Legal
Privacy policy
This covers the SPOCART mobile app and this website, both operated by SPOCART from Ranchi, Jharkhand, India.
What we collect, and why
- Mobile number — this is how you sign in. We send a one-time code to it; there is no password to leak.
- Business details — business name, contact person, email, business type and GSTIN. Required to raise a GST invoice.
- Delivery addresses — to ship your order and to print the invoice.
- Orders, quotations and enquiries — what you ordered or asked about, including any file you upload with a quotation request.
- Team members — if you add colleagues to your account, the name and number you enter for them.
- Device token — if you allow notifications, so we can tell you when an order moves.
We do not ask for anything we do not need to take an order, deliver it and invoice it correctly.
Payments
Payments are handled by our payment partner. Card numbers, UPI PINs and bank credentials are entered on their screens and are never stored on SPOCART systems. We keep only the payment reference, the amount and whether it succeeded, so we can match a payment to your order.
Messages you receive
Transactional messages — the sign-in code, order updates and invoices — are sent by SMS, WhatsApp or email and are part of using the service.
Promotional messages are optional. You can stop them from your account at any time, or by replying STOP.
Who else sees it
We do not sell personal data. It is shared only with:
- Courier partners — the delivery address and contact number, to deliver your order
- Our payment partner — to take and verify a payment
- Our SMS provider — your number, to deliver the sign-in code
- Authorities — where we are legally required to produce records
Our servers and database are hosted with infrastructure providers outside India (currently in Singapore). Your data is held there under contract and is not used for any purpose other than running SPOCART.
How long we keep it
While your account is open, we keep your details so you do not have to type them again. When you delete your account, almost everything goes immediately — business details, addresses, team members, quotations and uploaded files, reviews, notifications and enquiries — and your mobile number is released.
What we are required to keep: Indian tax law requires a seller to retain GST invoices and the records behind them for several years after the financial year they relate to. So past orders, the payments against them, and the invoice itself — including the business name, GSTIN and delivery address printed on it — are kept for that period even after an account is deleted. Your delivery phone number is removed from them, because a GST invoice does not need it.
Those records are retained as accounting records only. They are not linked to a working account, cannot be signed into, and are not used to contact you. They are deleted once the retention period ends.
Your choices
- See or correct your details — from Account in the app, or on the website.
- Delete your account — in the app under Account → Privacy & Security, or follow delete your account if you no longer have it installed.
- Stop promotional messages — from your account, or reply STOP.
For anything else, including a copy of what we hold about you, write to us from your registered email or mobile number — see contact.
Children
SPOCART is a business-to-business service. Accounts are for businesses and institutions, and the app is not directed at children. We do not knowingly collect data from anyone under 18.
Changes
If this policy changes in a way that affects how we use your data, we will say so in the app before the change takes effect.