What we hold
- Your name, email address and profile picture, as Google hands them over when you sign in.
- The delivery address and phone number you enter at checkout.
- Your orders: what you bought, what it cost, where it went and where it reached.
- What you write in public: reviews, photos on reviews, and questions under a print.
- What you write in private: messages to other buyers.
- One preference: whether you are open to being messaged by other shoppers.
What we never hold
- Card numbers, UPI PINs or bank passwords. Those go straight to the payment gateway and never touch our servers.
- Advertising cookies, pixels, fingerprinting or third-party analytics. There are none on this site.
- Anything we sell, rent or hand to a data broker. We do not do that, at any price.
Why we hold it
To get an order to you and back if it has to come back. To show that a review came from someone whose order was actually delivered, which is the only thing that makes a review worth reading. To keep the place safe when someone is reported. And to keep the books tax law requires us to keep.
Whose hands it passes through
- Supabase — stores the database and runs sign-in.
- Vercel — serves the website.
- Google — only to sign you in, and only what you approve on their screen.
- The payment gateway — takes the payment and tells us whether it worked.
- The courier — gets the address and phone number for that one delivery, and nothing else.
Each of them gets the least they need to do their part. None of them gets your data to use for themselves.
What happens to your messages
A conversation belongs to the two people in it. Nobody on the team can open one to read it. A single message becomes readable to us only when one of you reports it, and then only that message and the words around it.
Nobody can message you unless you turn on being reachable, and even then it arrives as a request you can refuse. Declining is quiet, and the other person is never told whether you also blocked them.
What other people can see
Reviews and questions show the name on your account and, if you have one, the verified buyer seal. Your email address, your address and your order history are never shown to another shopper.
How long it stays
Order records stay as long as Indian tax law requires us to keep our books. Everything else stays until you ask us to remove it. Deleting your account takes your profile, preferences and private messages with it; reviews and questions can stay with the name removed, so the answers under them still make sense to the next reader.
What you can ask for
Under India's Digital Personal Data Protection Act you can ask what we hold about you, ask us to correct it, ask us to delete it, take back a consent you gave, or name someone to act for you if you cannot.
Write to shop@aawaragi.com. We will answer, and we will not make you ask twice.
Age
Accounts are for adults. If you are under 18, shop with a parent's account rather than your own.
If this changes
The date at the top changes with it, and anything that materially affects you is sent to your email rather than quietly edited in.