Privacy Policy

Sochmate AI Private Limited ("Company", "we", "us", "our") operates DotBuy, an AI-powered shopping assistant. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Service").

Please read this Privacy Policy carefully. By using DotBuy, you consent to the data practices described in this policy. This policy is compliant with the Information Technology Act, 2000 and applicable rules thereunder, including the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

We collect the following types of information:

2.1 Information You Provide Directly• Full name• Email address• Mobile phone number• Delivery address(es)• Payment information (processed and secured by Razorpay; we do not store full card numbers)• Account credentials (username, hashed password)• Search queries and shopping preferences• Communication preferences

2.2 Information Collected Automatically• Device information (device ID, model, operating system version)• IP address and approximate location• Usage data (pages viewed, features used, time spent)• App interaction logs for debugging and improvement• Push notification tokens (for order status updates)

2.3 Information from Third Parties• Order status and confirmation data from e-commerce platforms (Flipkart, Myntra, Zepto, BigBasket, Instamart, Amazon Now, DMart)• Payment status from Razorpay

We use the information we collect to:

• Create and manage your DotBuy account• Process your orders on supported e-commerce platforms on your behalf• Send you order confirmations, status updates, and delivery notifications• Apply coupon codes and discounts to maximise your savings• Provide customer support and respond to inquiries• Personalise your shopping experience and recommendations• Detect and prevent fraudulent transactions and abuse• Improve our AI models, recommendation engine, and overall service• Comply with legal obligations• Send you service-related communications (not marketing without your consent)

We do not sell your personal information to third parties.

We may share your information with:

4.1 E-commerce PlatformsWhen placing orders on your behalf, we share necessary information (name, delivery address, phone number) with Flipkart, Myntra, Zepto, BigBasket, Instamart, Amazon Now, DMart, or other supported platforms. This is required to complete your purchase.

4.2 Payment ProcessorsPayment information is shared with Razorpay (a PCI-DSS compliant payment processor) to process transactions securely.

4.3 Service ProvidersWe work with trusted third-party service providers for cloud hosting, analytics, and customer communication. These providers process data only as instructed by us and under confidentiality agreements.

4.4 Legal RequirementsWe may disclose your information if required by law, court order, or governmental authority, or to protect the rights, property, or safety of our users, ourselves, or others.

4.5 Business TransfersIn the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

We retain your personal data for as long as your account is active or as needed to provide the Service. Specifically:

• Account data: Retained for the duration of your account and up to 3 years after account deletion• Transaction records: Retained for 7 years as required by Indian financial regulations• Communication logs: Retained for 2 years• Device logs: Retained for 90 days

You may request deletion of your account and associated data by contacting us at [email protected]. Note that some data may be retained for legal compliance purposes.

We implement industry-standard security measures to protect your personal information:

• All data is transmitted using TLS/SSL encryption• Payment data is handled exclusively by PCI-DSS compliant Razorpay• Passwords are stored using strong hashing algorithms (bcrypt)• Access to personal data is restricted to authorised personnel only• We conduct regular security reviews and audits

While we take reasonable precautions, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

As a user, you have the right to:

• Access: Request a copy of the personal data we hold about you• Rectification: Correct inaccurate or incomplete personal data• Erasure: Request deletion of your personal data (subject to legal retention requirements)• Portability: Receive your data in a structured, machine-readable format• Opt-out: Unsubscribe from marketing communications at any time• Withdraw Consent: Where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at [email protected]

Our website uses cookies and similar tracking technologies to:

• Maintain your login session• Remember your preferences• Analyse usage patterns to improve the Service• Prevent fraud

You can control cookie settings through your browser. Disabling certain cookies may affect the functionality of the Service. We use Google Analytics for anonymised usage analysis.

DotBuy is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us at [email protected] and we will promptly delete it.

Our Service may contain links to third-party websites and platforms. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the new policy on this page with an updated "Last Updated" date• Sending an email notification to registered users• Displaying a prominent notice in the app

Your continued use of the Service after such changes constitutes acceptance of the updated policy.

For any questions, concerns, or requests regarding this Privacy Policy:

Sochmate AI Private LimitedEmail: [email protected]Support: [email protected]

In accordance with the Information Technology Act, 2000 and rules made thereunder, the name and contact details of the Grievance Officer are:

Grievance Officer: AmanEmail: [email protected]Response time: Within 1 month of receipt of grievance