Privacy Policy

To ensure our practices are completely clear, the following terms are defined as follows:

• Account: A unique, secured digital profile created for You to access Our Service.
• Company: Refers exclusively to Wezolt Technologies Private Limited, with its registered office at 4th floor, Apurupa Turbo Tower, No:36 Pillar No:1680, H.No 8-2-293/82/a/787, Road, Jubilee Hills, Hyderabad, Telangana 500033.
• Data Principal: The individual to whom the personal data relates. In this Policy, "You" are the Data Principal.
• Device: Any electronic device used to access the Platform, including smartphones, desktop computers, tablets, or point-of-sale (POS) systems.
• Personal Data: Any data about an individual who is identifiable by or in relation to such data.
• Sensitive Personal Data or Information (SPDI): Includes passwords, financial details (like tokenized payment instruments), biometric data, and official government identifiers.
• Usage Data: Data automatically collected by our infrastructure to ensure the Platform functions correctly (e.g., app load times, screen interactions, IP addresses).

We practice data minimization — meaning we only ask for the information we genuinely need to make your experience hyper-local, fast, and secure. We gather information through three main channels:

A. Information You Directly Provide

When you register, shop, or set up a store, you voluntarily share information with us.

For Consumers (Shoppers):

• Contact & Profile Details: Your full name, email address, mobile number, and profile picture.
• Delivery Information: Delivery addresses, landmarks, city, state, PIN codes, and saved geolocations to ensure our riders find you easily.
• Interaction Data: Customer support chats, voice recordings of support calls, product reviews, and feedback.

For Merchants (Sellers on Spede Hub):

• Business Identity: Trade name, store operating hours, and entity type.
• Regulatory & KYC Data: GSTIN, PAN, Trade Licenses, FSSAI licenses, and Shop & Establishment certificates.
• Financial Details: Bank account numbers, IFSC codes, and canceled cheques required for routing your daily settlements.
• Authorized Personnel Details: Government-issued IDs (Aadhaar/Voter ID) of shop owners and delivery personnel for mandatory background verification.
• Store Data: Inventories, product catalogs, and historical sales metadata.

B. Information Collected Automatically (Device & Usage)

To ensure the Spede app runs flawlessly on your phone or POS system, our servers automatically collect diagnostic and usage data:

• Device & Network Info: Hardware models, operating system versions, IP addresses, unique Device identifiers (IMEI/MAC), and mobile network details.
• App Performance & Crash Logs: If the app crashes, we securely collect logs containing the app’s state, memory usage, and error codes to help our engineers deploy a fix rapidly.
• Interaction Metrics: We track how you navigate the app — such as page load times, search queries, button clicks, and the items you frequently view — to improve the app’s design.

Mobile Device Permissions:

• Location Services (GPS): Crucial for our hyper-local model. We use precise location data to show you stores in your immediate vicinity, calculate accurate delivery times, and allow you to track your rider live.
• Camera & Microphone: Required to capture live photos for Merchant KYC, scan UPI QR codes, or allow Sellers to instantly photograph products for their catalog.
• Photo Library/Gallery: To allow you to upload profile pictures or attach existing documents for store verification.
• Push Notifications: We collect device tokens to send you essential, real-time alerts like OTPs, order confirmations, and delivery dispatches.

C. Information from Trusted Third Parties

• Logistics Partners: Real-time delivery statuses and address corrections.
• Payment Gateways: Transaction success/failure codes and tokenized payment metadata. (Note: We never store your full credit/debit card numbers).
• Credit Bureaus & Verification APIs: For our Sellers, we use third-party APIs to validate PAN/GSTIN details and, in some cases, receive credit history to facilitate seller working-capital loans.

Your data is the engine that makes Spede’s hyper-local delivery possible. We process your Personal Data strictly for the following lawful purposes:

1. Order Fulfillment & Delivery: To process your cart, accept orders, route the details to the correct local Merchant, calculate delivery fees, dispatch riders, and securely process your payments.
2. Platform Maintenance & Improvement: To fix technical bugs, conduct data analysis, and improve the overall speed, stability, and usability of the Spede ecosystem.
3. Hyper-Personalization: We use your search and purchase history to tailor your app experience, recommending local stores, products, or features that align with your unique preferences.
4. Identity Verification & Legal Compliance: Operating a digital marketplace requires strict adherence to Indian laws. We use data to verify merchant identities, prevent money laundering, comply with E-Commerce Rules, and ensure seamless GST tax compliance.
5. Customer Support & Dispute Resolution: To reach out to you via phone, email, or in-app chat to resolve ongoing order issues, process refunds, or answer queries.
6. Fraud Prevention & Security: To protect our community from abuse, counterfeit sales, and hacking. We actively monitor transaction patterns to detect anomalies and assess risk.
7. Artificial Intelligence (AI) Enhancements: We may use anonymized, aggregated data, as well as uploaded product images, to train our Machine Learning models. This allows us to build automated cataloging tools, improve search relevance, and deploy intelligent support chatbots.
8. Marketing & Promotions: With your consent, we use anonymized identifiers to display relevant discounts, promotional offers, and campaigns that might benefit you.

We firmly state that we do not sell your Personal Data to data brokers or third-party marketers. We share information only when absolutely necessary to operate the Platform, under strict confidentiality agreements.

A. With Local Merchants & Riders (To Fulfill Orders)

When you place an order, we must share your name, delivery address, and phone number with that specific local Seller and the assigned delivery rider. This data is provided strictly for order fulfillment. Merchants are contractually prohibited from using this data to spam you or market to you outside the Platform.

B. With Trusted Service Providers

• Payment Aggregators: (e.g., Razorpay, PayU) to process transactions securely.
• Cloud Infrastructure: (e.g., AWS, Google Cloud) to securely host our encrypted databases.
• Communication APIs: (e.g., Twilio, MSG91) to route SMS OTPs and emails.

These providers act as “Data Processors.” They are legally restricted from using your data for any purpose other than what we explicitly instruct them to do.

C. With Financial Partners

For Spede Hub Merchants, we may share KYC and sales data with NBFCs or lending partners, solely if the Merchant opts-in to apply for business credit or financial services.

D. For Business Restructuring

In the event of a merger, acquisition, or sale of company assets, user data is typically transferred to the new entity. We will notify you if your data becomes subject to a different privacy policy.

E. For Legal Compliance & Law Enforcement

We will disclose your information if we believe in good faith that it is necessary to:

• Comply with valid court orders, subpoenas, or requests from Indian law enforcement (e.g., Cyber Cell, Police).
• Enforce our Terms of Use or Master Seller Agreement.
• Protect the safety, property, and intellectual property of Wezolt Technologies Private Limited, our users, or the general public.

To make the Platform intelligent and responsive, we use cookies, software development kits (SDKs), and similar tracking tools.

• Strictly Necessary Cookies: Required for basic functions like keeping you securely logged in or holding items in your cart.
• Performance Cookies: Help us understand app traffic and measure performance (e.g., Google Analytics).
• Functionality Cookies: Remember your preferences, like your chosen language or saved delivery locations.

Your Control: You can disable cookies through your browser or reset your mobile device’s advertising identifier. Please note that disabling essential cookies may cause the Platform to function incorrectly.

While no digital platform can guarantee 100% absolute security against advanced cyber threats, we implement commercially rigorous safeguards to protect your data:

• Encryption: Data transmitted between your device and our servers is protected using Transport Layer Security (TLS/SSL). Sensitive data at rest is encrypted using industry-standard protocols.
• PCI-DSS Compliance: We rely on RBI-authorized payment gateways. We never store your CVV or full card numbers on our infrastructure.
• Access Controls: Internal access to user data is strictly limited to authorized Spede employees and engineers on a “need-to-know” basis.
• Cross-Border Transfer: Your data may be transferred to and processed on secure cloud servers located outside India in accordance with applicable laws. By using the Platform, You consent to this transfer.
• Data Breach Notification: In the event of a data breach compromising Your Personal Data, We will take reasonable steps to notify affected users and relevant authorities as required under applicable Indian law.

Your Responsibility: You play a vital role in security. Please keep your OTPs, passwords, and devices secure. The Company is not liable for data breaches resulting from compromised user devices or shared passwords.

• Active Accounts: We retain your data while your account is active to ensure uninterrupted service.
• Statutory Retention: Under Indian taxation laws (GST), the Companies Act, and anti-money laundering regulations, we are legally mandated to retain transaction histories, invoices, and basic financial metadata for a period of seven (7) to eight (8) years, even if you delete your account.
• Anonymization: Once the legal retention period expires, we will securely delete or permanently anonymize your data. Anonymized data (which can no longer identify you) may be kept indefinitely for business analytics.

As a Data Principal, the law grants you powerful rights over your information:

• Right to Access & Correction: You can view, update, correct, or complete most of your personal data directly within the “My Account” section of the app.
• Right to Erasure: You may request the deletion of your Personal Data. (Note: We will honor this request unless we are legally required to retain the data for tax, fraud-prevention, or compliance purposes).
• Right to Withdraw Consent: You can revoke your consent for data processing at any time. You can opt-out of marketing emails or revoke camera/location permissions via your Device settings. (Warning: Revoking essential permissions, like location, may prevent us from delivering your orders).
• Right to Nominate: You may nominate an individual to exercise your privacy rights on your behalf in the event of your death or incapacity.
• Right to Grievance Redressal: If you are unsatisfied with how we handle your data, you have the right to file a complaint with our Grievance Officer, and subsequently with the Data Protection Board of India if unresolved.

To exercise any of these rights, please email our Grievance Officer from your registered email address.

The Platform is intended for use by individuals who are at least 18 years of age (the age of majority in India). We do not knowingly collect Personal Data from minors without verifiable parental consent. If we discover we have inadvertently collected data from a child, we will take immediate steps to delete it.

The technology landscape evolves rapidly. We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes by updating the “Last Updated” date at the top of this page, and for major shifts, we may display a prominent notice in the app. Your continued use of the Platform after such updates are posted constitutes your explicit acceptance of the revised Policy.

In compliance with the Information Technology Act, 2000, and the DPDP Act, 2023, we have appointed dedicated officers to assist you. If you have any privacy concerns, please contact us. We promise to listen, investigate, and respond.