1. Overview & Scope

Welcome to Muses Mart ("the App", "we", "us", or "our"), owned and operated by Muses Infotech. Muses Mart is a hyperlocal shopping application that connects consumers with local neighborhood stores, merchants, and retailers. Through our platform, users can browse product catalogs, place orders for groceries, essentials, and retail goods, schedule delivery or pickup, and monitor order status in real time.

This Privacy Policy applies to all users of the Muses Mart mobile application available on the Google Play Store (Package: com.musesinfotech.musesmart.consumer). By installing, registering, or using our App, you consent to the data practices described in this policy.

2. Data Controller Information

The entity responsible for your personal data is:

• Organization: Muses Infotech
• Domain / Portal: https://musesmart.musesinfotech.com
• Support Email: support@musesinfotech.com
• Jurisdiction: India

3. Information We Collect

We collect only the minimum personal data necessary to provide seamless, secure shopping and delivery services.

A. Information You Provide Directly

• Contact & Account Data: Mobile phone number (used for secure one-time password / OTP authentication), your name, and optional email address.
• Delivery Addresses: House/flat number, apartment/society name, street address, landmark, postal code (PIN code), city, and state.
• Customer Support & Dispute Data: Communication history, text descriptions, and optional photo attachments submitted when reporting order issues or raising support inquiries.

B. Information Collected Automatically

• Device & Network Information: Device model, operating system version, unique device identifiers, IP address, carrier network, and application version.
• Usage & Log Telemetry: API response metrics, error logs, crash reports, and interaction timestamps used to maintain app stability and troubleshoot bugs.

C. Sensitive Information We Explicitly DO NOT Collect

We do not collect sensitive demographic attributes, biometric identifiers, health or medical records, financial account passwords, or credit card numbers.

4. Device Permissions Requested

In accordance with Google Play Developer Policies, here is an explicit breakdown of the permissions requested by the Muses Mart Consumer application, why they are needed, and how they are used:

5. How We Use Collected Data

We process your data strictly under lawful legal bases (contract performance, legitimate interests, and legal compliance) for the following purposes:

1. Order Processing & Fulfillment: Communicating your order list, item customizations, and delivery address to the chosen merchant store so they can pack and dispatch your goods.
2. Authentication & Account Security: Sending one-time verification codes (OTPs) via SMS to verify phone numbers and prevent fraudulent account access.
3. Live Order Tracking & Delivery Navigation: Displaying delivery progress and enabling merchants or delivery agents to reach your address accurately.
4. Customer Care & Dispute Resolution: Reviewing and resolving complaints regarding damaged items, missing products, cancellations, or refunds.
5. Platform Performance & Bug Fixing: Analyzing anonymized error telemetry to optimize app speed, eliminate crashes, and enhance user experience.

6. Financial & Payment Safety

Muses Mart supports secure digital payments (UPI, Net Banking, Credit/Debit Cards, Wallets) as well as Pay on Delivery.

• Payment Gateway: All online payments are handled securely by Razorpay Software Private Limited, an RBI-authorized Payment Aggregator and PCI-DSS Level 1 certified entity.
• No Storage of Card Details: When you pay online, your card numbers, CVVs, and banking credentials are entered directly into Razorpay's encrypted checkout iframe. Muses Mart servers NEVER collect, view, or store your card numbers or CVV.
• We only receive an encrypted payment transaction token, transaction status (Success / Failed), and an order reference ID to confirm order placement.

7. Third-Party Sharing & Service Providers

We do NOT sell, rent, or trade your personal information to third-party data brokers or marketing agencies. We share data only with verified partners necessary to execute our core services:

8. Data Storage, Security & Encryption

We enforce strict technical and organizational safeguards to protect your personal information against unauthorized access, loss, or misuse:

• Encryption in Transit: All data exchanged between the Muses Mart mobile app and our servers is encrypted using modern TLS 1.3 / HTTPS cryptographic protocols.
• Access Control: Backend databases are isolated within private server subnets with role-based access control (RBAC), and authentication tokens are signed with cryptographic JSON Web Tokens (JWT).
• Audit & Monitoring: Regular security assessments, automated anomaly detection, and secure error logging without recording plain-text credentials.

9. Account Deletion & Data Rights (Google Play Policy Compliance)

In full compliance with Google Play's User Data and Account Deletion Policy, Muses Mart provides simple, direct mechanisms for users to delete their account and associated data.

How to Request Account Deletion

You can delete your account using either of the following two methods:

1. In-App Self-Service Deletion:
   • Open the Muses Mart app on your Android device.
   • Navigate to Account / Profile > Settings > Request Account Deletion.
   • Confirm your request. Your account credentials, profile details, and stored addresses will be queued for immediate deactivation.
2. Online Web Deletion Portal:

   You can request instant, permanent account and data erasure directly via our web portal: https://musesmart.musesinfotech.com/delete-account.html.

3. Direct Email Request:
   • Send an email to: support@musesinfotech.com with the subject line "Request for Account Deletion - Muses Mart Consumer".
   • Our verification team will confirm your ownership and complete permanent data purging within 24 to 48 hours.

Data Retention vs. Permanent Purge

• Permanently Deleted: Profile name, phone number, email address, password hashes, device tokens, and saved delivery addresses are permanently wiped from active databases.
• Statutory Retentions: Past financial transaction records, tax invoices, and payment receipts are retained for a statutory period required under applicable Indian taxation, GST, and commercial accounting regulations, after which they are securely scrubbed.

10. Children's Privacy

Muses Mart is intended solely for general commercial audiences and is not directed at children under the age of 13. We do not knowingly solicit or collect personal information from minors. If we discover that a child under 13 has registered or provided personal data, we will immediately delete such data and terminate the account upon notice.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our legal obligations, features, or technological capabilities. When updates are published, the "Last Updated" date at the top of this document will be revised. For significant changes affecting your rights, we may provide prominent in-app notification or SMS alert.

12. Contact Information & Grievance Redressal

If you have any questions, concerns, or requests regarding this Privacy Policy or wish to exercise your data privacy rights, please contact our designated Grievance Officer: