Privacy Policy

Jewel Manas ("we", "us", or "the Platform") is committed to protecting the privacy and personal data of all users — B2C customers, registered vendors, retailers, and visitors. This Privacy Policy describes how we collect, use, store, share, and protect your information when you access our website, mobile application, or any services offered under the Jewel Manas brand.

By accessing or registering on the Jewel Manas platform, you consent to the collection and processing of your personal data as described in this policy. If you do not agree, please discontinue use of our services immediately.

Identity Data: Full legal name, business entity name, GST-registered trade name, registered office address, and official contact details (email and mobile number).

KYC & Compliance Data: PAN Card number, GSTIN certificate, Aadhaar (for individual sellers), bank account details (account holder name, account number, IFSC code), manufacturing licenses, and shop registration documents — collected for account verification and Cashfree payout account setup.

Transaction Data: Order IDs, product SKUs, purchase amounts, GST breakdowns, commission amounts, payout records, refund transactions, and settlement histories.

Usage & Behavioral Data: Catalog browsing patterns, product search queries, wishlist activity, session duration, device type, operating system, browser type, IP address, and referring URLs.

Communication Data: Support tickets, chat transcripts, email correspondence, and grievance submissions submitted through our contact systems.

Account Management: To verify your identity during KYC, create and manage your vendor/retailer/customer account, and communicate platform updates or policy changes.

Order Processing & Fulfillment: To process orders, coordinate logistics, generate GST-compliant invoices, and communicate order status via email and SMS.

Financial Settlements: To register your bank account as a Cashfree beneficiary and process automated weekly payouts upon order delivery confirmation.

Commission Administration: To compute, assign, and deduct applicable commission rates from each sale in accordance with the agreed commission master.

Platform Improvement: To analyze anonymized behavioral data for improving catalog discovery, pricing accuracy, and overall user experience.

Legal Compliance: To comply with applicable Indian laws, including IT Act 2000, DPDP Act 2023, GST regulations, and FEMA guidelines for financial transactions.

We do not sell, rent, or trade your personal or corporate information to third-party marketing agencies under any circumstances.

Logistics Partners: Your delivery address, mobile number, and order details are shared with our specialist insured courier partners solely for order fulfillment.

Payment Infrastructure: Bank account details and transaction data are shared with Cashfree Payments to facilitate automated payouts and payment processing. Cashfree is PCI-DSS Level 1 certified.

Regulatory Authorities: We may disclose data to GSTN, Income Tax authorities, RBI, FEMA enforcement bodies, or law enforcement agencies when required by applicable law or court order.

Platform Analytics: Aggregated, anonymized usage data may be shared with analytics service providers to improve platform performance. No personally identifiable information is included in these reports.

Customer account data is retained for a minimum of 3 years from the last transaction date, as required by GST and Income Tax regulations for audit purposes.

KYC documents and bank details are retained as long as your account remains active, and for 5 years after account closure, as mandated by financial compliance obligations.

Order and transaction records are retained for 7 years in accordance with standard accounting and GST return requirements.

You may request deletion of non-mandatory personal data by writing to privacy@jewelmanas.com. Mandatory data required for tax and legal compliance will be retained regardless of deletion requests.

All data transmitted between your device and our servers is encrypted using industry-standard TLS 1.3 (256-bit SSL) protocols.

Authentication tokens (JWTs) are stored exclusively in HTTP-Only, Secure, Same-Site cookies — never in browser localStorage — to prevent XSS-based session hijacking.

Passwords are hashed using bcrypt with per-user salts before storage. We never store plain-text passwords at any point.

Our infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and regular security audits.

Payment credentials are processed through Cashfree's PCI-DSS certified secure vault. We do not store card numbers, CVV codes, or UPI credentials on our servers.

Access: You have the right to request a copy of all personal data we hold about you.

Correction: You may update incorrect personal information directly through your account settings or by emailing privacy@jewelmanas.com.

Deletion: You may request deletion of non-mandatory data. Note that data required for legal, tax, and financial compliance cannot be deleted before the statutory retention period.

Opt-Out of Marketing: You can unsubscribe from promotional emails at any time using the unsubscribe link in any marketing email or by contacting us directly.

To exercise any of these rights, email: privacy@jewelmanas.com with the subject "Data Rights Request" from your registered email address.

We may update this Privacy Policy from time to time to reflect changes in applicable law, our data practices, or technology. Changes will be posted on this page with a "Last Updated" date.

If changes are material (e.g., new data sharing with third parties), we will notify registered users via email at least 14 days before the change takes effect.

Continued use of the platform after a policy update constitutes acceptance of the revised terms.