Privacy Policy

Version 1.0 · Last updated: 28 July 2026

This policy explains what personal data Bhejjo collects through its mobile app and website, why we collect it, who we share it with, and the choices you have. It applies to customers, sellers, delivery partners and other users of the Bhejjo platform.

1. Information we collect

Information you give us

• Account details — name, mobile number, and email address if you provide one.
• Delivery addresses — address lines, locality, city, PIN code, and an optional label such as Home or Office.
• Order information — products ordered, prices, applied discounts, and delivery preferences.
• Service requests — device details, fault description, and warranty information when you raise a service claim.
• Content you post — product reviews, ratings and questions.
• Business details — if you register as a seller, delivery partner or institute: shop name, address, identity and bank or UPI payout details.

Information collected automatically

• Device and app data — device model, operating system version, app version, and a device identifier used for push notifications.
• Usage data — screens viewed, products browsed, and actions taken in the app, used to improve the product.
• Crash reports — diagnostic data when the app fails, so we can fix it.
• Approximate or precise location — only if you grant permission, and only to suggest your delivery city and to help delivery partners reach you.

What we do not collect

We do not collect card numbers, CVV, UPI PIN or net-banking credentials. Orders are currently Cash on Delivery. When online payments are introduced, payments will be processed by a regulated payment gateway and card details will be handled by that gateway, not stored by Bhejjo.

2. Why we use your data

3. Who we share it with

We share only what is necessary, and never sell your personal data.

• Sellers — receive your name, phone number and delivery address for orders placed with them, so they can pack, invoice and service your order.
• Delivery partners and local partners — receive your name, phone number, address and a delivery verification code, only for your active order.
• Service partners — receive the details needed to collect, repair and return your device.
• Google (Firebase) — our technology provider for database, file storage, sign-in, push notifications, analytics and crash reporting.
• Authorities — where disclosure is required by law, court order, or to protect the rights and safety of users.

If Bhejjo is ever merged with or acquired by another business, your data may transfer to that entity, and we will notify you before it becomes subject to a different policy.

4. Where your data is stored

Data is stored on Google Cloud infrastructure in the asia-south1 (Mumbai) region. Some processing by our service providers may take place outside India; where that happens, we rely on the provider's contractual safeguards for cross-border transfers.

5. How long we keep it

• Account data — while your account is active, and until you ask us to delete it.
• Order, invoice and tax records — retained for the period required by Indian tax and accounting law, typically up to 8 years, even after account deletion.
• Service records — for the duration of the applicable warranty plus 1 year.
• Crash and analytics data — retained on a rolling basis by our providers, typically no more than 14 months.

6. Your rights and choices

• Access and correction — view and edit your profile and addresses in the app, or write to us.
• Deletion — request deletion of your account and associated personal data. See Delete your account.
• Withdraw consent — turn off location or notification permissions at any time in your device settings. Some features will stop working.
• Grievances — contact our Grievance Officer, listed on the Contact page. We acknowledge complaints within 48 hours and aim to resolve them within one month.

To exercise any of these, write to support@bhejjo.com from the email address or with the mobile number registered on your account, so we can verify the request is genuinely yours.

7. Security

Data in transit is encrypted using TLS. Access to production systems is restricted to authorised personnel. Sign-in uses one-time passwords sent to your mobile number rather than stored passwords. No system is perfectly secure, so we ask you not to share your OTP with anyone — Bhejjo staff will never ask for it.

8. Children

Bhejjo is not intended for children under 18. We do not knowingly collect data from children. If you believe a child has provided us data, write to us and we will delete it.

9. Changes to this policy

We may update this policy. The "last updated" date above always reflects the current version, and material changes will be notified in the app.

10. Contact