Rural Sathi Privacy Policy

Rural Sathi (the service published at ruralsathi.shop, also shown in the app as “Lyo ji”) is an online grocery and daily-essentials ordering and delivery platform for villages and small towns in India. Customers browse products, place orders, and receive them at their delivery address.

This Privacy Policy explains what personal information and device data we collect through our website and Android app, how we use it, when we share it, how long we keep it, and the choices you have. It applies to customers, delivery partners, selling partners, and staff who use the platform.

By using Rural Sathi you agree to this Privacy Policy. If you do not agree, please do not use the service.

We collect only the information needed to run the service. Depending on how you use Rural Sathi, this may include:

Information you give us

• Name
• Mobile number (with country code)
• Email address and account/login credentials (passwords are stored only in hashed form)
• Delivery address details — house/landmark, village or town, district, state and PIN code
• Order details, cart contents, wishlist items, product reviews and ratings you submit
• Messages you send to customer support, and information you submit in a job application (including a résumé file, if you upload one)
• Product photos and details, if you use the selling-partner panel

Information collected automatically

• Approximate or precise location (GPS) — only when you tap a location feature and grant permission (see “Location information”)
• Basic device and browser information, such as device/browser type and operating system
• IP address and server log data generated when your device connects to our hosting provider
• App and website usage and diagnostic information, such as pages or screens opened and technical error reports, used to keep the service working
• Cookies and similar local storage on the website (see “Cookies and tracking”)

We do not ask for and do not intentionally collect sensitive personal data such as health records, biometric data, government ID numbers, or full payment card numbers.

• Creating and managing your account and saved address
• Accepting, processing and confirming your orders
• Delivering products to you and letting our delivery partner reach your address
• Providing customer support and resolving complaints, refunds and disputes
• Processing payments through our payment provider, and recording payment status
• Showing order status and live order tracking
• Sending important service notifications about your order or account
• Operating the selling-partner, delivery-partner, employee and admin panels, including invoices and bills
• Improving the app and website, fixing bugs and understanding which features are used
• Security, fraud prevention, and enforcing our terms
• Meeting legal, tax and accounting obligations

We send promotional or marketing messages only where permitted by applicable law and/or with your consent, and you can ask us to stop at any time using the contact details below.

Location is optional. We request device location only when you choose a feature that needs it — for example “use my current location” while entering a delivery address, or when a delivery partner turns on live trip sharing while delivering an order.

• Customer location is used to help fill in and confirm your delivery address and to show your order on a map.
• Delivery-partner location is shared, while a delivery is in progress, so the customer can track the order.
• To convert coordinates into a readable address we send the coordinates to the OpenStreetMap Nominatim service.
• We do not track your location in the background when you are not using a location feature.

You can allow or block location access at any time in your device or browser settings. Blocking it still lets you use Rural Sathi — you can simply type your address instead.

Rural Sathi supports cash on delivery and online payment. Online payments are processed by Razorpay, a third-party payment provider. When you pay online, your card, UPI, wallet or bank details are entered in Razorpay’s checkout and are handled by Razorpay under its own privacy policy and terms.

We do not collect or store your full card number, CVV, UPI PIN or bank credentials. We receive and store only payment reference information such as the payment/order identifier, amount, method and success or failure status, which we need for order records, invoices and refunds.

The service relies on the following third parties. They receive only the data needed for their function.

• Lovable Cloud (Supabase) — database, authentication, file storage and hosting infrastructure for account, order and uploaded-file data.
• Google Sign-In — optional way to sign in with your Google account; Google shares your name and email address with us so we can create your account.
• Razorpay — online payment processing.
• OpenStreetMap / Nominatim — map display and converting coordinates into an address.
• India Post PIN code API (postalpincode.in) — looking up district, state and locality from the PIN code you type.
• AI provider used by our internal admin tools — aggregated, non-identifying business summaries (such as sales totals and product names) are sent to generate operational insights for staff. Customer contact details are not sent for this purpose.

We do not currently use third-party advertising networks, and we do not embed advertising or cross-app-tracking SDKs in the app.

We share personal information only in these situations:

• Delivery partners — your name, mobile number, delivery address and order contents, so the order can be delivered.
• Sellers/shops — order and item details needed to prepare and fulfil your order.
• Payment provider — the information required to process your payment or refund.
• Hosting, cloud and service providers — as listed above, to store and operate the platform on our behalf.
• Government, regulators or law enforcement — when we are legally required to disclose information, or to protect our rights, users and safety.
• Business transfer — if the service is merged, transferred or acquired, information may be transferred as part of that transaction, subject to this policy.

We do not sell your personal information, and we do not share it with third parties for their own advertising purposes.

We use reasonable technical and organisational measures to protect your information: HTTPS/TLS encryption in transit, hashed passwords, database row-level security policies that restrict each account to its own data, role-based access so that only authorised staff can view operational data, and access to admin, seller and delivery panels only after sign-in.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please keep your password confidential and tell us immediately if you suspect unauthorised access to your account.

We keep your information only as long as reasonably necessary: while your account is active, to complete and support your orders, to meet legal, tax and accounting obligations, to resolve disputes and process refunds, and to protect the security and integrity of the platform. When information is no longer needed for these purposes, we delete it or keep it in a de-identified form.

You can ask us to delete your account and associated personal data at any time. To request deletion:

1. Email yashsharmasharma614@gmail.com from the email address registered on your account, or call/WhatsApp +91 9602869872, with the subject “Account and data deletion request”.
2. Include the name, mobile number and email address on the account so we can verify the request.
3. We verify the request and complete deletion within 30 days, and confirm by email once it is done.

What is deleted: your profile (name, phone, email, saved address), wishlist, reviews and account credentials. What may be retained: order, invoice and payment records that we are required to keep for tax, accounting, fraud-prevention and legal purposes, retained for the period required by law and not used to contact you.

You can also update or correct your profile details yourself at any time on the Profile screen after signing in.

Request Account/Data Deletion

Rural Sathi is intended for adults who can enter into a binding contract, and is not directed at children. We do not knowingly collect personal information from children where this is prohibited by applicable law. If you believe a child has provided us personal information, contact us and we will delete it.

Our website and app use cookies and similar local storage only for essential purposes: keeping you signed in, remembering your cart, your saved delivery details and your chosen language. We do not use advertising cookies or cross-site tracking cookies. You can clear or block cookies in your browser settings, but some features — such as staying signed in — may then not work.

Subject to applicable law, you can:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Request deletion of your account and personal data
• Withdraw consent or turn off permissions such as location and notifications, in your device settings
• Opt out of promotional messages
• Raise a privacy complaint or question with us

To exercise any of these rights, contact us using the details below. We may ask you to verify your identity before acting on a request.

We may update this Privacy Policy from time to time to reflect changes in the service or in the law. The current version will always be published on this page with a revised “Last updated” date. Significant changes may also be announced in the app. Please review this page periodically.

For any privacy question, data request or complaint, contact Rural Sathi support (available 24×7):

• Email: yashsharmasharma614@gmail.com
• Phone / WhatsApp: +91 9602869872
• Website: https://ruralsathi.shop/
• Base of operations: Kuchera, Nagaur, Rajasthan, India