Privacy Policy
HSC Tailor Boutique is operated by Harshit Singh Chouhan, India ("we"). This policy explains what we collect through the app, admin tools and this website, and your choices. It is written to meet India's Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025.
Who decides what
For your own account we decide how your data is used. For the customer records you enter (names, phone numbers, measurements), your boutique decides what is stored and why, and we process them on your behalf. Boutiques must have a lawful reason to record their customers' details and must answer their customers' requests.
What we collect
- Account: mobile number, name, language, and your boutique's name, address, GSTIN and UPI ID.
- Business records you enter: customers, measurements, orders, bills, payments, stock, expenses and staff.
- Photos you add: fabric, design, product and logo images. Location and camera data embedded in photos is removed on upload.
- Device data: device type, push notification token, IP address, and login times, used for security.
- Plan requests: shop name, your name, mobile number, city, and email if you give it, so we can send payment details and confirm your plan. We record the amount and reference of your payment, never your bank or card details.
We do not use advertising, and we do not track you across other apps or websites. The app uses Bluetooth only to reach your receipt printer, and the camera and photos only when you choose to add an image.
How we use it
To run the service, log you in, show your dashboard, send notifications you expect, handle subscriptions, keep the service secure, and meet legal duties. We do not sell personal data.
Who we share it with
Only the providers needed to run the service, under their own security duties: Hostinger (hosting and database), MSG91 (login SMS), Google Firebase (push notifications), Hostinger email (plan request and payment emails), YouTube (help videos, shown only on the help page in privacy-enhanced mode), Apple and Google (app stores), and Razorpay (payment links, if you use one). We share data with authorities only when the law requires it.
Security
Traffic is encrypted with HTTPS. Login codes and session tokens are stored only as hashes. Each boutique's data is separated on the server, photos sit behind expiring signed links, staff access is limited by role, and sensitive actions are logged. No system is perfectly secure. If a breach affects you we will tell you and the Data Protection Board of India as the law requires.
How long we keep it
We keep your data while your account is active. When you delete your account it is hidden at once and permanently erased after 30 days. During those 30 days you can log in and choose to restore it. Backups age out within a further 14 days. Security logs are kept for up to one year. Boutiques can delete individual customers at any time; bill totals may be kept for tax records with personal details removed.
Your rights
You can access, correct and export your data in the app, withdraw consent by deleting your account, and nominate someone to act for you. If you are a customer of a boutique, please contact that boutique first; we will help where we can.
Children
The app is for business owners and staff aged 18 or over. Boutiques may record measurements of children only with a parent's or guardian's permission.
Grievance officer
Harshit Singh Chouhan, support@harshitchouhan.com. We reply within 7 days and resolve complaints within 30 days. You may also approach the Data Protection Board of India.
Changes
We will post updates here and tell you in the app about significant changes.