Privacy

A shop's page shows what the Partner and the shop owner chose to put on it: the shop's name, numbers, address, hours, pictures and the rest. It is public on purpose, so customers can find the shop.

Name, mobile and WhatsApp numbers; the billing name, address and GSTIN a Partner gives for invoices; sign-ins; orders, payments, invoices and refunds. We keep these to run the service, to send invoices, and because tax law asks us to keep accounts.

We count how often a card is tapped or scanned. To stop abuse (too many tries from one place), we keep the network address of the visitor for a day, then delete it. Browser descriptions kept with sign-ins and messages are removed after 30 days, and sign-ins that ended are deleted after 30 days.

When a customer sends an enquiry or a booking from a page, the name, number and message go to the shop owner and stay in the shop's inbox, where the shop and CAREALL can see them, until the shop or CAREALL removes them. The copy of them in the WhatsApp alert is cleared after 400 days; the record that the alert was sent stays.

Only the companies that run parts of the service for us: Cashfree Payments (payments: they handle card, UPI and bank details, and we receive only the payment's reference and amount), Supabase (the database and pictures, kept in Mumbai), Vercel (the website, served from Mumbai), and Meta's WhatsApp (messages to shop owners, once switched on).

We do not sell personal data, show advertising, or use tracking or analytics scripts.

Partners, shop owners and CAREALL staff get a cookie that keeps them signed in. A shop's page sets no cookie; it may remember your choice of English or Tamil in your own browser.

You can ask to see the personal data we keep about you, to correct it, or to delete it where the law does not ask us to keep it, and you can complain about how it is used. Contact us (see Contact); the same contact answers every question about personal data.