Privacy Policy

1. Information we collect

• Account details — your name, email address, and (optionally) phone number when you create an account.
• Order & delivery details — items ordered, delivery address, phone number, notes, and the UPI payment reference number you enter at checkout.
• Messages you send us — enquiries and custom-order requests made via WhatsApp or our forms.
• Device & usage data — basic technical information (e.g. browser type) and small items stored in your browser (your shopping cart and login session).
• Anonymous site analytics — we use Cloudflare Web Analytics to count visits and measure page speed (Core Web Vitals). It is cookieless: it does not set cookies, does not use local storage to track you, and does not build profiles or track you across websites.
• Error reports — if something breaks in your browser or on our servers, technical details of the error (such as the page, browser, and device type) are sent to our error-monitoring service, Sentry, so we can fix it.
• Admin app (shop owner only) — the owner’s login credentials and a device push-notification token used to send order alerts to the owner’s phone.

We do not collect or store your card, bank account, or UPI PIN. UPI payments are completed in your own payment app; we only record the reference number you provide so we can match your payment.

2. How we use your information

• To process, verify, pack, and deliver your orders.
• To contact you about your order (by email, phone, or WhatsApp) and send receipts and updates.
• To respond to your enquiries and custom-order requests.
• To operate, secure, and improve our website and services.
• To send the shop owner notifications about new orders, payments, stock, and customer requests.

3. Service providers we use

We share the minimum information necessary with trusted providers who process it on our behalf:

• Supabase — database, account authentication, and storage of product images and payment receipts. Your data is held in a Supabase database hosted in Tokyo, Japan.
• Cloudflare — website hosting, a secure connection (proxy) between your browser and our database, and cookieless Web Analytics.
• Vercel — hosting for the admin panel.
• Resend — sending order/receipt emails.
• Sentry — error monitoring (see “Error reports” above).
• Google Firebase (Cloud Messaging) — delivering push notifications to the owner’s device.
• WhatsApp (Meta) — when you choose to message us there.

We do not sell your personal information to anyone.

4. Push notifications

The Artistha Admin app (used by the shop owner) registers a device token to receive push notifications about store activity. Notifications can be turned off at any time in the device’s system settings.

5. Data retention & security

We keep your information only as long as needed to fulfil orders and meet legal or accounting requirements, then delete or anonymise it. Access to order and business data is restricted to the shop owner through database access controls. No method of transmission or storage is 100% secure, but we take reasonable steps to protect your information.

6. Your rights

You may request access to, correction of, or deletion of your personal information, and you may close your account at any time. To make a request, contact us using the details below.

7. Children

Our services are intended for adults. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will remove it.

8. Changes to this policy

We may update this policy from time to time. Changes take effect when posted on this page, and we will update the “Last updated” date above.

9. Contact us

Questions about this policy or your data? Reach us at artisthabysri@gmail.com or on WhatsApp.
Artistha by Srihitha · Hyderabad, Telangana, India.