Privacy Policy

By accessing or using the Platform, you (“you” or “user”) agree to the collection and use of information as described in this Privacy Policy (“Policy”). The personal data we collect is used to provide and improve the Platform. We will not use or share your information except as described in this Policy.

This Policy is incorporated into and should be read with our Terms of Use. Capitalised terms not defined here shall have the meanings given in the Terms. We value the trust you place in us and maintain reasonable security practices to protect your information and transactions.

1) Scope & Definitions

This Policy applies to the Platform (mobile apps and any related websites, services, and tools) that link to it.

• Personal Data: Information that can identify you directly or indirectly (e.g., name, mobile number, email, address, government ID, device identifiers).
• Sensitive Personal Data (as per applicable law): e.g., passwords, financial information (bank/UPI/card details), health data, biometrics, sexual orientation, medical records/history, and any other data notified as sensitive from time to time.
• Non-Personal Data: Information that does not identify you (e.g., aggregated analytics, device attributes without identifiers).
• Applicable Law: Indian laws including the Information Technology Act, 2000 and rules made thereunder, and the Digital Personal Data Protection Act, 2023 (and rules/notifications thereunder), as amended from time to time.

2) What We Collect

You may browse some parts of the Platform without creating an account. Certain features require registration.

a) Personal Data you provide

• Identity & contact: full name, mobile number, email, date of birth, gender/age, addresses.
• KYC/ID: PAN, passport, driving licence, voter ID, or other government-issued IDs as required.
• Account security: passwords/PINs (stored/processed securely).
• Payment data: bank account/UPI/card details (processed via compliant payment partners).
• Other info you voluntarily provide (support queries, feedback, survey responses).

b) Transactional & usage data

Orders, payments, refunds, delivery preferences, order history, number of transactions; in-app interactions, preferences, and communications with us.

c) Location & device data

Approximate or precise location (if you grant device permissions) for delivery, address suggestions, fraud prevention, and service availability; IP address, device identifiers, OS, browser, telecom operator, connection type/speed. You can withdraw location permission at any time in your device settings (some features may not work without it).

d) Cookies and similar technologies

We (and partners) use cookies/SDKs to recognise your device, keep sessions secure, analyse traffic, measure performance, and personalise content/ads where permitted. Declining non-essential cookies may limit some features.

e) Public and community content

Reviews, ratings, comments, testimonials, or other content posted publicly on the Platform may be publicly visible and reusable by us per the Terms.

3) How We Use Your Information

1. Provide & operate the Platform: account creation, authentication, orders, delivery, customer support.
2. Payments: process transactions, refunds, reconciliation, and prevent payment fraud.
3. Service improvement: debug, monitor, fix issues; develop new features; QA; analytics.
4. Personalisation: recommendations, saved preferences, relevant in-app experiences.
5. Safety, security & fraud prevention: detect, prevent, and respond to misuse or unlawful acts.
6. Communications: transactional messages (order updates, OTPs), service/policy notices, and responses to queries.
7. Marketing (with consent/legitimate basis): offers, promotions, surveys, newsletters via email/SMS/WhatsApp/phone/push (opt-out anytime; see Your Rights & Choices).
8. Legal compliance: law enforcement, regulatory, tax, or auditing obligations.
9. Research & insights: internal or partner studies in de-identified/aggregated form.
10. Other purposes disclosed at collection or with your consent.

4) Legal Bases (India)

Depending on context and applicable law, we rely on: your consent (e.g., marketing, precise location, certain sensitive data); performance of a contract (orders, delivery, refunds); legal obligations; and legitimate uses (security, fraud prevention, limited analytics). You may withdraw consent at any time without affecting prior lawful processing.

5) How We Share Information

We do not sell your personal data. We share it only as described below:

a) Service providers & partners

With vetted third parties under contractual confidentiality/security obligations (cloud hosting, payments & anti-fraud, customer support, communications, logistics/warehousing/delivery partners, analytics/marketing where permitted, survey tools, CRM, IT/security). We share only what’s necessary.

b) Group entities & affiliates

For operational support, compliance, reporting, or intra-group processing consistent with this Policy.

c) Legal, compliance & safety

When required by law/regulation/legal process or to protect our rights, users, or the public; or to investigate suspected illegal activity or violations of our Terms.

d) Business transfers

In mergers, acquisitions, investments, restructuring, financing, or asset sales, subject to confidentiality and continued protection.

e) License transitions

If licences/territories change, we may share necessary data with incoming licensees to ensure service continuity.

f) De-identified/aggregated data

We may share non-identifiable analytics and statistics. We do not share your data with third parties for their direct marketing without your explicit consent.

6) Cross-Border Transfers & Cloud Hosting

We store data on Amazon Web Services (AWS), which may process or store data on servers located in or outside India. See AWS’s privacy notice: aws.amazon.com/privacy . Where data is transferred outside India, we ensure compliance with applicable law (including any transfer restrictions and comparable protection requirements).

7) Data Security

We implement reasonable technical and organisational measures (e.g., encryption in transit, access controls, logging, periodic reviews) to protect against loss, misuse, and unauthorised access. No method is 100% secure. You are responsible for safeguarding your credentials, notifying us of suspected compromise, and logging out after use.

We are not responsible for security failures arising from (i) third-party sites/apps beyond our control, (ii) force majeure events, or (iii) issues attributable to your hardware/software or network.

8) Data Retention

We retain personal data only for as long as necessary to fulfil the Purposes or as required by law. When you request deletion, we will act on it subject to permissible retention for legal, regulatory, fraud-prevention, dispute-resolution, and audit requirements.

9) Your Rights & Choices

• Access: know what personal data we process about you.
• Correct/Update: rectify inaccurate or incomplete data.
• Delete: request deletion (subject to legal/operational retention).
• Withdraw consent: for processing based on consent (e.g., marketing, precise location).
• Grievance redressal: escalate unresolved concerns to our Grievance Officer.
• Opt-out of marketing: unsubscribe via in-message links, reply STOP to SMS/WhatsApp/voice, or email contact@jvfpl.co. Transactional messages will continue.

To exercise these rights, email contact@jvfpl.co or use in-app settings (where available). We may request information to verify your identity/authority.

10) Children’s Privacy

Our services are not intended for children under 18 years. We do not knowingly collect personal data from children under 18. If you are a parent/guardian and believe your child has provided personal data, please contact us so we can delete it.

11) Third-Party Links & Integrations

The Platform may contain links to third-party websites, services, SDKs, or content. Their privacy practices are not controlled by us. Review their policies before providing data. We are not responsible for their content, security, or practices.

We may use third-party advertising/measurement partners; they may collect limited data about your visits (not including your name, address, email, or phone) to show relevant ads, consistent with applicable law and your settings.

12) Public Posts

Content you post publicly on the Platform (e.g., reviews, comments) can be viewed by others. We may use, reproduce, and share such content as permitted in the Terms. Deleting a post may not remove copies cached/archived by others.

13) Changes to this Policy

We may update this Policy from time to time. Material changes will be posted on this page with an updated “Last Updated” date and, where required by law, notified to you via the Platform or email. Changes take effect upon posting unless stated otherwise.

14) Grievance Officer & Contact

We have appointed a Grievance Officer under applicable law:

For privacy queries, complaints, or to exercise rights, contact contact@jvfpl.co. We aim to acknowledge within reasonable timelines as per applicable law.

15) Additional Notices

• Payments: Processed by compliant partners. We do not store full card details on our servers.
• Communications: By providing your mobile/email and using the Platform, you authorise us to contact you for transactional and, where permitted, marketing purposes via email/SMS/WhatsApp/phone/push. You may opt out of marketing at any time (transactional messages will continue).
• Hosting Disclosure (AWS): The Platform stores data using Amazon Web Services (AWS). AWS’s privacy notice: aws.amazon.com/privacy . For queries about AWS’s measures, contact AWS per its privacy notice or reach out to our Grievance Officer.

Version: JVFPL Privacy Policy v1.0 — Effective 1 Sep, 2025

16) Jurisdiction

This Policy is governed by Indian law. Courts at New Delhi shall have exclusive jurisdiction, subject to any applicable dispute resolution terms in our Terms of Use.