Privacy Policy

Last updated: 6 August 2026

SmartBuyX ("we", "us") operates an e-commerce and construction-services marketplace at smartbuyx.in. This policy explains what data we collect, why, and how you can control it.

1. Information we collect

• Account details: name, email, phone number, date of birth (optional).
• Delivery addresses and, for Build-pillar services, project/RFQ details you submit.
• Order, payment, and return history. We do not store your card details — payments are processed by Razorpay, a PCI-DSS compliant processor, and we only receive a payment reference and status.
• Communications with our AI shopping assistant and support tools.
• Usage data (pages viewed, searches) to power recommendations and fraud detection.

2. How we use it

• To fulfil orders, process returns/refunds, and run the platform (wallet, notifications, RFQs, consultations).
• To power AI features you opt into: product recommendations, shopping assistant, listing generation for sellers.
• To detect fraud and abuse — we compute a buyer risk score from behavioural signals (return rate, cancellations) to decide return eligibility. This never affects your credit or is shared outside SmartBuyX.
• To send order and account notifications via email, SMS, push, or WhatsApp — only channels you enable in Settings → Notifications.

3. Data access and security

Your data is stored with Supabase (PostgreSQL) with row-level security enforced on every table — other users, and even most of our own systems, cannot query your data directly. Only authorised service roles (order fulfilment, fraud review, support) can access what's needed for their function.

4. Sharing with sellers and service providers

When you place an order or request a consultation, the relevant seller, supplier, or professional (architect/engineer/contractor) receives what's needed to fulfil it: your name, delivery address, and order details. We do not sell your data to third parties.

5. Your rights

• View and edit your profile, addresses, and preferences any time in Settings.
• Control notification channels and AI recommendation preferences.
• Request account deletion by contacting support — we retain order records as required by Indian tax law (typically 8 years) even after account deletion.

6. Contact

Questions about this policy: privacy@smartbuyx.in