Privacy Notice
Version 1.1
This Privacy Notice applies to Rev Technologies (hereinafter referred to as “Rev”, “Company”, “We”, “Us”, or “Our”), a company incorporated under the laws of India, having its registered office at No. 173, Bhavani Nagar, Ayapakkam, Chennai – 600077, Tamil Nadu, India. The Company owns and operates the website revstore.in and the mobile applications, collectively referred to as the “Platform”.
By accessing or using the Platform, creating a user account (“Account”), or availing any service through the Platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Notice. If you do not agree, please do not use the Platform.
If you are under 18 years of age, you may use the Platform only under the supervision of a parent or legal guardian who accepts this Privacy Notice on your behalf.
1) Scope and Relationship to Terms
This Privacy Notice describes how we collect, use, store, disclose, transfer, and protect information on the Platform. It forms an integral part of, and shall be read with, our Terms of Use (“Terms”). Capitalised terms used but not defined here have the meanings given in the Terms. This Notice does not apply to third-party websites, applications, or services that are not controlled by us.
2) What We Collect
- Personal Information: name, mobile number, email address, date of birth, gender, address, KYC/identity information (e.g., PAN, Aadhaar, driver’s licence, voter ID or other government-issued ID as permitted by applicable law), photographs/selfies for verification (if applicable), and any other information you voluntarily provide.
- Device/Technical Data: IP address, device identifiers, OS and app version, language, time zone, network information, browser/user-agent, crash logs, diagnostics, and similar telemetry.
- Transactional Data: order details, payment status (from payment partners), refunds, delivery preferences, interactions with customer support, and your in-app behaviour for fraud-prevention and service improvement.
- Location Data: precise or approximate location when you grant permission (e.g., to suggest nearby services, enable delivery/rider features). You may disable location permissions at any time; some features may not function without them.
- Communications & OTP: information contained in your communications with us (email, phone, in-app chat). If you choose, we may auto-read one-time passwords (OTPs) strictly to complete verification; we do not access other message contents.
- Cookies/SDKs/Similar Tech: we use cookies and mobile SDKs to authenticate users, remember preferences, measure performance, and personalise/secure the experience. You can control certain cookies/ permissions via device/browser settings; some features may not work if disabled.
- Optional Surveys/Feedback: information you provide in surveys, reviews, ratings, or promotions/contests.
3) Lawful Bases and How We Use Information
We process information where permitted by applicable law (including the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000 and rules thereunder), based on one or more of: your consent, performance of a contract, compliance with legal obligations, and our legitimate interests (such as security, fraud prevention, improving services).
Purposes include:
- creating and managing your Account; verifying identity and eligibility;
- providing, operating, and improving the Platform and related services;
- processing orders, payments, refunds; enabling logistics and delivery features;
- personalising content, recommendations, and promotions (with opt-out options);
- sending service/transactional messages, important updates, and security alerts;
- detecting, investigating, and preventing fraud, abuse, or violations of the Terms;
- analytics, debugging, and product research (including anonymised/aggregated reports);
- complying with laws, regulatory obligations, and responding to lawful requests.
4) Payments
Payments are processed by third-party payment service providers. We do not store full card/UPI credentials on our servers. Payment providers handle your payment data in accordance with their own policies and applicable standards/laws.
5) Sharing and Disclosure
We do not sell or rent your Personal Information. We may share information:
- with trusted service providers acting on our behalf under confidentiality and data-protection obligations (e.g., cloud hosting, analytics, SMS/OTP, payments, logistics, customer support);
- with law enforcement, regulators, courts, or other authorities where legally required or to protect our rights, users, or the public;
- in connection with a business transaction (e.g., merger, acquisition, restructuring or sale of assets), where information may be transferred to the new entity subject to this or a materially similar notice;
- as aggregated/anonymised data that does not identify you.
We also require that any sub-processors or third-party processors to whom we pass your data adhere to the same or stronger data-protection obligations, and we may notify you of any material changes to such sub-processors via the Platform or email, where required by law.
6) Cross-Border Transfers
We host and process data using Google Cloud Run and MongoDB Atlas. Data may be stored or processed outside your state/country (including outside India). Where required, we implement appropriate safeguards to protect your information consistent with this Notice and applicable laws, including encryption and standard contractual clauses / equivalent safeguards where applicable.
7) Data Security
We employ administrative, technical, and organisational measures designed to protect information, including encryption in transit and at rest (where applicable), access controls, and regular monitoring. However, no system can be guaranteed 100% secure. You are responsible for maintaining the confidentiality of your Account credentials and promptly notifying us of any suspected unauthorised access.
In the event of a data breach or security incident, we will notify you and/or relevant regulatory authorities as required under applicable law, within the timelines mandated by law.
8) Data Retention
We retain Personal Information for as long as needed to fulfil the purposes described above, comply with legal obligations, resolve disputes, and enforce agreements. When no longer necessary, we delete or irreversibly anonymise data in a reasonable timeframe.
We may also retain logs, metadata, system audit trails, and consent records for a period permitted or required by law (e.g., for compliance, fraud investigation).
9) Your Choices and Rights
Subject to applicable law, you may:
- access, correct, and update certain Personal Information;
- withdraw consent (for consent-based processing) without affecting prior lawful processing;
- request deletion/erasure (subject to legal/contractual limits and fraud-prevention needs);
- object to or restrict certain processing;
- request data portability (to receive a copy of your data in a machine-readable format), if permitted by law;
- opt out of marketing communications at any time (service/transactional emails will still be sent);
- lodge a grievance or complaint as per Section 12 below.
To exercise these rights, contact us at support@revstore.in. We may need to verify your identity to process requests, and we will respond within the time period mandated by law (or, if none, within a reasonable period, typically 30 days).
10) Children’s Data
The Platform is not intended for children under 18 years without parental/ guardian supervision. If we learn that a child has provided Personal Information without appropriate consent, we will take reasonable steps to delete such data.
11) Third-Party Links and Services
The Platform may contain links to third-party websites/apps not operated by us. Their privacy practices are governed by their own policies; we are not responsible for such practices. Please review their privacy notices before use.
12) Grievance Redressal and Contact
For questions, requests, or complaints regarding this Notice or our data
practices, please contact:
Grievance Officer / Data Protection Officer: Saravanan A.
Email:
support@revstore.in
Address: No. 173, Bhavani Nagar, Ayapakkam,
Chennai – 600077, Tamil Nadu, India
We will acknowledge and address grievances within timelines prescribed by applicable law. You may also escalate to the relevant data protection authority if you are not satisfied with our internal resolution.
13) Changes to this Notice
We may update this Privacy Notice to reflect legal, technical, or business developments. Material changes will be notified via the Platform or by email. Your continued use of the Platform after the effective date constitutes acceptance of the updated Notice.
We may maintain version history and archive prior versions; you may request access or reference to the prior versions where required or permitted by law.
14) Additional Disclosures
- Legitimate Interests: security of the Platform, fraud detection, service improvement, and analytics.
- Automated Decisions/Profiling: we may use limited automated processing (e.g., risk/fraud checks, recommendation ranking). You may contact us for more information or to contest a decision where required by law.
- Signals: certain browser or OS privacy signals may be honoured to the extent supported by our current systems and applicable law.
- Records: we may maintain logs of access, consent, and changes for compliance and audit purposes.
15) Definitions (for clarity)
“Personal Information” means any information relating to an identified or identifiable individual, and includes “digital personal data” under the DPDP Act. “Processing” means any operation performed on Personal Information, such as collection, recording, organisation, storage, adaptation, retrieval, use, transmission, disclosure, erasure, or destruction.
If any provision of this Notice is held invalid under applicable law, the remainder shall continue in full force and effect.