Privacy Policy

Welcome to Kapda Pasal ("the App"). This application is owned by Kapda Pasal and operated by Infiloop ("we", "our", or "us"). We are committed to protecting your privacy and ensuring the security of the personal information you entrust to us.

This Privacy Policy explains how we collect, use, store, share, and protect your information when you use our multi-vendor clothing e-commerce mobile application ("the App").

1. Information We Collect

To facilitate your shopping experience and provide our multi-vendor marketplace services, we collect the following types of information:

A. Account Information

• First Name, Last Name, Email Address, and Phone Number.
• Login credentials (email and password, encrypted at rest).

B. Profile Information

• Gender, Date of Birth, Height, Clothing Size (S, M, L, XL, 2XL, 3XL, 4XL+), and Shoe Size (EU).
• Fashion interests and preferences.

C. Delivery Address Information

• Address labels (e.g., "Home", "Office"), formatted addresses, and GPS coordinates (latitude/longitude).
• Contact name and contact phone number for delivery.
• Default address preference.

D. Order and Transaction Information

• Order details including products, quantities, prices, and order status.
• Payment method and payment status information.
• Delivery addresses and contact information.
• Order history, returns, and refunds.

E. Device and Location Information

• Device UUID, Device Name, Device Model/Brand, Operating System version, and Timezone.
• Device location (city/country level) when you use the map location picker for delivery addresses.

F. Communications and Feedback

• Product Q&A messages exchanged with vendors.
• Bug reports (category, description, steps to reproduce, screenshots, and device information).
• Feature requests (title, description, and optional images).
• App feedback (star ratings, tag selections, and comments).
• Product reviews and ratings.

G. Wishlist and Following Data

• Products added to your wishlist.
• Vendors you follow.

H. Usage and Preference Data

• App feature usage patterns and preferences.
• Search history and browsing patterns.
• Notification preferences for order updates, promotions, and account activities.

2. How We Use Your Information

We use the collected information for the following core purposes:

• Account Management: Creating and managing your account, authenticating your identity, and providing secure login options.
• Order Processing: Processing your orders, managing payments, coordinating delivery, and providing order status updates.
• Delivery Services: Using your location data to provide accurate delivery addresses and coordinate with delivery partners.
• Vendor Communication: Facilitating Q&A messages between you and vendors for product inquiries.
• Personalization: Providing personalized product recommendations based on your interests and preferences.
• Communications: Sending push notifications for order updates, delivery status, promotions, and account updates based on your preferences.
• Support and Improvement: Responding to support inquiries, processing bug reports and feature requests, analyzing usage patterns to improve the App.
• Security: Detecting fraudulent activity, protecting user accounts, and ensuring platform integrity.
• Loyalty Program: Managing your loyalty points and rewards.

3. Location Data

Our App includes a map location picker feature that helps you select precise delivery addresses. When you use this feature:

• Your device's GPS location is accessed to show your current position on the map.
• You can manually select or search for a location on the map.
• The selected coordinates (latitude/longitude) are stored along with your delivery address.
• Location data is used solely for delivery purposes and is shared with vendors and delivery partners only for order fulfillment.

Location Permission: The App will request location access only when you use the map location picker feature. You can revoke this permission at any time from your device settings.

4. Data Storage, Security, and Protection

Your privacy is our priority. We employ industry-standard measures to ensure security:

• Encryption in Transit: All communications between the App and our backend servers are encrypted using Secure Socket Layer (SSL/TLS) technology.
• Encryption at Rest: Sensitive tokens and authentication credentials are stored using secure encrypted local storage (flutter_secure_storage).
• Server Security: Your data is stored on secure servers with restricted access limited to authorized personnel.
• Data Retention: We retain your account data for as long as your account is active. Upon account deletion, your personal data is permanently removed from our servers after a brief grace period.
• Offline Data: The App caches certain data locally (product images, catalog data) for offline functionality. This data is stored in encrypted local databases.

5. Third-Party Services

We use the following third-party services in our App. Each service has its own privacy policy governing data handling:

• Firebase (Google): Used for push notifications via Firebase Cloud Messaging (FCM). FCM tokens are collected to deliver notifications to your device.
• ConnectIPS: Used for payment processing. Payment transactions are processed through a secure payment gateway. We do not store your banking or credit card information on our servers.
• Sentry: Used for error tracking and crash reporting. Device information and error stack traces are collected to diagnose and fix application issues.
• Google Maps: Used for the map location picker feature to help you select delivery addresses.

6. Data Sharing and Third-Party Disclosure

We do not sell, trade, or rent your personal information to third parties. We only share information with:

• Vendors: Order details, delivery addresses, and contact information are shared with vendors to fulfill your orders.
• Delivery Partners: Delivery addresses and contact information are shared with delivery partners to complete deliveries.
• Payment Processors: Transaction information is shared with ConnectIPS for payment processing.
• Service Providers: Trusted third-party vendors who assist us in operating the App (cloud hosting, error monitoring, push notifications), subject to contractual obligations to protect your data.
• Legal Compliance: Government authorities and law enforcement when required by applicable law or to protect our legal rights.

7. Your Rights and Choices

You retain full control over your personal data:

• Access & Correction: You can access, review, and update your profile information directly in the App under the Profile section.
• Notification Preferences: You can customize which push notifications you receive in the App's notification settings.
• Account Deletion: You may request the permanent deletion of your account and all associated data from our servers at any time through the Account Deletion option in your Profile, or by contacting our support team at info@infiloop.co.
• Data Portability: You can request a copy of your personal data by contacting us.
• Order History: You can view your complete order history and download order details from the App.

8. Children's Privacy

Our App is not intended for use by children under the age of 13. We do not knowingly collect personal data from anyone under 13 years of age. If we learn that we have collected personal information from a child under 13, we will delete that information immediately. If you believe a child under 13 has provided us with personal data, please contact us.

9. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page, updating the "Last Updated" date, and sending a notification through the App. We encourage you to review this policy periodically.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us at:

Infiloop
Kathmandu, Bagmati, Nepal
Email: info@infiloop.co
Website: infiloop.co