Privacy Policy

Effective Date: October 2026

1. Information We Collect

• Personally Identifiable Information (PII): Name, phone number (used for WhatsApp OTPs), email address, and profile picture/avatar.
• Location Data: Precise delivery addresses, PIN codes, and real-time device GPS coordinates (latitude/longitude) collected exclusively in the foreground while the app is actively open to enable local quote matching and delivery routing. We do not track or collect background location data when the app is closed.
• Transaction & Activity Data: Details about items you wishlist, custom "Wishes" you broadcast (including descriptions, reference images, and budgets), "Quotes" you receive, and your complete Order history (including delivery instructions and statuses).
• Device & Usage Data: Firebase Cloud Messaging (FCM) tokens for push notifications, IP addresses, notification preferences, and privacy preferences.
• For Sellers: Payout methods, registered bank account / UPI identifiers, business tax identifiers, and FSSAI License details. Uploaded certificate documents are used solely for authenticity and validity verification, after which temporary document copies are permanently deleted from cloud storage once verified.

2. How We Use Your Information

We use your data to process orders, facilitate the "Wish & Quote" matchmaking system, manage your Loyalty Points, provide customer support, and protect account security.

Specifically regarding the Wish & Quote System:
When you post a custom "Wish," details such as the product description and budget are shared with relevant sellers in your area. Your identity and exact address are kept hidden from sellers during the quoting phase. Only when you explicitly accept a "Quote" and proceed to place an "Order" are your delivery details and phone number revealed to that specific seller to fulfill the delivery.

3. Data Sharing

• With Sellers: Your delivery address and phone number are shared solely with the specific Seller upon order confirmation to enable delivery.
• With Service Providers: Data is shared with secure payment gateways and payout processors, cloud notification infrastructure, and customer communication services.
• Payment Security: We do NOT store full credit card details, debit card numbers, or CVVs.
• Legal Obligations: We may disclose details where required by law, valid court warrants, or regulatory orders under applicable Indian statutes.

4. System Logs & Safety

We record system actions, IP addresses, support messages, and call requests (including preferred time slots and outcomes) for quality assurance, safety, and fraud prevention.

5. Age Eligibility (Protection of Minors)

Wishified is strictly intended for users aged 18 and older. We do not knowingly collect, track, or process personal data of minors. If we identify that personal data of an individual under 18 has been submitted without verifiable parental consent, that data will be deleted immediately.

6. Your Rights (DPDP Act 2023)

Under the Digital Personal Data Protection (DPDP) Act 2023 and applicable privacy laws, you have the right to:

• Access & Summary: Request a summary of your personal data processed by us and the third parties with whom it has been shared.
• Correction & Erasure: Request the correction of outdated personal data or the erasure of data no longer required for transaction processing.
• Withdraw Consent: Withdraw consent for data processing at any time via profile settings or support (withdrawing consent may restrict your ability to broadcast wishes or place orders).
• Right to Nominate: Nominate another representative to exercise your data rights in the event of death or incapacity.
• Grievance Redressal: Seek immediate redressal of data concerns through our designated Grievance Officer.

7. User Account Deletion & Data Erasure

You have the right to request the deletion of your Wishified account and erasure of your associated personal data at any time:

Support Request & Deletion Channels:

• In-App Account Deletion: Use the Delete Account option under Account Actions on your Profile page. Enter your reason for deletion and submit the request. This will create an official platform support ticket for administrator review, which you can track anytime under My support requests in Help and support.
• Submit a request on our web portal at https://wishified.com/delete-account.
• Send an account deletion request directly to support@wishified.com from your registered email address or by stating your registered mobile phone number with the subject line "Account Deletion Request".

Deletion Process & Data Retention:

• Admin Review & Verification: To safeguard user accounts and ensure transaction finality, account deletion requests are reviewed and verified by platform administrators.
• Active Orders Condition: For security and buyer protection, accounts with ongoing, active, or disputed orders cannot be deleted until all orders are fulfilled, cancelled, or resolved.
• Data Removal: Upon admin approval and verification, your profile details, personal identifiers, saved delivery addresses, device push tokens, and draft wishes will be permanently deleted or anonymized from our active databases within 30 days.
• Statutory Retention Requirements: Completed financial transaction receipts, invoice records, and fraud-prevention audit logs will be securely retained for the minimum statutory period mandated by applicable taxation, GST, and Indian commercial regulations before permanent disposal.

8. Security Safeguards & Updates

We maintain administrative, technical, and physical safeguards—including SSL/TLS encryption for network data transit and restricted role-based internal access—to protect your personal data. Any material changes to this policy will be announced via an in-app banner or push notification before taking effect.

9. Grievance Officer & Support Contact

If you have questions, concerns, or grievances regarding your privacy, account data, or wish to exercise your data rights, please contact our Grievance Desk:

© 2026 WISHIFIED LLP. All rights reserved.