Privacy Policy

About This Policy

This policy applies to the UniqueShopee website and Android app. It describes the personal information processed when you browse, create an account, use our tools, place an order, contact support, or request account deletion.

Information We Collect

• Account and identity details such as your name, email address, phone number, account ID, profile status, and internal account role. Authentication is provided through Supabase; the app does not expose your password to us in readable form.
• Shopping and service information such as cart and wishlist items, saved addresses, delivery PIN code, order items, selected product options, coupon usage, reviews, consultations, support tickets, notifications, and return-related information.
• Payment and checkout information such as amount, currency, payment method, order identifiers, payment status, and the verification metadata needed to confirm a Cashfree payment. We do not claim to store card numbers, CVV, UPI credentials, or bank passwords.
• Tool information such as paint-calculator values and room-visualizer selections. A room image selected for the visualizer is used for the in-session preview; the website uses a temporary browser object URL and does not upload that image through the visualizer.
• Technical and preference information needed to operate the service, including session state, language preferences, guest-cart state, browser/app information, and search or navigation activity. We have not identified an advertising, analytics, or crash-reporting SDK in the reviewed application paths.

How We Use Information

• To create and secure accounts, authenticate sign-ins, and provide account features.
• To process carts, orders, delivery serviceability checks, cancellations, returns, refunds, support requests, and customer communications.
• To provide product browsing, search, wishlist, notifications, paint tools, room-visualizer previews, and a consistent experience across the website and app.
• To prevent fraud, abuse, duplicate or suspicious orders, unauthorized access, and other security incidents; to resolve disputes; and to meet applicable legal or regulatory obligations.

Service Providers and Sharing

• Supabase hosts the application data and authentication services used for accounts, commerce, support, and related records.
• Cashfree processes online payment checkout. UniqueShopee receives the payment and verification metadata needed to confirm and fulfil an order.
• 2Factor is used by the website for phone OTP delivery and verification, including the deletion-specific phone verification flow, when that flow is used.
• Cloudinary is used for certain catalogue, category, brand, or banner images managed by authorised administrators. The reviewed customer room-visualizer flow does not upload room images to Cloudinary.
• We may share information with delivery, technology, communications, professional, legal, or regulatory parties when needed to provide the service, protect users, investigate misuse, resolve disputes, or comply with law. We do not sell personal information for advertising.

Android Permissions and Optional Features

• The Android app requests microphone permission only for speech-to-text product search. The resulting text is used as a search query; the reviewed app does not store a microphone recording.
• The reviewed Android manifest does not request location, contacts, SMS, or camera permission. Delivery PIN code is entered by the user rather than collected from device location.
• Choosing a room image for the visualizer is optional. Notifications, saved shopping information, and account features are used when you choose to use those features or create an account.

Retention and Security

We retain information for as long as reasonably needed to provide the service, maintain required business and transaction records, prevent fraud and abuse, resolve disputes, provide support, and meet legal or regulatory obligations. We use reasonable technical and organisational safeguards, but no internet service can guarantee absolute security.

Account Deletion and Retained Records

You can start deletion in the website or app account settings, or use our public account deletion page. Email/password accounts require current-password confirmation; phone accounts require a deletion-specific one-time code. When deletion completes, we remove addresses, cart items, wishlist items, notifications, paint calculations, room visualizations, profile roles, phone-auth credentials, and authenticated-user-scoped objects in the applicable users and room-visualizer storage locations.

• Order history, order items, reviews, support records, consultations, coupon usage, and certain verification records may be retained where necessary for legal, security, fraud prevention, dispute resolution, or regulatory purposes.
• Temporary account-deletion authentication challenges are removed as part of account deletion. Documents and support storage, together with required order history, snapshots, notes, and related records, may remain where needed for those purposes.
• Retained records are not used to maintain your deleted account. See the detailed process at /account-deletion.

Your Choices and Rights

• You can review or update available profile and address information through your account, and you can contact support about privacy questions or account requests.
• You may decline optional features such as speech search or the room visualizer, although doing so may limit those features.
• Depending on applicable law, you may have rights to request access, correction, deletion, or information about processing. We may need to verify your identity and may retain information where a lawful exception applies.