Privacy policy

This policy explains what personal data Pawotrait ("we", "us") collects when you use pawotrait.com and order a portrait, why we collect it, who we share it with and the choices you have. Pawotrait is run by Amogh and Tanishq from Pune, Maharashtra, India. We follow India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules.

Summary

• We collect only what we need to make and deliver your portrait and to support you.
• We never sell your personal data or your pet photos.
• We don't show your portrait or photo publicly (gallery, Instagram) without your permission.
• Your card and UPI details go straight to Razorpay. We never see or store them.
• You can delete your account at any time from your account settings.

1. Data we collect

When you sign in with Google: your name, email address, profile picture and a Google account ID. We never see your Google password.

When you order: delivery name, address, pincode, state and mobile number; the photo of your pet you upload; your size, frame, engraving text and colour, gift wrap choice; and your order and payment history (order ID, amount, payment status and Razorpay payment ID).

When you contact us or use the chat: what you write to us and our replies.

When you write a review: the name, text and optional photo you choose to publish.

Automatically: basic technical data such as your IP address, browser type and the pages you visit, used to keep the site secure (for example to stop spam) and working. We don't use advertising trackers.

2. Why we use it

• To make your portrait from your photo and deliver it to you.
• To take payment, send order confirmations and shipping updates by email, and show your order status.
• To answer questions, handle damaged deliveries, cancellations and refunds.
• To keep the site safe, prevent fraud and abuse, and fix problems.
• To keep the records Indian tax and accounting laws require.

We process your data because you consent to it when you place an order or create an account, and because we need it to fulfil your order. We send only order-related emails. If we ever send offers, it will only be with your permission and you can unsubscribe at any time.

3. Your pet photos

Your photo is used only to make your portrait. It is stored privately: only you (while it is in your cart) and our team can open it. After you pay, we keep a copy with your order so we can make the portrait and handle any replacement. We do not use your photo or finished portrait in our gallery, on social media or in ads unless you give us permission. You can ask us to delete your order photos once your order has been delivered.

4. Who we share it with

We share data only with the service providers we need to run the shop, and only what each one needs:

• Google Firebase (Google LLC): sign-in, database and photo storage.
• Razorpay: payments. Razorpay is PCI-DSS compliant and handles your card, UPI and bank details directly.
• Shiprocket and its courier partners: your name, address and phone number, to deliver your parcel.
• Google (Gmail): to send order and shipping emails.
• OpenAI: questions you type in the chat assistant, to generate an answer. Please don't share personal details in the chat.
• Our hosting provider: to run the website.

Some of these providers may store data on servers outside India, with safeguards required by law. We may also share data when the law requires it, for example with tax authorities or in response to a valid legal request.

5. Cookies and local storage

We use only what the site needs to work: keeping you signed in, and remembering your cart and wishlist on your device. We don't use advertising or cross-site tracking cookies. Blocking site storage in your browser may stop sign-in and the cart from working.

6. How long we keep it

• Account and saved addresses: until you delete your account.
• Cart and wishlist photos: until you remove them or delete your account.
• Orders and invoices: as long as Indian tax and accounting laws require (generally up to 8 years). When you delete your account, past orders are kept for this reason but are no longer linked to a login.
• Emails and chat messages: as long as needed to help you, then deleted.

7. Your rights and choices

Under the DPDP Act you can:

• see the personal data we hold about you and ask for a copy;
• correct or update it (you can edit your profile and addresses in My Account);
• withdraw consent and delete your account (Settings → Delete account), or ask us to erase your data;
• nominate someone to exercise these rights for you;
• raise a complaint with our Grievance Officer (below) and, if you're not satisfied, with the Data Protection Board of India.

Email pawotrait@gmail.com to use any of these rights. We may need to confirm your identity first.

8. Security

Data is sent over encrypted connections (HTTPS) and stored with access controls, so customers can only see their own account and orders. No system is perfectly secure; if a breach affects your data we will tell you and the authorities as the law requires.

9. Children

Pawotrait is meant for adults. You must be 18 or older to create an account or place an order. We don't knowingly collect data from children.

10. Changes to this policy

If we change this policy we will update the date at the top of this page. For important changes we will also let you know by email or on the site.

11. Grievance Officer and contact

For any question or complaint about your personal data, contact our Grievance Officer:

• Amogh, Co-founder, Operations, Pawotrait
• Email: pawotrait@gmail.com
• Address: Pune, Maharashtra, India

We acknowledge complaints within 48 hours and aim to resolve them within 30 days.