Local shops & courier — delivered in minutes by EV partners. Try now →

Privacy Policy

Last updated: March 29, 2026

Looking for plain English?

We've also created a Data Protection page that explains our privacy practices in simple language.

1. Company Information

NeighbourCart ("we", "our", "us") is a hyperlocal delivery platform based in Hyderabad, Telangana, India. We connect customers with neighbourhood shops and delivery drivers for ordering and delivery.

Company Name: NeighbourCart

Registered Office: Hyderabad, Telangana, India

Contact: privacy@neighbourcart.in

Grievance Officer: grievance@neighbourcart.in

2. Core Principle: How We Handle Payment Data

Critical Information:

NeighbourCart does not hold, store, or transfer funds. All online order payments are processed by Cashfree, a licensed third-party payment gateway, and settled directly to the merchant's bank account (minus applicable platform commission). We never have access to or control over the funds.

What we store: Transaction metadata only — payment status (success/failed), transaction reference IDs, order amount, and timestamps. This allows us to update order statuses and provide payment confirmations.

What we never store: Bank account numbers, card numbers, UPI IDs, CVV codes, net banking credentials, or any sensitive payment credentials. These are handled exclusively by Cashfree.

3. Data We Collect

3.1 Account Information

  • Phone number (required for authentication via OTP)
  • Name (provided during signup)
  • Email address (optional, for notifications)
  • Role (CUSTOMER, MERCHANT, or DRIVER)

3.2 Location Data

  • Customer delivery addresses (saved for convenient reordering)
  • Merchant shop location (address and GPS coordinates for discoverability)
  • Driver live location (during active deliveries only, for order tracking)

3.3 Shop and Product Information (Merchants)

  • Shop name, address, and operating hours
  • Product catalogue — item names, descriptions, prices, and photos
  • FSSAI licence number (if applicable)
  • Bank account details for settlements (stored securely by Cashfree)

3.4 Order and Delivery Records

  • Order items, quantities, and amounts
  • Order status changes and timestamps
  • Delivery address and delivery timestamps
  • Online payment transaction metadata (status, reference IDs, amount, timestamp)

3.5 KYC Information (Merchants and Drivers)

  • Aadhaar or PAN details (verified through Digio)
  • Driving licence (for drivers)
  • Vehicle registration details (for drivers)
  • KYC verification status and timestamps

3.6 Order History

We retain order history for all user roles to enable reordering, dispute resolution, earnings tracking, and analytics:

  • Customers: Past orders for easy reordering and tracking
  • Merchants: Order history for sales tracking and reconciliation
  • Drivers: Delivery history for earnings tracking

4. Data We DO NOT Collect or Store

For all payments:

We never collect, store, or have access to:

  • Bank account numbers or IFSC codes
  • Credit/debit card numbers, expiry dates, or CVV codes
  • UPI IDs or payment wallet credentials
  • Net banking usernames or passwords

All sensitive payment credentials are handled exclusively by Cashfree Payments. These credentials are never transmitted to or stored on NeighbourCart servers.

5. Third-Party Services

We use the following third-party services to operate our platform:

  • Google Cloud Platform (GCP): Hosting and infrastructure. Data is stored on GCP servers. Subject to Google Cloud Privacy Policy.
  • Cashfree Payments: Processes all online order payments and merchant settlements. PCI DSS and RBI compliant. Subject to Cashfree Privacy Policy.
  • WhatsApp Business API: Used to send order updates, delivery notifications, and promotional messages. Only phone numbers and message content are shared with WhatsApp for delivery.
  • Digio: Used for KYC verification of merchants and drivers. Aadhaar/PAN details are verified through Digio's secure platform. Subject to Digio Privacy Policy.

6. Cookies and Local Storage

We use minimal browser storage to operate the platform:

  • Authentication token: Stored in localStorage to keep you signed in between visits. Removed when you log out.
  • User preferences: Stored in localStorage for settings like delivery address, language, and dismissed UI elements.

We do not use third-party tracking cookies or advertising cookies. We do not use Google Analytics or similar analytics services at this time.

7. Legal Basis for Processing (DPDP Act 2023)

Under India's Digital Personal Data Protection Act, 2023, we process your data on the following grounds:

  • Consent: You provide consent when you sign up and use the platform. You may withdraw consent at any time by deleting your account.
  • Legitimate Use: To fulfil orders, process payments, enable deliveries, and provide our core services.
  • Legal Obligation: Tax, regulatory (FSSAI, RBI), and financial compliance requirements.
  • Voluntary Provision: For optional features like marketing communications (opt-in only).

8. Data Retention

  • Active accounts: Retained while your account is active
  • Deleted accounts: Permanently deleted within 30 days of account deletion
  • Product photos: Deleted when the product listing is removed or the account is deleted
  • Payment transaction metadata: Retained for 7 years (financial compliance under Indian tax law)
  • KYC records: Retained as per RBI and applicable regulatory requirements
  • Audit logs: Retained for 7 years (legal compliance)

9. Your Rights Under DPDP Act 2023

Under India's Digital Personal Data Protection Act, 2023, you have the following rights:

Right to Access

Request a summary of your personal data and how it is being processed. We will respond within 30 days.

Right to Correction

Correct inaccurate or incomplete data via your profile settings or by contacting us.

Right to Erasure

Request deletion of your data. Delete your account from Profile settings, or email us. Data will be erased except where retention is required by law.

Right to Nomination

Nominate another person to exercise your data rights in the event of your death or incapacity.

Right to Grievance Redressal

Raise complaints about data processing. We will address grievances within 30 days. If unsatisfied, you may approach the Data Protection Board of India.

To exercise your rights: privacy@neighbourcart.in. We will respond within 30 days.

10. Grievance Redressal

In accordance with the DPDP Act 2023 and the Information Technology Act 2000, we have appointed a Grievance Officer:

Grievance Officer Email: grievance@neighbourcart.in

Response Time: Within 30 days of receiving the grievance

If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India as established under the DPDP Act 2023.

11. Data Storage and Transfers

NeighbourCart is based in Hyderabad, India. Your data may be processed in the following locations:

  • Google Cloud Platform: Data is hosted on GCP infrastructure (region as per our hosting configuration)
  • Cashfree Payments: Payment data is processed within India by an RBI-compliant payment processor
  • Digio: KYC verification data is processed within India

We ensure that any cross-border data transfers comply with the provisions of the DPDP Act 2023. Data will not be transferred to countries restricted by the Central Government under the DPDP Act.

12. Contact Us

Privacy: privacy@neighbourcart.in

Grievance Officer: grievance@neighbourcart.in

General Support: support@neighbourcart.in

Address: NeighbourCart, Hyderabad, Telangana, India