Privacy Policy
Last updated 16 September 2026
Shopfront is operated by VAMSHIAIG LLP (LLPIN ADA-3636), registered at No. 010301, Shriram Chirping Woods, HSR Layout, Bangalore South, Bangalore – 560102, Karnataka, India. In this policy “we”, “us” and “our” mean VAMSHIAIG LLP. It covers both sides of the service — the shop owner, who has an account, and the shopper, who does not. It sits under our company privacy policy, and where it is more specific, this one governs.
We never see your payment details. Shoppers pay shops directly — by UPI into the shop's own account, or cash on delivery. No card, bank or UPI PIN information is ever entered into, transmitted by, or stored in Shopfront.
Section 1 — What we collect
If you run a shop, we collect the account and shop details you give us: your email address and a securely hashed password (we never see your password), and your shop's name, description, opening hours, contact numbers, address, catalogue, prices and photos — most of which is deliberately public, because it is your storefront. If you set your shop's location so customers can get directions, we store it; setting it is optional.
If you place an order, you do not need an account. The shop needs enough to fulfil it, so we collect your name and phone number, a delivery address and pincode if you choose delivery, what you ordered and what it cost, a delivery location only if you tap to share it, and a review only if you choose to leave one. This information goes to the shop you ordered from — it is theirs to act on, and we hold it on their behalf.
When anyone browses the service, our hosting provider automatically receives standard technical information such as your IP address and browser type, used only to operate and secure the service. There are no advertising or analytics trackers in this app.
Section 2 — Consent
When you provide information to create an account, set up a shop, or place an order, you consent to our collecting and using it for that specific purpose. If we ever want to use it for a secondary reason, such as emailing shop owners about the service, we will ask you directly or give you a clear way to decline. You may withdraw consent, or ask us to stop contacting you, at any time by writing to us at the address below.
Section 3 — Disclosure
We do not sell your information, and we do not use it for advertising. We share what an order requires with the shop you ordered from, and — only where a shop has enabled live delivery — with the courier handling that delivery. Beyond that, we disclose personal information only if the law requires it, or if it is necessary to enforce our Terms of use.
Section 4 — Payment
Orders for goods are paid directly to the shop — UPI or cash on delivery — so no payment for goods ever passes through us. The one payment we collect is the optional Pro subscription for shop owners, processed by Razorpay. Neither we nor Razorpay store your card data on our servers; card details are encrypted to the Payment Card Industry Data Security Standard (PCI-DSS) during processing and are used only as long as is necessary to complete the transaction. Razorpay adheres to PCI-DSS as managed by the PCI Security Standards Council. For more detail, see razorpay.com.
Section 5 — Third-party services
The services that run Shopfront process your information only to the extent needed to provide their service to us:
- Supabase — the database, sign-in, and photo storage.
- Google Firebase Cloud Messaging — delivers notifications to your device.
- Google Cloud Run — sends those notifications and, where a shop uses live delivery tracking, talks to the courier.
- Vercel — hosts the website.
- Razorpay — processes the Pro subscription only.
Some of these providers have their own privacy policies and may operate in a different jurisdiction than you or us; we recommend reading them. Once you follow a link that takes you off our service, you are no longer governed by this policy.
Section 6 — Security
Everything travels over HTTPS. The database refuses access by default and every shop's data is scoped to its owner. We follow industry best practice to protect your information from loss, misuse, and unauthorised access. No system is perfect, and we would rather say that than claim otherwise.
Section 7 — Cookies and device storage
We use a cookie to keep you signed in and to remember your language, and the app stores a random identifier in your device's own storage so it can show you your recent orders without asking you to sign in. That identifier is not linked to your name or to any advertising profile, and clearing the app's data removes it. If you turn on notifications, we store the notification token your device issues against that same identifier, so an alert about your order reaches the right device; turning notifications off in your system settings stops them.
Section 8 — Age
This service is for people running or buying from a business. It is not directed at children, and we do not knowingly collect information from them. By using it you confirm you are of the age of majority in your place of residence, or have the consent of a parent or guardian.
Section 9 — Changes to this policy
We may modify this policy from time to time; if we do, the date at the top changes with it. Material changes will be signposted in the app rather than made quietly. If VAMSHIAIG LLP is acquired or merged, your information may transfer to the new owner so the service can continue.
Questions and contact
To access, correct, or delete any personal information we hold about you, to raise a complaint, or for anything else: contact@vamshiaig.com. VAMSHIAIG LLP (LLPIN ADA-3636), No. 010301, Shriram Chirping Woods, HSR Layout, Bangalore South, Bangalore – 560102, Karnataka, India, is the entity responsible for the information described here. See also deleting your account.
← Back