and protect customer accounts.

Orders, Payments & Shipping

When you place an order, VRAJORA stores the information required to confirm the order, verify payment, decrement stock, and support delivery. Razorpay is used for payment processing, and VRAJORA verifies payment status before marking an order as paid and confirmed. Shipping information is used to deliver the order and provide customer support.

Cookies, Local Storage & Analytics

VRAJORA may use cookies, browser storage, and similar technologies for essential website features such as cart persistence, authentication sessions, checkout flow, security, and performance. If analytics or measurement tools are added, they should be used to understand site usage and improve the store experience without intentionally collecting more information than needed.

Third-Party Services

• Razorpay may receive payment and transaction details needed to process and verify payments.
• Meta WhatsApp Cloud API may receive your phone number and OTP template details when you request WhatsApp OTP login.
• Email delivery providers may receive your email address and sign-in message details when you request a magic link.
• Google may process your Google account information when you choose Google login.
• Hosting, database, storage, and operational providers may process information needed to run VRAJORA securely and reliably.

Data Security

VRAJORA uses practical security measures in the application, including hashed verification codes, server-side payment verification, stock checks, rate limits, and restricted handling of secret keys. No website can guarantee absolute security, but VRAJORA works to keep customer and order information protected from unauthorized access.

Data Retention

VRAJORA keeps customer, order, payment-status, and support information for as long as needed to provide the store, complete transactions, resolve disputes, prevent misuse, and meet legal, tax, accounting, or operational requirements. Expired or consumed login challenges may be retained for a limited time for security and abuse-prevention purposes.

Your Choices & Requests

You can request access, correction, or deletion of your personal information by contacting VRAJORA. Some transaction and order information may need to be retained where legally required or where it is necessary for legitimate business records, dispute handling, fraud prevention, or tax/accounting purposes.