Privacy policy

1. What we collect

To create your account and fulfil an order, we collect: your name, phone number and email address; delivery addresses and, for gift orders, the recipient's name, phone number and address; order and payment history (not full card/UPI details — those are handled directly by our payment gateway, Razorpay); and messages you send us for support. We also collect basic device/usage information (pages viewed, approximate location from your pincode, and similar analytics events) to keep the site working and improve it.

2. How we use it

We use your information to take and fulfil orders, verify sign-in by one-time code, provide delivery tracking and proof of delivery, respond to support requests, send transactional messages about your orders (confirmations, delivery updates, payment/refund notices — these are not optional, since they're how we tell you what's happening with something you paid for), and, only with your consent, send marketing messages, which you can withdraw at any time from your account or by replying "stop" to any marketing message.

3. Who we share it with

We do not sell your personal data. We share the minimum necessary information with: our payment gateway (Razorpay), to process payments and refunds; our delivery riders and hub staff, to complete the delivery you ordered; and our SMS/WhatsApp/email providers, solely to deliver the messages described above. Each of these partners is contractually restricted to using your data only to provide that service to us. Government authorities may be given information where required by law.

4. Where it's stored

Your data is stored on servers located in India. Backups and processing by the partners named above may occur through their own India-based infrastructure.

5. How long we keep it

We keep account and order records for as long as your account is active and for a reasonable period afterward to meet our tax, accounting and dispute-handling obligations under Indian law. Records inside our audit ledger (which tracks who did what and when, for security and fraud prevention) are kept indefinitely and cannot be altered, including by us — see "Your rights" below for what this means for a deletion request.

6. Your rights

Under the Digital Personal Data Protection Act, 2023 and applicable Indian law, you can ask us to: confirm what personal data we hold about you and provide a copy; correct inaccurate data; and withdraw consent for marketing communications at any time (this does not affect transactional messages needed to deliver an order you've placed, or our own legal recordkeeping obligations). To exercise any of these, write to support@dailyflowersai.com with your registered phone number. Where a request cannot be fully honoured — for example, erasing an order record referenced by our tamper-proof audit ledger, or by an invoice we're required to retain for tax purposes — we will tell you what we can and cannot do and why.

7. Grievance Officer

If you have a complaint about how we've handled your personal data, our Grievance Officer can be reached at support@dailyflowersai.com and will acknowledge your complaint and respond within the timelines required by applicable Indian law.

8. Cookies and similar technology

We use strictly necessary cookies to keep you signed in and your cart working, and basic first-party analytics to understand how the site is used. We do not use third-party advertising trackers.

9. Changes to this policy

We may update this policy from time to time; the effective date above shows when it last changed.