Privacy Policy

1. Information we collect

We collect information in three broad ways: information you provide, information generated through your use of the Service, and information processed by service providers on our behalf.

Information you provide

• Account and authentication. When you register or sign in, we process credentials and profile-related information through our authentication provider (Supabase Auth). This may include your email address, password (if you use email and password sign-in), and information received from Google if you choose Google Sign-In (such as your name, email address, and profile picture URL, as made available by Google).
• Profile. You may provide or update your full name and phone number in your customer profile. Phone verification fields may exist in our database; whether verification is required depends on product features in use.
• Delivery addresses. You may save addresses including name, phone, address lines, city, state, and pincode for checkout and order fulfilment.
• Orders and returns. When you place orders or submit return requests, we store order details, items purchased, pricing snapshots, status, and related fulfilment information linked to your account.
• Search and support interactions. When you use marketplace search (including AI-assisted search), we process the search phrases you submit to return relevant products or services. Customer support is primarily self-service through order history and account tools; dedicated live chat is not fully implemented in the current customer profile experience.

Information collected automatically or from your device

• Location (with permission). On the Android app, we may request device location permission so we can resolve your delivery area. On the website, the browser may request location if you choose to use location-based features. See Section 3.
• Delivery preferences on your device. The Service may store your selected delivery pincode and a human-readable locality label in your browser’s local storage so you do not have to re-enter them each visit.
• Session and cart data. Signed-in customers may have cart contents stored in our database. Cart and checkout flows may also use local or session storage on your device for convenience (for example, cart items or a selected checkout address during a session).
• Technical data. Like most web services, our hosting and infrastructure providers may process standard technical information (such as IP address, device type, and request logs) when you connect to the Service. We do not operate a first-party advertising or analytics tracker in the customer website code reviewed for this policy.

Information we do not intentionally collect through the customer site

• We do not offer a live customer wishlist feature in the current footer experience (wishlist is marked as coming soon).
• We do not use first-party marketing pixels or third-party advertising cookies in the customer JavaScript reviewed for this policy.

2. How we use information

We use information to operate The Pet Planet customer experience, including to:

• Create and manage your account and authenticate you (including Google Sign-In and email-based sign-in).
• Display and personalise the marketplace, including products and services available for your delivery pincode.
• Maintain your cart, saved addresses, orders, invoices, and return requests.
• Process payments and record payment outcomes.
• Check product delivery serviceability between seller and customer pincodes.
• Improve search and discovery, including AI-assisted marketplace search that sends your query to our backend for processing.
• Communicate with you about your account or orders where necessary (for example, through email sign-in links or order-related records).
• Protect the Service, troubleshoot issues, and comply with applicable law.

3. Location and delivery pincode

Delivery on The Pet Planet is organised around Indian pincodes, not city-wide browsing filters. Your pincode is used to determine which products can be delivered to you and to show a readable locality name in the interface.

• What we ask for. You may enter a pincode manually or, with permission, allow the app or browser to use device location.
• How location is processed. Device coordinates may be sent to OpenStreetMap’s Nominatim service (operated by the OpenStreetMap Foundation) for reverse geocoding to derive a pincode and locality name. Pincode lookup may also use geocoding search requests when resolving a pincode to a display name.
• What we store. Based on the current customer implementation, we store your selected pincode and a locality display name in local storage on your device, and we use pincode-related fields in saved addresses and orders. We do not treat permanent storage of raw GPS coordinates in the customer database as a confirmed feature of the current implementation; coordinates are used to derive pincode/locality during location flows.
• Android app. The Android app may require location permission as part of its onboarding flow before full marketplace access. You can change permission later in Android settings; if permission is revoked, the app may prompt you again before showing the full customer experience.

4. Sharing with third parties

We share information only as needed to run the Service. Third parties process data under their own terms and privacy policies.

Service providers we use

Supabase

Hosts our database, authentication, and serverless functions. Account data, profiles, addresses, carts, orders, invoices, and related customer records are stored in Supabase. Authentication sessions are managed through Supabase Auth.

Google

If you choose Google Sign-In, Google processes your sign-in according to Google’s policies. Our AI search features may use Google Gemini models via Supabase Edge Functions; search queries you submit may be sent to those functions for processing. A separate external search function may use Google Search grounding for web discovery features when invoked.

Razorpay

Processes online payments. When you pay, Razorpay handles payment credentials and payment authorisation. We receive payment identifiers and status needed to confirm orders and generate invoices. We do not store your full card details on our servers.

Shiprocket

Used to check courier serviceability between seller pickup pincodes and your delivery pincode. Our delivery check sends pickup and delivery pincodes, parcel weight/dimensions derived from product data, and declared shipment value—not your full profile—to Shiprocket for eligibility checks.

OpenStreetMap Nominatim

Used for geocoding and reverse geocoding to resolve pincodes and locality names when you use location-related features.

Sellers and fulfilment

When you purchase from a seller on The Pet Planet, order and delivery information needed to fulfil your order (such as items, delivery address, and contact details you provide for delivery) is available to the relevant seller and our operational systems. Seller contact details may be shown to you for service listings when you use in-app contact features.

Legal and safety

We may disclose information if required by law, court order, or governmental request, or when we believe disclosure is necessary to protect rights, safety, and the integrity of the Service.

5. Storage, cookies, and device data

Browser local storage and session storage

The customer website uses browser storage (not traditional first-party cookies in our application code) for preferences and convenience, including for example:

• Delivery pincode and locality display name
• Catalogue or onboarding-related preference flags on supported devices
• Cart data backup on the device during checkout flows
• Session selections such as a chosen checkout address

Supabase Auth may store session tokens using mechanisms appropriate to your browser or WebView (which may include local storage). You can clear site data through your browser or app settings; clearing data may sign you out or reset local preferences.

Push notifications (Android)

The Android app may request notification permission. The current customer implementation focuses on permission for future order updates; we do not describe a separate push notification registration pipeline in the customer JavaScript reviewed for this policy. If we enable push messaging in the future, we will update this policy.

No confirmed advertising analytics

We did not identify a first-party Google Analytics, Meta Pixel, or similar advertising tracker in the customer website application code. Infrastructure providers may still log technical access data as part of hosting.

6. Security and retention

We use reasonable technical and organisational measures appropriate to a marketplace platform, including authenticated access to customer accounts, row-level security patterns in Supabase, and payment processing through Razorpay rather than storing card data ourselves. No method of transmission or storage is completely secure.

Retention. We retain information for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Specific retention schedules for every data category are managed in our backend systems and are not fully documented in the public customer codebase; contact us if you need details about a particular data type.

7. Your choices and account deletion

• Account information. You can update profile and address information in your account area when signed in.
• Sign-in options. You may use Google Sign-In or email-based sign-in (including magic links or password, depending on the flow you choose).
• Location. You can change or clear delivery pincode preferences through the location controls in the Service and through device permission settings on mobile.
• Delete account. Signed-in customers can request account deletion through the profile account deletion flow, which calls our delete-customer-account server function. Deletion effects depend on backend configuration and legal record-keeping requirements; some order or invoice records may need to be retained where required for tax, accounting, or dispute purposes even after account closure.

Depending on where you live, you may have additional rights regarding access, correction, or deletion of personal information. To exercise rights not available in the app, contact us at the email below. We will respond as required by applicable law.

8. Children’s privacy

The Pet Planet is a general audience pet marketplace and is not directed at children. We do not knowingly collect personal information from children under 18 without appropriate parental consent. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it where required.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the “Last updated” date. Material changes may also be communicated through the Service or by email where appropriate. Continued use after changes become effective means you accept the updated policy.

10. Contact us

For privacy questions, requests, or complaints about The Pet Planet customer Service:

CrazyLazyPet LLP
The Pet Planet
Email: projectdata.cb@gmail.com

This policy is provided for transparency about our data practices. It is not legal advice and does not by itself create contractual rights beyond those in our terms of use.