Privacy Policy
Last updated: 8 November 2026
Local Bazaar (brandwall.space) is run by BrandWall, a Udyam-registered business. Full business details are on our Contact page ("Local Bazaar", "we", "us"). This policy explains what information we collect, why, who sees it, and the choices you have. It is written to meet India's Digital Personal Data Protection Act, 2023 and the IT Rules.
1. What we collect
| Account | Your email address and name. If you sign in with Google, Google shares your name, email and profile picture with us. If you use a password, it is stored scrambled (hashed). |
| Mobile and WhatsApp | Your mobile number if you add, link or verify it, and whether it is verified. For owners, up to 3 staff numbers and names you add. |
| WhatsApp messages | Messages you send to Local Bazaar's WhatsApp number (for example "Hi", offers you post, or button replies to orders), and the messages we send you. |
| Orders | When you order from a shop: the items, quantities, delivery address and map pin, your name and phone number, the order status and any 👍/👎 rating. Saved delivery addresses are kept so you do not have to type them again; you can delete them. |
| Shop content | Your shop's name, photos, hours, menu, offers, prices, price history, posters, coupons and map location. These are public on Local Bazaar. |
| Shop checks | Proof that a shop is yours (such as a photo at the shop and a business document), used only to check ownership. To move a shop, your precise location at the door and photos of the name board, which are read automatically and not saved. |
| Payments | Amounts, dates, what was bought and payment IDs, and the mobile number used for the payment. Card, UPI and bank details are handled by Cashfree and never reach us. |
| Your location (optional) | Only if you tap "Share your location", to show shops near you. It stays on your device and is not saved on our servers, except when you choose to save a delivery address or set or move a shop's location. |
| Usage | A random code stored in your browser to count visits, shop views, offer views and link clicks, which owners see as totals in Stats. We do not store your IP address with it. |
| Analytics (with your consent) | If you tap Accept on the cookie notice, Google Analytics collects pages visited, device type, approximate city and how you found us. |
| Reports and requests | If you report a shop, the reason and a scrambled code of your network, so one person cannot report many times. If you send a promotion request, your message and mobile number. |
2. Why we use it
- To run your account and show shops, offers, posters and coupons.
- To send your order to the shop and send order updates to you.
- To link and verify mobile numbers, and to let owners and their staff post offers by WhatsApp.
- To process payments, plans and promotion, and to set right payment problems.
- To check that a shop belongs to the person claiming it, and to approve name and location changes.
- To keep Local Bazaar safe: checking pictures, handling reports and stopping misuse.
- To send account emails such as sign-in codes.
- To understand how Local Bazaar is used and improve it.
- To meet legal duties such as tax and accounting records.
3. What shops and other users see
- When you place an order, the shop gets your name, phone number, delivery address and the items, so it can deliver and contact you. The shop's own use of these details is the shop's responsibility.
- Owners see totals of views, visitors, offer views and ratings for their shop, not who viewed it.
- Everything on a shop's page is public.
4. Service providers
We do not sell your personal data. We share only what is needed with these providers:
- Supabase: database, accounts and server functions (servers in Mumbai, India).
- Meta (WhatsApp Business Platform): sending and receiving WhatsApp messages.
- Cashfree: payments.
- Google: sign-in with Google, maps, Cloud Vision (checking pictures and reading shop name boards) and, only with your consent, Analytics.
- OpenStreetMap and other public map data: the details of shops Local Bazaar lists.
- Resend and Zoho: sending and receiving email.
- Netlify: hosting the website.
Some of these providers may process data outside India. We may also share information if the law requires it.
5. Cookies and storage
The site stores small items in your browser to keep you signed in and remember your choices, such as your theme, recent shops and order drafts. Analytics cookies are used only if you tap Accept, and you can change your mind by clearing your browser data for brandwall.space.
6. How long we keep it
- Account, shop and saved address data: while your account is open.
- Orders and WhatsApp message records: up to 2 years, so orders and disputes can be checked.
- Shop ownership proof: only as long as needed for the check and any question about it.
- Payment records: as long as Indian tax law requires, usually 8 years.
- Visit counts and reports: up to 2 years.
7. Your rights
You can ask to see, correct or delete your personal data, withdraw consent, unlink your mobile number, or name someone to act for you. Email anyhelp@brandwall.space. We reply within 30 days. Some records, such as payments, must be kept by law even after an account is deleted. Details you already gave a shop with an order are held by that shop too.
8. Security
All connections use HTTPS. Passwords are stored scrambled. Database rules stop users from reading or changing each other's private data. No system is perfectly secure, so please keep your sign-in safe.
9. Children
Local Bazaar is meant for adults and businesses. If you are under 18, please use it only with a parent's or guardian's permission.
10. Grievance officer
S. G., Grievance Officer, Local Bazaar (business details on our Contact page). Email: anyhelp@brandwall.space. We acknowledge complaints within 48 hours and aim to resolve them within 15 days.
11. Changes
We may update this policy as Local Bazaar changes. The date at the top shows the latest version.