Privacy Policy

🔎 Overview & Scope

CapHanu Enterprise respects the privacy of customers, visitors, registered users, sellers, affiliates, referral participants, wholesale buyers, support users, and other persons who interact with our platform. This policy applies to personal data collected through our website, mobile-friendly pages, account systems, order forms, seller tools, digital product delivery systems, customer support, payment flows, communication channels, marketing campaigns, and related services.

By accessing or using our platform, creating an account, placing an order, joining a seller, referral or affiliate program, using wallet or CapCoin features, contacting support, or participating in promotions, you acknowledge that your data may be processed as described in this Privacy Policy.

📥 Personal Data We Collect

We collect personal data only as needed to operate, secure, improve, and provide our services. The type of data collected may depend on how you use the platform.

Account and identity data

• Name, email address, mobile number, username, password hash, OTP verification status, account status, profile information, and login preferences.
• For sellers, affiliates, B2B buyers, or partners, we may collect business name, business address, GST or tax details, KYC documents, bank account details, payout information, pickup address, seller profile, and authorized representative details.

Order, delivery, and transaction data

• Products viewed or purchased, order history, cart items, wishlist, delivery address, billing address, invoice details, shipment tracking, returns, refunds, exchange requests, cancellation reasons, support tickets, and dispute records.
• Payment transaction reference, gateway status, refund reference, wallet adjustments, coupon usage, CapCoin activity, gift card usage, and promotional benefit usage.

Device, security, and usage data

• IP address, browser type, device information, operating system, approximate location based on IP or pincode, session data, cookies, referral source, pages visited, search queries, clicks, timestamps, security logs, login attempts, and fraud/risk signals.
• We may collect technical information to protect accounts, prevent misuse, detect suspicious activity, fix errors, measure performance, and improve the shopping experience.

Communication and support data

• Messages sent through contact forms, email, WhatsApp, SMS, calls, chat, support tickets, product questions, reviews, ratings, feedback, complaint details, images or videos submitted for support, and communication preferences.

Custom printing and digital content data

• For custom print orders, we may process uploaded designs, images, text, instructions, previews, approval records, and production requirements.
• For digital products, we may process download logs, license records, access tokens, download limits, expiry dates, device/IP signals, and delivery status.

⚙️ How We Use Personal Data

We use personal data for lawful, transparent, and platform-related purposes. This includes account creation, authentication, OTP verification, order processing, payment confirmation, delivery, refund processing, returns, customer support, seller operations, digital downloads, wallet and loyalty features, marketing communication, security monitoring, legal compliance, analytics, and service improvement.

• Account services: to register users, authenticate login, manage sessions, recover accounts, and protect user access.
• Shopping and order services: to process orders, show order history, manage cart/wishlist, generate invoices, track delivery, manage returns, and respond to order issues.
• Seller and marketplace services: to onboard sellers, verify documents, manage listings, evaluate seller performance, calculate payouts, process disputes, and enforce marketplace rules.
• Payments and wallet: to verify transactions, detect payment risk, apply coupons, issue eligible refunds, manage wallet credits, CapCoins, gift cards, and related records.
• Communication: to send OTPs, order updates, delivery alerts, support replies, policy notices, security alerts, promotional offers, referral updates, and loyalty information where permitted.
• Security and fraud prevention: to detect abuse, fake accounts, suspicious transactions, offer misuse, referral abuse, affiliate abuse, scraping, bot activity, and unauthorized access.
• Improvement and personalization: to improve product recommendations, search results, content, page speed, category browsing, user experience, and platform reliability.

✅ Consent, Notice & Lawful Processing

Where required, we process personal data based on notice, consent, legitimate platform operations, contractual necessity, legal obligations, fraud prevention, security requirements, or other lawful grounds available under applicable laws. By submitting information and using relevant services, you provide consent for the processing required to deliver those services.

You may withdraw consent for optional processing such as certain promotional communications, where supported by platform settings or by contacting support. Withdrawal of consent may limit or disable certain features where data is necessary to provide the requested service, such as order delivery, payment verification, refund processing, account security, wallet records, or seller payouts.

For important services such as OTPs, order updates, delivery updates, security alerts, account recovery, legal notices, fraud prevention, and support communication, we may continue to send essential communications even if you opt out of promotional messages.

🍪 Cookies, Tracking & Similar Technologies

We use cookies, local storage, session identifiers, analytics tags, and similar technologies to keep users logged in, remember preferences, protect accounts, manage cart and wishlist, improve search, measure page performance, understand product interest, detect fraud, and improve our services.

Cookies may be essential, functional, analytics-based, security-related, or marketing-related. Essential cookies are required for core platform functions such as login, checkout, CSRF protection, cart, and secure session management. Disabling cookies may affect website functionality.

Third-party tools such as payment gateways, analytics providers, advertising platforms, chat/communication tools, or social platforms may set cookies or collect technical data according to their own privacy policies. Users should review the respective policies of those third parties.

💳 Payment, Billing & Financial Data

Payments may be processed through authorized payment gateways, banks, UPI providers, card networks, or payment partners. We do not intend to store sensitive card numbers, CVV, UPI PIN, banking passwords, or OTPs on our own servers. Such sensitive payment information is generally processed by authorized payment partners under their own security systems.

We may store transaction references, payment status, order value, invoice details, refund status, failed payment logs, gateway response references, risk signals, wallet adjustments, and accounting records for order fulfillment, refunds, support, compliance, fraud prevention, and audit purposes.

Users must never share OTPs, passwords, UPI PINs, or payment credentials with anyone claiming to represent CapHanu Enterprise. We will never ask for sensitive payment credentials through phone calls, WhatsApp, SMS, email, or unofficial links.

🚚 Shipping, Delivery & Logistics Data

To deliver orders, we may share necessary information with logistics providers, courier partners, delivery agents, shipping aggregators, warehouse teams, sellers, or fulfillment partners. This may include customer name, phone number, address, pincode, order details, package details, delivery instructions, and tracking information.

Delivery partners may use this data only for shipment, delivery, pickup, return, exchange, cash collection where applicable, proof of delivery, and related operational purposes. Delivery timelines, serviceability, and tracking visibility may depend on third-party courier systems.

👛 Wallet, CapCoin, Cashback & Loyalty Data

When you use CapHanu Wallet, CapCoins, VIP Club, loyalty rewards, cashback-style benefits, gift cards, store credits, vouchers, or promotional balances, we may process reward history, earning activity, redemption history, wallet balance, order linkage, expiry, reversals, fraud checks, device signals, and support adjustments.

Wallet and reward data is used to provide eligible benefits, detect misuse, reverse invalid credits, apply limits, manage refunds, support users, and comply with audit and accounting requirements. Rewards may be reversed or restricted if the linked order is cancelled, returned, refunded, disputed, found fraudulent, or used in violation of platform policies.

Wallet and CapCoin features are promotional or platform-service features unless specifically stated otherwise. They are not intended to be bank accounts or cash deposits. Misuse, unauthorized transfers, fake orders, duplicate accounts, self-referral transactions, or abnormal activity may lead to account restrictions and reward reversal.

🏪 Seller, Marketplace & Payout Privacy

For sellers and marketplace participants, we may collect and process business identity, authorized representative details, KYC documents, GST/tax details, pickup address, warehouse details, bank account information, payout preferences, product listing data, inventory data, performance metrics, customer complaints, return rates, dispute records, support communication, and audit logs.

Seller data is used for onboarding, verification, listing management, order fulfillment, performance monitoring, fraud prevention, legal compliance, tax reporting, payout calculation, dispute resolution, logistics coordination, policy enforcement, and marketplace quality control.

We may share seller information with payment partners, logistics partners, government authorities where required, tax advisors, auditors, legal advisors, compliance partners, and customers where necessary for invoice, delivery, warranty, customer support, or dispute resolution.

🎁 Referral, Affiliate & Partner Tracking

If you participate in referral, affiliate, influencer, creator, seller partner, or promotional campaigns, we may process referral codes, affiliate links, tracking IDs, click data, attribution records, campaign source, device/browser signals, referred user activity, eligible order status, reward status, commission calculation, fraud review, and payout records.

This data is used to validate eligible referrals, calculate rewards, prevent self-referrals, detect fake traffic, identify coupon misuse, validate affiliate commissions, handle disputes, and comply with payout, tax, and audit requirements.

Referral and affiliate rewards may be withheld, reversed, or rejected if activity appears fraudulent, manipulative, duplicate, self-generated, bot-driven, misleading, cancelled, returned, refunded, or inconsistent with campaign rules.

🎨 Custom Print, Digital Products & User Uploads

For custom print products, users may upload images, designs, logos, text, instructions, or other creative material. Such uploads are processed for order preview, production, quality checks, customer support, delivery, dispute resolution, and recordkeeping. Users must ensure that uploaded content is lawful and that they have the rights to use it.

For digital products, we may process download tokens, license keys, access logs, download count, expiry date, device/IP signals, and account ownership records to securely deliver digital files and prevent unauthorized access, redistribution, or misuse.

User-submitted designs, files, reviews, ratings, images, videos, questions, or feedback may be moderated to prevent illegal, harmful, infringing, offensive, or misleading content. We may remove or restrict such content where required.

🤖 AI, Automation & Personalization

CapHanu Enterprise may use AI-assisted tools, recommendation systems, automation, search improvement, fraud detection tools, content optimization tools, and analytics systems to improve platform performance and user experience.

AI or automated systems may assist with product recommendations, search suggestions, fraud/risk flags, content formatting, support prioritization, marketing segmentation, seller performance indicators, and operational efficiency. Important decisions may still be reviewed manually where appropriate.

We do not intend to use AI systems to unlawfully discriminate or harm users. Automated outputs may be reviewed and improved over time for accuracy, fairness, quality, and security.

🔗 When We Share Personal Data

We do not sell personal data as a standalone product. We may share personal data only where necessary to operate the platform, provide services, protect users, comply with law, or support business operations.

• Sellers and marketplace partners: to process orders, answer product questions, handle returns, fulfill delivery, issue invoices, and resolve disputes.
• Payment partners: to process payments, refunds, transaction verification, fraud checks, and settlement.
• Logistics partners: to deliver orders, pickups, returns, exchanges, tracking, and proof of delivery.
• Service providers: hosting, security, email/SMS/WhatsApp communication, analytics, customer support, cloud storage, audit, accounting, and technical maintenance.
• Legal and government authorities: where required by law, court order, lawful request, tax obligations, fraud investigation, or protection of rights.
• Business transfer: in connection with merger, acquisition, restructuring, investment, asset transfer, or similar business event, subject to appropriate protections.

🌍 Storage, Hosting & Cross-Border Processing

Personal data may be stored and processed on servers, hosting systems, cloud providers, or service providers located in India or other jurisdictions, depending on operational needs and provider infrastructure. Where data is transferred or processed outside India, we aim to follow applicable legal requirements, security safeguards, contractual protections, and platform controls.

Some third-party services such as payment gateways, communication systems, analytics providers, anti-fraud tools, cloud infrastructure, or support systems may process data in multiple regions according to their own service architecture and legal compliance obligations.

🛡️ Security Measures

We use reasonable technical, administrative, and organizational safeguards to protect personal data. These may include secure sessions, CSRF protection, input validation, access controls, encryption or hashing where appropriate, audit logs, rate limits, account protection, malware scanning, server security rules, monitoring, backups, and restricted admin access.

However, no digital platform, internet transmission, or storage method is completely secure. Users must also protect their account credentials, OTPs, devices, browser sessions, and payment credentials. If you suspect unauthorized access, contact our support immediately.

In case of suspected or confirmed data incidents, we may investigate, take containment steps, notify affected users or authorities where required by law, and improve safeguards to reduce future risk.

🗂️ Data Retention

We retain personal data only as long as reasonably necessary for the purpose for which it was collected, including account services, order history, warranty, returns, refunds, seller payouts, accounting, tax, legal compliance, fraud prevention, dispute resolution, audit logs, security, and business records.

Some data may be retained for longer where required by law, legitimate business needs, security investigation, unresolved disputes, payment records, tax records, seller compliance, fraud prevention, or legal claims. We may anonymize, aggregate, delete, or restrict data when it is no longer needed.

👶 Children’s Privacy

Our ecommerce services are primarily intended for users who can legally enter into transactions. Minors may use the platform only with the involvement and consent of a parent or legal guardian. We do not knowingly intend to collect children’s personal data without appropriate authorization where required.

If a parent or guardian believes that a minor has provided personal data without proper consent, they may contact us for review and appropriate action. Certain features may be limited or require verification where legally required.

📲 Email, SMS, WhatsApp, Calls & Notifications

We may send service-related communications such as OTPs, account alerts, order confirmations, delivery updates, refund updates, wallet updates, CapCoin updates, seller messages, affiliate updates, security notices, and policy updates through email, SMS, WhatsApp, calls, website notifications, or other approved channels.

We may also send offers, coupons, newsletters, referral campaigns, loyalty updates, affiliate promotions, and marketing communication where permitted. You may opt out of non-essential promotional communication using available unsubscribe options, account settings, or by contacting support. Essential service and security messages may still be sent where necessary.

🧑‍⚖️ Your Privacy Rights

Subject to applicable law and platform verification, users may request access, correction, updating, deletion, withdrawal of consent, grievance redressal, or information about personal data processing. Certain requests may be limited where data is required for legal compliance, fraud prevention, pending transactions, refunds, tax records, seller payouts, dispute resolution, or security purposes.

To protect user privacy and prevent unauthorized access, we may verify your identity before processing requests. Requests may be rejected or limited if they are fraudulent, repetitive, technically infeasible, legally restricted, or affect the rights and safety of other users.

Users are responsible for keeping account information accurate and up to date. You may update certain information through your account dashboard, and for other requests you may contact our support team.

🔗 Third-Party Websites & Services

Our platform may contain links to third-party websites, payment pages, courier tracking pages, social media pages, marketplace tools, or external services. We are not responsible for the privacy practices, content, security, or policies of third-party websites or services.

When you interact with a third-party service, your data may be processed according to that third party’s privacy policy. Users should review those policies before submitting information or completing transactions on external platforms.

🗑️ Account Deletion & Data Correction

Users may request correction of inaccurate information or account deletion where available and legally permissible. Account deletion may not immediately delete all records, especially where data must be retained for completed orders, invoices, taxes, refunds, disputes, seller payouts, fraud prevention, wallet records, legal obligations, or security records.

Deleting an account may affect access to order history, wallet balance, CapCoins, referrals, affiliate records, downloads, seller tools, support records, and other platform features. We may require verification before processing deletion or correction requests.

🔄 Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, business operations, platform features, security practices, or service provider arrangements. Updated versions will be posted on this page with the latest update date.

Continued use of the platform after updates means you acknowledge the revised Privacy Policy. For significant changes, we may provide additional notices through the website, email, notifications, or other appropriate channels.

📩 Contact, Support & Grievance Redressal

For privacy questions, data requests, correction requests, consent withdrawal, account deletion, fraud reporting, seller privacy concerns, wallet or CapCoin privacy questions, referral or affiliate data concerns, or grievances, you may contact CapHanu Enterprise through our official support channels.

Please do not send passwords, OTPs, UPI PINs, full card details, or unnecessary sensitive documents through email or public channels. For security, we may ask you to verify your identity before acting on privacy requests.