BoutiqoPrivacy Policy
Boutiqo ("Boutiqo", "we", "us") is an order book for boutiques and tailors. This policy explains what information we handle when you use the Boutiqo website at boutiqoo.netlify.app or the Boutiqo Android app (together, the "Service"), why, and the choices you have.
1. Who this policy covers
- Boutique owners who create a Boutiqo account. For your own account details, Boutiqo decides how that information is used.
- Customers of a boutique, whose details a boutique records in Boutiqo. The boutique decides what to record and why. Boutiqo stores and processes it only on the boutique's behalf, to provide the Service. If you are a boutique's customer, contact that boutique first about your information.
2. Information we collect
Account information (boutique owners). Your name, email address and password (stored only in hashed form by our authentication provider) or, if you choose Google sign-in, the name, email address and profile picture Google shares with us. Also your boutique name, area, category, phone number and GST number (if you provide them), your boutique logo, and the date you accepted these policies.
Information boutiques record about their customers. Customer name, phone number, address and Instagram handle; garment orders, including garment type, cloth description, style notes, tailor name, due date, order stage and amounts (total, advance, paid); body measurements entered for an order; and photos of cloth uploaded for an order.
Technical information. A session cookie that keeps you signed in, and standard server logs (such as IP address, browser type and request time) kept by our hosting providers for security and troubleshooting. We do not use advertising cookies, third-party analytics or tracking pixels.
3. Google user data
If you sign in with Google, we request only the basic sign-in scopes (openid, email, profile). We use your Google name, email address and profile picture solely to create and identify your Boutiqo account and let you sign in. We do not access your Gmail, contacts, Drive or any other Google data. We do not sell Google user data, use it for advertising, or transfer it to anyone except as needed to provide sign-in (see section 6).
Boutiqo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
4. How we use information
- To provide the Service: create accounts, store and show orders, customers, measurements and photos, and generate order codes and tracking links.
- To keep the Service secure: authenticate users, keep each boutique's data separate from every other boutique's, and prevent abuse.
- To support you and send essential service messages (for example about your account or changes to these policies).
- To meet legal obligations.
We do not sell personal information, and we do not use boutique or customer data for advertising.
5. Customer tracking links
A boutique can share a private tracking link with its customer, for example on WhatsApp. Anyone who has that link can see that order's status, due date, amounts, cloth photo and the boutique's name, without logging in. Links are long, random and hard to guess, but please share them only with the intended customer.
6. Service providers
We use trusted providers to run the Service. They process information only on our instructions:
- Supabase: database and user authentication. Data is hosted in Supabase's Seoul, South Korea region.
- Cloudflare R2: storage for cloth photos and boutique logos.
- Netlify: hosting for the website.
- Google: optional sign-in.
Because of this, your information may be stored and processed outside India. We may also disclose information if required by law, or to protect the rights, safety or security of users or the Service.
7. Security
All traffic is encrypted with HTTPS. Database access is enforced server-side with row-level security, so each boutique can only reach its own records. Photos are stored privately and shown only through short-lived signed links. No system is perfectly secure, but we work to protect your information and will act promptly on any incident.
8. Retention and deletion
We keep account and boutique data for as long as the account is active. A boutique owner can ask us to delete their account. We will then delete the boutique's data, including its customers, orders, measurements and photos, except where we must keep certain records by law. Server logs are kept only for a limited period by our hosting providers.
9. Your rights
Subject to applicable law, including India's Digital Personal Data Protection Act, 2023, you may ask to access, correct or delete your personal information, withdraw consent, or raise a grievance. Boutique owners can edit most information directly in the app. Customers of a boutique should contact the boutique, and may also contact us at help.boutiqo@gmail.com.
10. Android app
The Boutiqo Android app displays this same website and follows this policy. It requests only internet and network-status access. When you add a cloth photo, Android's own picker or camera app lets you choose or take the photo; the app itself has no camera, storage, contacts or location permission.
11. Children
The Service is meant for businesses and is not directed at children. Boutique owner accounts are for people aged 18 or over.
12. Changes to this policy
We may update this policy as the Service changes. We will change the "Last updated" date above and, for significant changes, notify boutique owners in the app or by email.
13. Contact
For privacy questions, requests or grievances, contact us at help.boutiqo@gmail.com. See also our Terms & Conditions.