1. Scope & Overview
This Privacy Policy explains how FREOZO (https://www.freozo.com), operating in India (INR ₹), collects, processes, stores, and protects information when you browse our catalog, create a customer or seller account, use location-based delivery checks, or place an order, in accordance with the Information Technology Act, 2000, SPDI Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act).
2. Information We Collect
- Customer Account & Authentication Data: Firebase User ID (
uid), full name, email address, mobile phone number, account role (customer,seller, oradmin), and optional profile avatar via Google Firebase Authentication (Email/Password, Google Sign-In, or Mobile OTP). Plaintext passwords are never stored in Cloud Firestore. - Shipping Address & Order Data: Recipient name, 10-digit mobile number, email, street/house address, landmark, city, state, 6-digit Indian PIN code, ordered items, variants, quantities, pricing, discounts, tax, payment method (
RazorpayorCOD), payment status, and shipment tracking details. - Shopping Cart, Wishlist & Reviews: Cart and wishlist items stored in browser
localStorageand synchronized to Cloud Firestore (carts/{userId},wishlists/{userId}) when signed in, plus customer product reviews/ratings. - Merchant / Seller KYC Data (Sellers Only): Store name, legal business name, contact details, pickup address, GSTIN, PAN, payout bank account/IFSC, and private KYC verification documents stored in restricted storage.
3. How We Use Your Information
We use your information to authenticate accounts, synchronize carts and wishlists across devices, fulfill and track orders, verify payments and refunds, check PIN code delivery serviceability, onboard and pay marketplace sellers, provide 24/7 customer support, and prevent fraud or unauthorized access.
4. Location Permissions & Reverse Geocoding
With your optional browser permission (navigator.geolocation.getCurrentPosition), FREOZO detects your coordinates and resolves your city, state, and 6-digit PIN code via OpenStreetMap Nominatim (nominatim.openstreetmap.org) or BigDataCloud (api.bigdatacloud.net), with IP fallback via ipwho.is. You may decline GPS access at any time and enter your PIN code manually.
5. Payments & Financial Security
Online payments are processed via Razorpay (checkout.razorpay.com — UPI, Cards, Net Banking, Wallets) alongside Cash on Delivery (COD). FREOZO never collects or stores raw card numbers, CVV/CVC codes, net banking passwords, or UPI PINs. We store and verify only razorpay_order_id, razorpay_payment_id, and HMAC-SHA256 razorpay_signature.
6. Firebase Storage, Browser Storage & Security Controls
Customer data is isolated per account in Google Cloud Firestore and Firebase Storage using role-based security rules, HTTPS encryption in transit, HMAC-SHA256 signed server tokens, and crypto.scryptSync password hashing for seller accounts. Browser localStorage stores cart, wishlist, session, and delivery PIN keys (cleared on sign-out).
7. Data Sharing, User Rights & Grievance Contact
We do not sell personal data. Information is shared only with Google Cloud/Firebase, Razorpay, fulfilling sellers/couriers, and geocoding APIs as needed to operate the store. To access, update, or request deletion of your account data, use your Profile page or contact our Grievance & Support Desk at iblackshoppingonline@gmail.com.