1. What we collect
Account data (name, email, hashed password), order data (items, addresses, totals), payment metadata (last4 + brand only — full card numbers stay with our payment processor), and device/usage data (IP, user agent, requestId logs).
2. How we use it
To fulfil orders, prevent fraud, send transactional emails (order confirmation, password changes, refunds), and improve the service. We do not sell your personal data.
3. Third parties
We share data only with: payment processors (Stripe), email delivery providers (SMTP), and any OAuth providers you elect to sign in with (Google, Apple, Facebook). Each operates under their own privacy policy.
4. Cookies
We use cookies for session, cart state, and theme preference. You can clear cookies at any time via your browser.
5. Your rights
You may request access, correction, or deletion of your data. Contact us via /contact with the email tied to your account.
6. Data retention
We keep order records as long as required by tax and consumer-protection law, typically 7 years. Account data is deleted within 30 days of an account-closure request, except where retention is legally required.
7. Children
SwiftKart is not directed at children under 16. We do not knowingly collect data from minors.
8. Changes
Material changes to this notice are announced via your account or email at least 14 days before taking effect.