Privacy Policy
This policy explains what personal data SWAPTRONICS PRIVATE LIMITED (“Swaptronics”, “we”, “us”) collects when you use our website or app, why we collect it, who we share it with, and what rights you have. It is written to meet our obligations under the Digital Personal Data Protection Act, 2023 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
1. Data we collect
| Data | When | Why |
|---|---|---|
| Mobile phone number | When you sign in | We use phone number and a one-time password as our only sign-in method. It identifies your account and is how we contact you about an order. |
| Name | At checkout, or when you edit your profile | To address the order and the delivery. |
| Delivery address | At checkout | To deliver your order. Your most recent address is saved to your profile so you do not have to retype it. |
| Order history | When you place an order | To show you your orders, handle returns and warranty claims, and meet tax and accounting obligations. |
| Configuration requests | When you ask us to find a device for you | To look for a matching device and contact you about it. |
| Refund bank or UPI details | Only if a refund is due to you | To send the refund to an account in your name. Used for that refund only. |
What we deliberately do not collect
We do not collect or store card, UPI or bank details. Online payments are processed by our payment partner, Razorpay: you enter your payment details on Razorpay's secure checkout, and we receive only a payment reference and whether the payment succeeded. For cash-on-delivery orders we ask for bank or UPI details only when we owe you a refund, and use them only to make that refund.
We do not collect your location, contacts, photos, or the contents of your device.
2. How we use your data
- To create and secure your account, and to verify it is you signing in.
- To process, deliver and support your orders.
- To arrange pickup of a device for an approved warranty claim.
- To detect and prevent fraud and abuse of the service.
- To meet legal, tax and regulatory obligations.
We do not sell your personal data. We do not use it for advertising or profiling, and we do not share it with data brokers.
3. Who we share it with
We share the minimum necessary with a small number of processors who act on our instructions:
| Processor | What they receive | Purpose |
|---|---|---|
| Google Firebase | Account, profile, order and enquiry records | Authentication, database and application hosting. |
| Razorpay Software Private Limited | Order amount, order reference, your phone number, and the payment details you enter on their checkout | To process online payments and refunds. |
| Delivery partner | Order amount, order reference, contact details | To deliver your order and, if you chose cash on delivery, collect the payment. |
| Logistics partners | Name, delivery address, phone number | To deliver your order, or collect a device for a warranty claim. |
We may also disclose data where required by law, court order, or a lawful request from a government authority.
4. Where your data is stored
Our database and application servers are hosted in Google Cloud's Mumbai (asia-south1) region. Some processors may handle limited data outside India in the course of providing their service; where they do, we require contractual safeguards for its protection.
5. How long we keep it
- Account data — while your account is active, and for a reasonable period after closure to handle disputes.
- Order and payment records — retained as long as required under Indian tax and accounting law, which is currently eight years from the end of the relevant financial year.
- Enquiries that do not become orders — deleted or anonymised within 24 months.
6. Your rights
Under the Digital Personal Data Protection Act, 2023 you have the right to:
- ask what personal data we hold about you and how it is processed;
- have inaccurate or incomplete data corrected, or have it updated;
- have your data erased, where we are not required to retain it by law;
- nominate another person to exercise these rights if you die or become incapacitated;
- withdraw consent, which you can do at any time by asking us to close your account;
- raise a grievance with us, and escalate to the Data Protection Board of India if you are not satisfied with our response.
To exercise any of these, email contact@swaptronics.net. We will respond within 30 days. We may ask you to verify your identity first, to make sure we are not disclosing your data to someone else.
Deleting your Swaptronics account
You can ask us to delete your account in either of these ways:
- in the Swaptronics app: Profile → Delete account → Request deletion; or
- without the app: email contact@swaptronics.net from any address, with the subject “Delete my account” and the mobile number you sign in with.
We then delete your account: your sign-in, name, email address and saved addresses. You don't need to do anything else; we may call or message that number to let you know when it's done. Order and payment records are kept for as long as Indian tax and accounting law requires (see section 5), and for any open warranty claim.
7. Security
We use the following measures, among others:
- All traffic between you and us is encrypted in transit using HTTPS.
- Sign-in is by one-time password to your phone; we do not store passwords.
- Order amounts are calculated on our servers from our own price list, never accepted from the browser or app.
- Access to production data is restricted to those who need it.
No system is completely secure. If a personal data breach occurs that is likely to affect you, we will notify you and the Data Protection Board of India as required by law.
8. Cookies and similar technologies
This website uses only what is necessary to make it work. Our app stores a sign-in token on your device so you are not asked to log in repeatedly, and may store your most recent order locally so it is not lost if the payment page reloads. We do not use advertising or cross-site tracking cookies.
9. Children
Our service is not directed at anyone under 18. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
10. Changes to this policy
If we change this policy we will update the date at the top of this page. Where the change materially affects your rights, we will notify you in the app or by message.
11. Grievance Officer
In accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000, the contact for grievances is:
We acknowledge grievances within 24 hours and aim to resolve them within 15 days.