🌿 PurePulp← Back to home

Privacy Policy

Last updated: 16 May 2026

This Privacy Policy describes how PurePulp (“we”, “us”) collects, uses, and shares information about you when you use our website and services.

1. Information we collect

  • Account data: name, email, mobile number, and password (hashed).
  • Delivery data: shipping address, recipient name, and phone for harvest delivery.
  • Order data: trees adopted, products bought, payment status, GST invoice.
  • Communications: messages you send us via email, phone, or WhatsApp.
  • Technical data: browser type, device, and IP — used only for security and to prevent abuse.

2. How we use it

  • To fulfil tree adoptions and ship harvest produce.
  • To send order confirmations, growth updates, and harvest schedules.
  • To comply with tax (GST), accounting, and legal obligations.
  • To detect fraud and prevent abuse.

3. Who we share it with

We share only the minimum data needed with the partners that operate the service:

  • Razorpay — payment processing (no card data ever reaches our servers).
  • Supabase — secure database hosting in India / Singapore region.
  • Resend / SendGrid — transactional email delivery.
  • Shiprocket / Delhivery — last-mile shipping (delivery name, address, phone).

We do not sell, rent, or share your data with advertisers.

4. How long we keep it

Account and order data is retained while you have an active account plus seven years thereafter (Indian tax law requires retention of invoice records). You may request deletion of all personal data at any time — see Section 6.

5. Cookies and similar tech

We use cookies only for essential functionality: keeping you logged in (Supabase session cookie) and remembering your cart (localStorage). We do not use third-party advertising or tracking cookies.

6. Your rights

You can at any time:

  • Access a copy of all data we hold about you.
  • Correct inaccurate data.
  • Request permanent deletion of your account.
  • Opt out of non-essential email and SMS communications.

Write to privacy@mypurepulp.in and we’ll respond within 14 days.

7. Security

Data is encrypted in transit (TLS) and at rest. Passwords are hashed with industry-standard algorithms. Access to production data is restricted to the founding team.

8. Changes to this policy

Material changes will be notified by email at least 14 days before they take effect. Minor changes (typos, clarifications) will be reflected here without prior notice.

9. Children

PurePulp is not directed at children under 18. We do not knowingly collect personal information from minors. If you believe a child has provided us information, write to privacy@mypurepulp.in and we will delete it.

10. Data Protection Officer (DPO) and Grievance Officer

In accordance with India’s Digital Personal Data Protection Act, 2023:

We respond to all grievances within 30 days as required by law. If you are not satisfied with our response, you may approach the Data Protection Board of India.

11. Contact

General privacy questions: privacy@mypurepulp.in