Privacy Policy

This Privacy Policy explains how Shanglen collects, uses, stores, shares, and protects information when you use our website, mobile app, ordering, delivery, payment, account, notification, and support services.

We process personal data for lawful purposes connected with providing Shanglen, fulfilling orders, securing accounts, complying with law, preventing misuse, and improving our services. Where required, we rely on your consent, including for permissions such as device location and notifications.

Shanglen is operated by SaiyoTech Private Limited.

Office location: Kwakeithel Near Lamdong Lampak, Imphal, Manipur, India.

Contact and grievance email: contact@saiyonix.in.

This policy applies to customers using the Shanglen website and user mobile app. It also covers related account, order, delivery, payment, notification, and support interactions.

Separate partner, merchant, driver, or admin workflows may collect additional operational or verification information where those roles use Shanglen.

Account and profile data: name, phone number, email address, login method, profile details, saved addresses, and account status.

Authentication data: OTP verification status, Google sign-in identifiers where used, access tokens, refresh sessions, device/session identifiers, and security logs.

Order and commerce data: cart items, wishlist items, search activity, shop and product interactions, order details, delivery address, order status, payment method, payment status, refund status, invoices or receipts, and support messages.

Location data: approximate or precise location only when you provide it, select it on a map, save a delivery address, request serviceability checks, or use order tracking features.

Device, app, and diagnostics data: device type, platform, app version where available, IP address, browser or app technical data, request logs, crash or error details, performance data, and fraud or abuse prevention signals.

Notification data: Firebase Cloud Messaging or similar device tokens, notification preferences, delivery status, and interaction data needed to send transactional alerts.

Uploaded or shared content: profile images, support attachments, delivery or order proof where applicable, and files uploaded through Shanglen services.

We collect data directly from you when you register, sign in, verify OTP, complete your profile, save an address, place an order, make a payment, contact support, upload content, or use app and website features.

We collect some data automatically from your browser, device, app, cookies, local storage, secure storage, server logs, and security systems.

We may receive limited data from service providers such as Google sign-in, Firebase notifications, Razorpay payment services, Mapbox map and geocoding services, Cloudflare R2 storage, SMS/OTP providers, and Sentry diagnostics where configured.

We use data to create and manage accounts, verify identity, authenticate users, provide customer support, process orders, calculate pricing, check serviceability, route deliveries, process payments, issue refunds, send receipts, and show order history.

We use data to personalize core shopping features such as saved addresses, carts, wishlists, search, nearby shops, product availability, and order tracking.

We use data to send OTPs, login alerts, order updates, delivery updates, payment updates, refund updates, support messages, safety notices, and service announcements.

We use logs, diagnostics, analytics, and security data to maintain reliability, debug issues, detect fraud, prevent misuse, enforce terms, protect users, and comply with legal, tax, accounting, and regulatory obligations.

Shanglen uses location data for delivery addresses, serviceability checks, nearby shop discovery, delivery estimates, route display, active order tracking, and delivery support.

The user app requests foreground location permissions. We did not identify a user-app background location permission in the current Android manifest. If background location is added later, this policy and the app disclosure should be updated before release.

You can control location permissions through your device or browser settings. Some features may be unavailable or less accurate if location access is disabled.

We collect order, cart, delivery address, payment method, payment status, refund status, delivery status, and support information to complete purchases and resolve issues.

Payments may be processed by Razorpay or other authorized payment partners. Shanglen may receive transaction IDs, order IDs, payment status, refund status, and verification signatures, but we do not store full card numbers, UPI credentials, CVV, or banking passwords.

Delivery and tracking data may be shared between the customer, shop, delivery partner, and support team as needed to prepare, dispatch, deliver, verify, or resolve an order.

We use phone OTP and, where available, Google sign-in to verify account access. OTP requests, verification attempts, timestamps, and related security logs may be stored to prevent abuse and protect accounts.

On the website, authentication and profile data may be stored in cookies, local storage, or session storage. In the mobile app, tokens and session data may be stored using secure device storage.

You are responsible for keeping your device, phone number, email account, and login access secure.

We use push notifications, in-app notifications, SMS, email, or similar channels for transactional and service messages, including OTPs, order updates, payment updates, delivery updates, support replies, account alerts, and important service notices.

For push notifications, we may collect and store Firebase Cloud Messaging device tokens, platform, app type, and last-seen information. You can control push notification permissions in your device settings.

The Shanglen website may use cookies, local storage, and session storage to keep you signed in, remember profile or session state, support Google sign-in onboarding, protect sessions, improve reliability, and preserve app preferences.

You may clear browser storage or adjust browser settings, but some website features may stop working correctly.

We may use service providers for hosting, databases, storage, maps, geocoding, delivery routing, payments, payouts, OTP/SMS, email, push notifications, diagnostics, monitoring, analytics, customer support, and fraud prevention.

Current code references or integrations include Google sign-in, Firebase/FCM, Mapbox, Razorpay, Cloudflare R2/S3-compatible storage, 2Factor or SMS OTP services, Resend email, and Sentry diagnostics. Providers may change as the platform evolves, but they are used only for service, security, compliance, support, or operational purposes.

We share data only as needed to operate Shanglen, including with shops, delivery partners, payment providers, map and routing providers, notification providers, storage providers, hosting providers, diagnostics providers, support teams, professional advisers, and authorities where required by law.

We may share order and delivery details with the relevant shop and delivery partner. We may share payment information with payment providers for processing, verification, refunds, reconciliation, and dispute handling.

We do not sell personal data. Service providers and order participants receive limited data only where needed to perform, secure, support, or comply with the service.

We retain information for as long as needed to provide services, maintain order and payment records, comply with legal, tax, accounting, and regulatory obligations, resolve disputes, prevent fraud, enforce agreements, and maintain security.

Some records may be retained after account deletion where required for legal compliance, fraud prevention, dispute resolution, accounting, or legitimate business records. When retention is no longer needed, we delete, anonymize, or restrict the data using reasonable processes.

We use reasonable technical and organizational safeguards designed to protect information from unauthorized access, loss, misuse, alteration, or disclosure. These may include access controls, token-based authentication, secure storage, request validation, monitoring, and operational controls.

No digital platform can guarantee absolute security. Please use a secure device, keep OTPs private, and contact us promptly if you suspect unauthorized access.

You may access and update certain profile, address, and account details through Shanglen. You may also request access, correction, deletion, withdrawal of consent where applicable, or grievance review by contacting us.

Some requests may require identity verification. Some choices may affect your ability to use features such as delivery, order tracking, login, payments, or notifications.

You may request account deletion or personal data deletion by contacting contact@saiyonix.in from your registered email or by including your registered phone number and relevant account details.

We will review the request, verify account ownership where needed, and process it subject to pending orders, refunds, disputes, fraud checks, legal obligations, accounting requirements, and operational records that must be retained.

Shanglen is not intended for children who are not legally permitted to use online commerce services. Minors should use Shanglen only with involvement and consent of a parent or legal guardian where required by law.

We do not knowingly collect personal data from children in a manner prohibited by applicable law. If you believe a child has provided personal data without appropriate consent, contact us for review.

We may update this Privacy Policy from time to time. Updated versions will be posted on this page with a revised Last Updated date. Material changes may also be communicated through the app, website, or other reasonable channels.

Company: SaiyoTech Private Limited

Office location: Kwakeithel Near Lamdong Lampak, Imphal, Manipur, India

Contact and grievance email: contact@saiyonix.in

Website: https://shanglen.com