Privacy Policy

1. Data We Collect

In order to provide our cashierless shopping services, SuperCart collects specific items of personal and device data from customers scanning QR codes at participating retail environments:

Email Address & Phone Number: Required for secure store entry authentication, Digital Receipt generation, and communication of checkout confirmations.
Shopping History: Detailed records of barcodes scanned, quantities, checkout store coordinates, payment records, and timestamp telemetry.
Device Information: Device model, browser user-agent, operating system, and IP address for session security and web app scaling.

2. How We Use Your Data

All data collected is utilized solely to guarantee secure, frictionless, and authentic cashierless transactions. Specific uses include:

Facilitating instant order tracking and matching your digital cart to physical exits.
Sending automated digital transaction receipts directly via WhatsApp, SMS, and email.
Analyzing store telemetry and scan speeds to optimize product lookups and app responsiveness.
Preventing checkout abuse, coupon anomalies, and store-level shrinkages.

3. Data Storage and Security

Your data is hosted in high-security, end-to-end encrypted databases powered by Google Cloud. We apply industry-standard TLS encryption protocols during transit and AES-256 block encryption protocols for data at rest. Payment data processing is routed completely through our PCI-DSS compliant payment gateway integration partner (Razorpay), ensuring your cards and banking PINs never touch our servers.

4. No Third-Party Sales

SuperCart enforces a strict zero-sharing policy. We do not sell, lease, trade, or distribute your email addresses, phone numbers, or shopping histories to third-party marketing companies, advertisers, or programmatic aggregators. Data is shared exclusively with the specific store partner where your transaction takes place for inventory auditing.

5. User Rights

We believe your data belongs to you. Under our user-rights guidelines, you may request the following actions at any time:

Account Deletion: Permanently wipe your registered phone, email, and historical purchase data from our live databases.
Data Export: Retrieve a machine-readable JSON copy of your personal shopping session histories.

To exercise these rights, please send a verification request containing your phone number to support@getsupercart.in.

6. Governing Law

This privacy policy and all operational data processing practices by SuperCart are governed strictly by the laws of the Republic of India, including compliance under the Information Technology (IT) Act, 2000 and corresponding rules.

7. Contact Information

If you have questions, disputes, or security reports, please reach out to our grievance officer at: