Privacy Policy

This Privacy Policy explains how Taahi Foods ("we", "us", "our") collects, uses, stores and protects your information when you use the Tmart Wholesale mobile app, our website taahifoods.com and related services (together, the "Service").

1. Who We Are

2. Information We Collect

a) Account information

• Mobile phone number (used to log in with a one-time password, OTP)
• Owner name
• Email address (optional)

b) Business information

• Shop or business name and business type
• GSTIN and PAN (optional, used for GST invoices)
• WhatsApp number (optional)

c) Delivery information

• Delivery addresses (address, city, state, PIN code)
• Location: if you allow location access, the app uses your device's precise or approximate location only to help you select a delivery address and to check whether we deliver to your area. Location is not collected in the background. You can deny location access and type your address instead.

d) Orders and payments

• Products ordered, order history, cart and wishlist
• Payment status and transaction references
• Card, UPI, net banking and wallet details are entered on Razorpay's secure checkout and processed by Razorpay. We do not receive or store your full card number, UPI PIN or banking passwords.
• For businesses approved for credit, the credit limit, amounts used and payments recorded

e) Support communications

• Messages you send us in support tickets

f) Technical information

• A device notification token (to send order and account notifications)
• Error and crash reports from the app (to fix problems)
• Search terms used in the app (stored only as overall popular-search counts, not linked to your account)

We do not collect your contacts, photos, files, SMS messages, call logs, microphone or camera data.

3. How We Use Your Information

• To create and secure your account and verify you with OTP
• To show prices for your business, process orders, deliver them and issue GST invoices
• To process payments and refunds
• To send order updates by SMS, email and app notifications
• To provide customer support
• To prevent fraud and misuse and to keep the Service secure
• To meet our legal, tax and accounting obligations
• To send offers and promotional messages (you can opt out at any time by emailing us or using the unsubscribe option in our emails)

4. Service Providers Who Process Data for Us

We share information only with service providers who process it on our behalf to run the Service:

• Razorpay: payment processing and refunds
• MSG91: sending OTP and order SMS
• Google Firebase: app notifications
• Google Maps Platform: address search, maps and delivery-distance calculation
• Cloudinary: storing product images and invoices
• MongoDB Atlas and Redis Cloud: secure cloud data storage
• Google (Gmail / Google Workspace): sending emails
• Our delivery staff: your name, phone number and delivery address, only to deliver your order

These providers may only use your information to provide their services to us. We do not sell your personal information. We may disclose information if required by law or by a government authority.

5. How Long We Keep Your Information

• Account and business information: until you delete your account
• Order, invoice, payment and GST records: for as long as Indian tax and accounting laws require, even after your account is deleted
• Support messages: up to 2 years
• Error and crash reports: up to 90 days

6. Your Rights and Account Deletion

You can view and update your profile and addresses in the app. You can also ask us to access, correct or delete your personal information.

To delete your account, email info@taahifoods.com from your registered email, or write to us with your registered mobile number, with the subject "Delete my account". We will verify your request and delete or anonymise your account information within 30 days. Records we must keep by law (such as GST invoices and order records) will be retained only for that purpose. See also our Account Deletion page.

7. Security

All data between the app and our servers is encrypted in transit using HTTPS. Access to customer data is limited to authorised staff and protected by login controls. No method of transmission or storage is completely secure, but we take reasonable steps to protect your information.

8. Children

The Service is meant for businesses and is not intended for anyone under 18 years of age. We do not knowingly collect information from children.

9. Grievance Officer

If you have any question or complaint about this policy or your data, contact our Grievance Officer:

10. Changes to This Policy

We may update this policy from time to time. The updated policy will be posted on this page with a new "Last updated" date.