Effective date: August 3, 2026 Last updated: October 26, 2026
This Privacy Policy explains how PINIT LLP("Pinit," "we," "us," or "our") collects, uses, shares, and protects information when you use the Pinit mobile application (the "App"), our website at pinitsarees.com (the "Site"), and related services (together, the "Services").
By using the Services, you agree to this Privacy Policy. If you do not agree, do not use the Services.
1. Who we are (Data Controller)
The entity responsible for your personal data is:
- Legal entity: PINIT LLP
- Registered address: 4th Floor, 8-2-309/3/B/1 & 8-2-309/3/B/2, Road no.14 Banjara Hills, Hyderabad, Telangana 500034
Contact email: support@pinitsarees.com
2. Summary of key points
- What we collect: your name, mobile number and (optional) email, your delivery addresses, your saree orders and suitcase bookings, payment status (never your full card number), your wishlist, ratings and searches, support messages and photos you attach, device and usage data, and — only while you use the address picker — your location.
- Why: to provide the Services, process and deliver your orders and suitcase visits, secure your account, communicate with you, process payments (via Razorpay), and comply with law.
- Who we share with: our payment gateway Razorpay, our courier partner for shipped sarees, our riders and franchise partners for suitcase visits, service providers (hosting, SMS, email, push notifications, maps), and authorities where legally required. We do not sell personal information and we do not show third-party advertising.
- Your control: you can access, correct, export, and delete your data, including deleting your account and all associated data from within the App (Settings → Account → Delete Account) or at pinitsarees.com/account-deletion.
- Children: the Services are intended for users 18 and older; we do not knowingly collect data from children (under 18 in India under the DPDP Act).
3. Information we collect
3.1 Information you provide to us
| Category | Examples | Required? |
|---|---|---|
| Account data | Name, mobile number, email address (optional), profile photo and gender (optional) | Mobile number is required to create an account |
| Authentication data | A one-time password (OTP) sent by SMS to your mobile number; the device you signed in from and its app version | Required to sign in |
| Addresses | Delivery addresses you save, including the map location when you pick one on the map | Required for a delivery or a suitcase visit |
| Order & booking data | Products ordered or selected; order history; Suitcase Mode booking details (chosen date/time slot, delivery address, deposit and visit records); recipient name and phone number; and (for refunds that cannot go back to the original payment method) bank/UPI details you provide | Required to place, schedule, and fulfill an order or booking |
| Payment data | Payments are processed by our gateway Razorpay and the methods it supports (card, UPI, net banking, wallets). Razorpay handles card/instrument data under PCI-DSS and RBI rules; we receive transaction status and limited details, not your full card number. | Required to pay for an order |
| Wishlist, ratings & searches | Sarees you wishlist or ask to be notified about, ratings and reviews you leave, searches you run in the App | Created as you use the App |
| Support data | Messages, attachments, and contact details you send to support | Optional |
| Survey/feedback data | Responses you choose to submit | Optional |
3.2 Information collected automatically
| Category | Examples |
|---|---|
| Device data | Device model, OS version, language, time zone, app version, unique device/installation identifiers |
| Usage data | Features used, screens viewed, searches, session length, crash logs and diagnostics |
| Log & network data | IP address, access times, browser type (Site), error reports |
| Cookies & similar tech (Site) | See Section 9 |
| Approximate location | Derived from IP address |
3.3 Information collected with your permission (device permissions)
We request the following only when you use the related feature, and only after the operating system prompts you:
| Permission | Why we use it | Can you decline? |
|---|---|---|
| Camera | To photograph a saree for a return or refund request or a support ticket, and to set a profile photo | Yes — you can attach photos from your library instead |
| Photo library | To attach existing photos to a return, refund or support request, or as a profile photo | Yes |
| Location (only while using the App) | To place your delivery address on the map and check whether we deliver there. We never collect location in the background. | Yes — type the address and PIN code instead |
| Push notifications | Order, booking and rider updates, payment confirmations, support replies and offers | Yes — you may miss time-sensitive updates |
3.4 Information from third parties
We may receive data about you from: our payment gateway (transaction status), our courier partner (shipment status), and our riders and franchise partners (delivery and visit records).
3.5 Sensitive information
We do not intentionally collect special-category or sensitive data: Biometric Data, Protected Health Information (PHI), Sensitive Demographics, Financial and Identity Info, Background/Continuous Location, Communications and Contacts. We do not use it for purposes other than those disclosed here, and we obtain consent where required by law.
4. How we use your information
We use personal data to:
- Create and manage your account and authenticate you.
- Provide core features (saree orders, suitcase bookings and doorstep visits).
- Personalize the sarees, collections and offers you see.
- Process payments, booking deposits and refunds.
- Send transactional messages (e.g., security alerts, receipts) and—with your consent where required—marketing.
- Maintain safety, prevent fraud and abuse, and enforce our Terms.
- Analyze and improve the Services, fix bugs, and develop new features.
- Comply with legal obligations and respond to lawful requests.
Legal bases (GDPR/UK GDPR)
Where the EU/UK GDPR applies, we rely on: performance of a contract (providing the Services), consent (e.g., marketing, certain permissions, non-essential cookies), legitimate interests (e.g., security, analytics, improvement), and legal obligation. You may withdraw consent at any time without affecting prior processing.
5. How we share information
We share personal data with:
- Service providers / processors who act on our behalf: cloud hosting and file storage, SMS, email and push delivery, maps, payment processing, customer-support tooling.
- Delivery partners: our courier partner for shipped sarees, and our riders and franchise partners for suitcase visits — they receive your name, delivery address, phone number and the order or visit details needed to serve you.
- Third-party SDK and platform partners listed in Section 6.
- Other customers, only for ratings or reviews you choose to publish.
- Authorities and third parties when required by law, to enforce our Terms, or to protect rights, safety, and security.
- In a business transfer (merger, acquisition, financing, or sale of assets), subject to this Policy.
- With your consent, for any other purpose disclosed at the time.
Sale / "sharing" of personal information: We do not sell or "share" as defined by the CCPA/CPRA personal information.
6. Third-party services and SDKs
The Services use these third-party services, which may process your data:
| Provider | Purpose | Data involved | Privacy policy |
|---|---|---|---|
| Razorpay | Payment processing (orders, booking deposits, doorstep payments, refunds) | Payment instrument data (handled by Razorpay), transaction details, contact info | razorpay.com/privacy |
| Delhivery | Courier delivery of shipped saree orders | Recipient name, address, phone, order details | delhivery.com/privacy-policy |
| Firebase (Google) | Push notifications | Push token, device/installation ID, app version | policies.google.com/privacy |
| Google Maps Platform | Address search and map pin for delivery addresses | Address text, map coordinates | policies.google.com/privacy |
| MSG91 | SMS (login OTP, order and booking alerts) | Mobile number, message content | msg91.com/privacy-policy |
| SendGrid (Twilio) | Transactional email (receipts, invoices, account notices) | Email address, message content | twilio.com/legal/privacy |
| Amazon Web Services | Hosting and storage of uploaded photos and files | Stored account, order and support data; uploaded images | aws.amazon.com/privacy |
7. Advertising and analytics
We do not show third-party advertising in the App or on the Site, and we do not engage in cross-app or cross-site tracking. Usage and crash data are used only to understand how the App is used and to fix problems.
Apple App Tracking Transparency (ATT): On iOS, if we (or our partners) track you across apps and websites owned by other companies, we will request your permission through Apple's ATT prompt first, and we will honor your choice. If you decline, we will not track you.
You can also limit ad tracking via your device settings (iOS: Settings → Privacy & Security → Tracking; Android: Settings → Privacy → Ads).
8. Data retention
We keep personal data only as long as necessary for the purposes described, then delete or anonymize it.
| Data | Retention |
|---|---|
| Account & profile | Until you delete your account, then deleted within 30 days |
| User content | Until you delete it or your account |
| Transaction/payment records | 7 years for tax, accounting, and legal compliance |
| Support tickets | 24 months |
| Logs & diagnostics | 90 days |
| Backups | Purged on a rolling 30–90 day cycle |
Where retention is legally required (e.g., financial records, fraud prevention), we retain the minimum necessary even after account deletion and inform you here.
9. Cookies and similar technologies (Site)
Our Site uses cookies and similar technologies for: strictly necessary functions, preferences, analytics, and (where applicable) advertising. Where required, we request consent through a cookie banner and provide granular controls. You can manage cookies via the banner and your browser settings.
10. Data security
We use administrative, technical, and physical safeguards including encryption in transit (TLS), encryption at rest, access controls, least-privilege, logging, regular reviews. No method of transmission or storage is 100% secure; we cannot guarantee absolute security. If a breach affecting your data occurs, we will notify you and regulators as required by law.
11. Your privacy rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you and obtain a copy.
- Correct inaccurate or incomplete data.
- Delete your data ("right to erasure").
- Port your data to another service.
- Restrict or object to certain processing.
- Withdraw consent at any time.
- Opt out of the sale/sharing of personal information and of targeted advertising.
- Non-discrimination for exercising your rights.
- Lodge a complaint with a supervisory authority (EU/UK) or your local regulator.
How to exercise your rights: Use in-App controls (Settings → Account / Privacy) or contact us at support@pinitsarees.com. We will verify your identity and respond within the time required by law (generally 30–45 days). You may use an authorized agent where permitted.
Region-specific notices
- EU/UK (GDPR): See legal bases (Section 4), international transfers (Section 13), and your right to complain to a supervisory authority.
- California (CCPA/CPRA): You have the rights to know, delete, correct, and opt out of sale/sharing and of certain targeted advertising; and to limit use of sensitive personal information. We do not sell or share personal information.
- India (Digital Personal Data Protection Act, 2023): We process your personal data based on your consent or other lawful grounds. You have the right to access and correct your data, to withdraw consent, to nominate another person to exercise your rights, and to grievance redressal. To exercise these rights or raise a concern, contact our Grievance Officer (Section 19). We will respond within the timelines required by law. Processing of data of persons under 18 requires verifiable parental/guardian consent, and we do not direct the Services to children.
- Other U.S. states (e.g., Virginia, Colorado, Connecticut, Texas): Similar rights apply; contact us to exercise them.
12. Account and data deletion
You can delete your account and associated personal data at any time:
- In the App: Settings → Account → Delete Account. This permanently deletes your profile, content, and associated personal data, except data we must retain by law (see Section 8).
- On the web / by request: Visit pinitsarees.com/account-deletion or email support@pinitsarees.com with the subject "Delete my account."
We complete deletion within 30 days.
13. International data transfers
We may process and store data in India. We use appropriate safeguards such as Standard Contractual Clauses, the EU-U.S./UK/Swiss Data Privacy Framework (if certified), or adequacy decisions.
14. Children's privacy
The Services are intended for users 18 years and older and are not directed to children. We do not knowingly collect personal data from anyone under 18. Under India's DPDP Act, 2023, processing a child's data requires verifiable consent of a parent or lawful guardian. If you believe someone under 18 has provided us data, contact support@pinitsarees.com and we will delete it.
15. Marketing communications
With your consent where required, we may send promotional messages. You can opt out anytime via the unsubscribe link or in-App notification settings. Transactional messages (security, billing) are not optional while you have an account.
16. Automated decision-making
We compute a customer reliability score from your booking, order and dispute history (for example, cancellations after a rider has already set out, or complaints found to be without merit). It is used to decide which offers you are eligible for and to flag an account for review after confirmed fraud; it never blocks an order, booking or refund by itself. You can ask for a human review of any decision that affects you by writing to support@pinitsarees.com.
17. Third-party links
The Services may link to third-party sites or services we do not control. Their privacy practices are governed by their own policies.
18. Changes to this Privacy Policy
We may update this Policy. We will post the new version with a revised "Last updated" date and, for material changes, provide additional notice (e.g., in-App or email). Continued use after changes means you accept the updated Policy.
19. Contact us
- Email: support@pinitsarees.com
- Support: support@pinitsarees.com / +91 9177708629
- Grievance Officer (India — DPDP Act & IT Rules): support@pinitsarees.com, +91 9177708629
- Address: PINIT LLP, 4th Floor, 8-2-309/3/B/1 & 8-2-309/3/B/2, Road no.14 Banjara Hills, Hyderabad, Telangana 500034