Privacy notice
What personal data Genius Inn collects, why, who we share it with, how long we keep it, and the rights you have under the Digital Personal Data Protection Act, 2023.
Who we are
Genius Inn (registered business name to be confirmed) (“Genius Inn”, “we”) operates this store and is the Data Fiduciary for the personal data described here. Registered office: Registered office address to be confirmed before launch.
What we collect
| Data | Examples | When |
|---|---|---|
| Account | Name, email, password (stored only as a secure hash), profile photo | When you sign up or edit your profile |
| Contact & delivery | Delivery addresses, mobile numbers, GSTIN for business invoices | When you save an address or check out |
| Orders & payments | Items, prices, invoices, payment status. Card and UPI details are handled by Razorpay; we never see or store them | When you buy |
| Returns | Reasons, photos, and for cash-on-delivery refunds your UPI ID or bank account (stored encrypted) | When you request a return |
| Reviews & questions | Ratings, text and photos you post | When you write them |
| Security | Sign-in history, device and browser, IP address, two-step verification settings | When you use your account |
| Preferences | Notification choices, alerts, consent decisions | When you set them |
Why we use it
- To create and secure your account, process orders, deliver them, handle returns and refunds, and issue GST invoices.
- To send order and security messages. These are part of the service and can’t be turned off.
- With your consent only: offers and recommendations, price and stock alerts, and optional analytics. You can withdraw consent any time in your account or cookie preferences, as easily as you gave it.
- To prevent fraud and abuse (for example rate limits, bot checks and cash-on-delivery risk checks).
- To meet legal obligations, such as keeping tax invoices and order records.
How long we keep it
- Account data: while your account is open. If you delete your account, we erase or anonymise it after a 30-day grace period.
- Orders and tax invoices: 8 years, as required by Indian GST law (with personal details kept to the minimum).
- Security logs: up to 1 year. Message delivery logs: 180 days.
Your rights
- Access: download a copy of your data from Account › Privacy.
- Correction: edit your profile, addresses and preferences at any time.
- Erasure: delete your account from Account › Privacy (30-day grace period, then erased).
- Withdraw consent: change notification choices or cookie preferences at any time.
- Grievance redressal: contact our Grievance Officer (below); you may also approach the Data Protection Board of India.
- Nominate: you may nominate someone to exercise these rights if you are unable to.
How we protect it
Encrypted connections everywhere, passwords stored with Argon2id hashing, optional two-step verification, encryption for refund bank details, strict access controls for our staff with two-step verification, and an audit trail of sensitive actions. If a breach affects you, we will tell you and the Data Protection Board as the law requires.
Children
Genius Inn is for adults (18+). We do not knowingly process data of children without verifiable parental consent.
Contact & grievances
Questions about privacy: support@ (to be confirmed). Grievance Officer: Grievance Officer (name and contact to be confirmed before launch).