Privacy Policy

1. Our commitment

StitchDoor (a service operated by COSCO TRADE) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and safeguard your information in compliance with the Digital Personal Data Protection Act, 2023 and applicable Indian laws.

2. Who we are

The data controller for StitchDoor is:

• Legal Entity: COSCO TRADE (Proprietorship)
• Proprietor: Bhavana Nilkanth Thakare
• GSTIN: 27BDZPT2381N1ZD
• Registered Address: Flat No 102, First Floor, Elysium, Kasrasai Road, Marunje Village, Pimpri Chinchwad, Pune, Maharashtra 411057
• Contact: hello@stitchdoor.in · +91 77090 66596

3. Information we collect

3.1 Information you provide

• Account details: Name, phone number, email address, password (hashed, never stored in plain text)
• Address details: Pickup and delivery addresses, landmarks, pincode
• Measurements: Body measurements you enter or that we record during home-visit service
• Order details: Services booked, design preferences, reference images, fabric descriptions
• Payment information: Processed securely by our payment partner Razorpay. We do not store your full card number or CVV.
• Communications: Messages, emails, and WhatsApp chats you send us

3.2 Information collected automatically

• Device information: Device type, operating system, app version, unique device identifiers
• Usage data: Pages visited, features used, time spent, order history
• Location data: Approximate location to match you with the nearest tailor and delivery agent (only with your permission)
• Cookies: Used on our website for basic functionality. We do not use advertising or third-party tracking cookies.

4. How we use your information

We use your data to:

• Process and fulfill your tailoring orders
• Schedule pickup and delivery
• Match your order with suitable tailors in your area
• Send order status updates via WhatsApp, SMS, email, or push notifications
• Process payments and issue GST-compliant invoices
• Respond to your queries and provide customer support
• Improve our services based on usage patterns (in aggregated, anonymized form)
• Send promotional offers (only if you've opted in; you can opt out anytime)
• Comply with legal, tax, and regulatory obligations
• Prevent fraud and enforce our Terms & Conditions

5. How we share your information

We do not sell your personal data to anyone. We share data only in these limited cases:

• Tailors: Your measurements, order details, and pickup/delivery addresses are shared with the tailor assigned to your order — strictly on a need-to-know basis
• Delivery agents: Your pickup/delivery address and phone number are shared with the assigned delivery agent
• Payment processors: Razorpay (and similar gateways) process payments under their own privacy policy
• Service providers: Trusted vendors for SMS (Twilio), email (Zoho), cloud hosting (Vercel, Google Cloud), and analytics — all under confidentiality agreements
• Legal obligations: If required by court order, government authority, or applicable law

6. Data retention

We retain your personal data only as long as necessary for the purposes described in this policy:

• Active account data: As long as your account is active
• Order history: 7 years (required for GST / tax compliance under Indian law)
• Marketing preferences: Until you unsubscribe
• Deleted account data: Personal identifiers removed within 30 days of deletion request; anonymized transaction records retained for tax compliance

7. Data security

We implement appropriate technical and organizational measures to protect your data:

• Encrypted data transmission via HTTPS/TLS
• Passwords stored using bcrypt hashing (never plain text)
• Access controls and role-based permissions for our staff and tailors
• Payment data handled only by PCI-DSS compliant gateways (Razorpay)
• Regular security reviews and vulnerability patches

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but commit to promptly notifying you and relevant authorities in the event of any data breach, as required by law.

8. Your rights

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correct — request correction of inaccurate or outdated data
• Erase — request deletion of your personal data (subject to legal retention requirements)
• Withdraw consent — for processing based on consent, at any time
• Nominate — designate a person to exercise your rights in the event of your death or incapacity
• Grievance redressal — raise complaints about how we handle your data

To exercise any of these rights, email us at hello@stitchdoor.in. We will respond within 30 days.

9. Children's privacy

Our Service is not directed at children under 18. We do not knowingly collect personal data from minors. If you are a parent/guardian and believe your child has provided us personal data without consent, contact us and we will delete it.

10. Third-party links

Our website may contain links to third-party sites (e.g., payment gateways, social media). We are not responsible for their privacy practices. We encourage you to review their privacy policies.

11. International data transfers

Some of our service providers (e.g., hosting, email) may be based outside India. When we transfer data outside India, we ensure adequate protection through standard contractual clauses or equivalent safeguards, in compliance with the DPDP Act.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified to you via email, WhatsApp, or an in-app notice at least 7 days before they take effect.

13. Grievance Officer