Privacy Policy
Last updated: 2 November 2026
This Privacy Policy explains how Pixelbrahma Design Studio Private Limited ("SmolGoodi", "we", "our"), which operates smolgoodi.in, order.smolgoodi.in and the SmolGoodi apps for Android and iPhone (together the "Platform"), collects, uses, shares, keeps and deletes your information. We process personal data under applicable Indian law, including the Digital Personal Data Protection Act, 2023.
SmolGoodi has two kinds of users: sellers, who run a shop in the app, and buyers, who order from a seller's link in their browser. One phone number is one account; it can do both.
1. Information we collect
- Account & contact details: your phone number (verified by a one-time code sent by SMS) and your name. Sellers also give a business name, the owner's name and, optionally, the flat/building and delivery area of the shop. We collect an email address only when your sign-in or a payment provider supplies one.
- Buyer delivery details: the name, phone number and tower/flat you type at checkout, so the seller can deliver.
- Order information: items ordered, amounts, delivery notes, and order and payment status. For an online payment we show the seller the payment reference, the method and a masked identifier (for example the last digits of a card or a partial UPI ID). We also store the full payment record Razorpay sends us, which is not masked and can include the payer's phone number, email address, UPI ID and card details such as the network and last digits.
- Seller payment details: your UPI ID, if you save one, which sits on your public seller record where anyone can read it (checkout does not offer it to buyers yet); and — if you connect your own Razorpay account — your Razorpay key ID, key secret and webhook secret. The key secret is stored encrypted and used only to create payment requests for your orders. We do not collect your PAN or bank account details.
- Photos and files: product photos, gallery and profile images, template layers and AI-generated images a seller creates; and payment screenshots a seller uploads to match a payment to an order. A payment screenshot can show the payer's name, phone number or transaction reference.
- Messages a seller chooses to parse: a WhatsApp order message or a chat screenshot a seller pastes or uploads so the app can turn it into an order draft.
- Usage, device and diagnostic data: which screens and checkout steps are used, crash reports with stack traces, device model, operating system and app version, the push-notification token for your device, and an app-installation identifier. On the web, Google Analytics uses cookies or similar browser storage. Our apps do not use the Advertising ID, and we do not track you across other companies' apps or websites.
- Reports and blocks: a report you send (the shop, your reason and note, and your account id if you are signed in); a shop you block; a number a seller blocks. To limit misuse we keep a scrambled (hashed) form of your account id or IP address for two days. We also flag shop text that contains a word on our filter list.
- Public seller content: the business name, logo, bio, listings, catalog items and UPI ID a seller publishes are visible to anyone who has that seller's link.
2. How we use your information
- To create and operate your account and to process orders.
- To generate payment requests (UPI or payment-gateway) so buyers can pay sellers directly, and to help both parties track order and payment status.
- To read, at a seller's request, a WhatsApp message, chat screenshot or payment screenshot and turn it into an order draft or a payment match (see "AI processing" below).
- To send push notifications a seller has turned on (for example, a new order), and the one-time code that signs you in.
- To show a seller summaries of their own customers and sales, such as regular customers and best-selling items.
- To review reports and act on them, which can include removing content or suspending a shop.
- To provide support, send service updates, and prevent fraud or abuse.
- To improve the Platform's reliability and features.
3. Who processes your data for us
These companies receive data so the Platform can run. We send each one only what its part needs, and each handles that data under its own terms. We do not sell your personal data.
- Google (Firebase and Google Cloud): sign-in by phone number (Firebase Authentication, which sends the SMS code), the database and file storage (Cloud Firestore and Cloud Storage), server code (Cloud Functions), web hosting, app and web analytics (Google Analytics), crash reporting (Crashlytics), push notifications (Firebase Cloud Messaging) and abuse protection (Firebase App Check). Our database and files are stored in Google Cloud's Mumbai (asia-south1) region; analytics and crash data are processed by Google globally.
- Apple: the Apple Push Notification service delivers notifications on iPhone.
- Razorpay (the seller's payment provider, not ours): where a seller has connected their own Razorpay account, the details needed to create a payment (the buyer's name, phone number, any email address, the amount, an order reference and a short description) go to Razorpay under that seller's Razorpay agreement and Razorpay's privacy policy. The payment record Razorpay sends back is stored with the order.
- AI processing — OpenRouter, Anthropic and Google models: when a seller asks the app to read a WhatsApp message, a chat screenshot or a payment screenshot, that text or image is sent through OpenRouter to an AI model made by Anthropic or Google, and the result comes back as an order draft or a payment match. This processing takes place outside India, and these companies handle the content under their own terms. We ask a seller's permission before the first time, and they can withdraw it in Settings. It then happens only when that seller chooses it, and that content can include details about their buyers. Each request is recorded with the seller's account id.
- Slack: feedback sent from the app, together with your account id, device model and app version, is posted to the SmolGoodi team's Slack workspace.
A seller may also share a delivery-round link with a person who delivers for them. That page shows buyers' names, flats, items and amounts due for that round; it does not show phone numbers.
4. Payments
Buyers pay sellers directly. At checkout a buyer can pay online, where the seller has connected their own Razorpay account and Razorpay collects the payment into that account, or in cash at delivery. A buyer who pays a seller by UPI outside the app does so directly, without SmolGoodi. SmolGoodi never receives, holds or settles buyers' money and takes no commission. We do not store full card numbers or banking passwords on our servers.
SmolGoodi is free to use today. If paid seller plans are offered later, they would be billed through Google Play or the Apple App Store, under their terms and privacy policies — not by SmolGoodi and not by Razorpay.
5. Sharing & disclosure
We share information only as needed to operate the Platform: the order details a buyer enters go to the seller they order from; a seller's public content is visible to anyone with their link; the service providers in section 3 receive what each one needs; and we disclose information where the law requires it. We do not sell your personal data.
6. How long we keep your data, and how to delete your account
We keep your data while your account is active. You can delete your account yourself at any time:
- In the app: Settings → Delete account.
- On the web, without the app: order.smolgoodi.in/delete-account.
You confirm it is you with a code sent to your phone number, review what will be deleted and what is kept, and confirm once. Deletion is immediate. There is no waiting period. The account cannot be restored. Deleting an account removes the shop (listings, catalog, photos, templates, customers, orders, payment records and payment screenshots) and the buyer profile (saved details, favourites, order list) that belong to it, any feedback sent from the app, and the sign-in for that phone number.
Payment screenshots a seller uploads are kept for as long as the seller keeps their shop, and are deleted with it.
What is kept after a deletion, by whom, and for how long:
| What | Kept by | How long | Why |
|---|---|---|---|
| Orders a buyer placed with a seller (name, flat, phone as typed at checkout, items, amounts) | The seller, in their shop | As long as the seller keeps their shop | The seller's record of a sale: they need it to deliver and for their accounts and tax. SmolGoodi does not rewrite a seller's records. |
| A buyer's own list of orders from a seller who deleted their shop | The buyer | Until the buyer deletes their account | The buyer's purchase history; marked as from a shop that has closed. |
| A record that the account was deleted and when (sides and counts; no name, no phone) | SmolGoodi | One year, then deleted automatically | To answer "was this account deleted, and when" and to make the deletion safe to retry. |
| Server logs naming the account id (not name or phone) | SmolGoodi (Google Cloud Logging) | Up to 30 days | Operating and debugging the service. |
| Google Cloud's audit logs of administrative actions, which can include the account id | Google Cloud, for SmolGoodi | Up to 400 days | Platform audit; not configurable. |
| Recoverable copies | SmolGoodi | Photos and files: 7 days (Cloud Storage soft delete). Database records: 1 hour (Firestore version retention). No backups, no point-in-time recovery. | Recovery from accidents; then gone. |
| "Upgrade" taps (which screen, when; the seller id only) | SmolGoodi | Not deleted — an append-only product measurement | Holds no name, phone or contact detail; the id names an account that no longer exists. |
| Beta feedback already posted to SmolGoodi's team chat (Slack) | SmolGoodi | Not removed from the chat history | Sent before deletion; deleted from the app's database. |
| Reports about a shop, and the record of a suspension | SmolGoodi | Not deleted. A report loses the sender's account id when that account is deleted. | The record of how a shop was handled. |
| Analytics and crash data, which can include the account id | Google, for SmolGoodi | Google's retention settings for these products; not removed by deleting the account | Measuring and fixing the app. |
| Payment details held by Razorpay | Razorpay and the seller's Razorpay account | Razorpay's own policy | Outside SmolGoodi; payments go directly to sellers. |
What the delete-account screen tells you is kept, word for word:
- Sellers you ordered from keep the orders you placed with them — they need them to deliver and for their accounts.
- Buyers who ordered from you keep their own list of those orders, marked as from a shop that has closed.
- A record that this account was deleted, and when — with no name or phone number. It is deleted automatically after one year.
- Server logs that name your account id (not your name or phone number) for up to 30 days, and Google Cloud's audit logs of administrative actions for up to 400 days.
- Recoverable copies for a short time: photos and files for 7 days, database records for 1 hour. SmolGoodi keeps no other backups.
- Taps on upgrade prompts (which screen, when) — a product measurement that holds no name, phone or contact detail.
- Feedback already posted to the SmolGoodi team chat is not removed from that chat.
- Reports about a shop stay on record. A report you sent no longer names your account.
- If a seller blocked your number, their list keeps it.
- If your shop was suspended, your phone number stays unable to open a new shop.
- A scrambled (hashed) form of your account id or address, kept for up to two days by the report limit.
- Payment details held by Razorpay stay with Razorpay and the seller, under their own policies.
7. Security
All traffic between your device and our servers is encrypted in transit (TLS). Data at rest is encrypted by Google Cloud; a seller's Razorpay key secret is additionally encrypted with AES-256-GCM before it is stored. Database and storage access is restricted by per-account security rules. No method of transmission or storage is completely secure, but we work to safeguard your data against unauthorised access.
8. Your rights
Subject to applicable law, you may request access to, correction of, or deletion of your personal data, and may withdraw consent where processing is based on consent. Deletion is self-service (section 6). For anything else, contact us using the details below; we respond within the time the law allows.
9. Children
The Platform is intended for users aged 18 and above and is not directed at children.
10. Changes to this policy
We may update this policy from time to time. We will post the revised version here with an updated date.
11. Grievance & contact
For privacy questions or grievances, contact our Grievance Officer at Pixelbrahma Design Studio Private Limited, Kadavanthara, Kochi - 682020, Kerala, India. Email hello@pixelbrahma.com, phone +91 97470 90058.