Privacy Policy

1. Who we are and the scope of this policy

TownPoints Private Limited ("TownPoints", "we", "us" or "our") operates the TownPoints mobile application, townpoints.in, and related services (together, the "Services"). This policy applies to customers, visitors, vendors, service providers and delivery partners who use the Services.

By using the Services, you acknowledge the data practices described here. Where consent is required, we ask for it before collecting the relevant data. If you do not grant an optional permission, the related feature may be unavailable, but you may continue to use other available parts of TownPoints.

2. Information we collect

We collect information directly from you, automatically when you use the Services, from your device after you grant a permission, and from vendors, delivery partners, payment providers or other parties involved in a transaction you request.

Cookies and similar technologies

Our website may use session, preference, security and analytics cookies to keep you signed in, remember settings, secure the Services and understand performance. Browser controls can block cookies, but some website functions may then not work correctly.

3. How TownPoints accesses, collects and uses location

Location data we access or collect

• Location you provide: a town, locality, address, pin code, delivery address or service location that you type or select.
• Device location you permit: approximate or precise latitude and longitude supplied by your device while you use a location-based feature.
• Transaction location: the location attached to an order, booking, listing, delivery or service request.

Why we collect and use it

• to identify your town or service area and display locally available listings, shops, vendors and services;
• to help you select or confirm an address for an order, booking, delivery or service request;
• to route a request to an appropriate vendor, service provider or delivery partner;
• to calculate availability, distance or delivery-related information where that feature is offered; and
• to prevent fraud, resolve support issues and maintain transaction records.

When collection occurs

TownPoints requests Android or browser location permission in context, when you choose a feature that needs device location. If you agree, the app reads the location in the foreground and transmits the necessary location to TownPoints servers to provide that feature. We do not continuously track you and do not access device location in the background, when the app is closed, or when the app is not in use.

Your control

Location permission is optional. You may choose "Don't allow", use an approximate location where your device offers that choice, revoke permission in Android or browser settings, or manually select a town or enter an address. Turning off permission prevents new device-location access but does not automatically delete a location already saved with an order or account; see Section 8 for deletion choices.

4. How we use information

• provide accounts, local discovery, listings, orders, bookings, deliveries and requested services;
• authenticate users, send service messages and provide customer support;
• process payments, refunds, wallet balances, offers and transaction records;
• personalise the location and categories shown based on your selections and activity;
• send push notifications or marketing messages where permitted, with available opt-out controls;
• monitor performance, troubleshoot errors, prevent fraud and protect users and the Services;
• enforce our Terms and comply with legal, tax, accounting and regulatory obligations; and
• improve existing features and develop new ones using aggregated or de-identified insights where practical.

5. How we share information

We do not sell your personal data. We share only what is reasonably necessary in these circumstances:

• Vendors and service providers: order, booking, contact and service-location details needed to fulfil your request.
• Delivery partners: recipient contact details, delivery address and order information needed for delivery.
• Technology providers: hosting, database, notification, communications, analytics, mapping or geocoding providers acting for us.
• Payment providers: transaction information needed to process or verify a payment, refund or dispute.
• Professional advisers and authorities: where reasonably necessary to comply with law, respond to valid legal process, prevent harm or protect rights.
• Business transfers: in connection with a merger, financing, reorganisation or sale, subject to appropriate safeguards.

Public listings, reviews and profile content you intentionally publish may be visible to other users. Third parties process information under their own terms and privacy policies when they act independently.

6. Data retention, account deletion and transfers

We retain account information while your account is active and keep other information only for as long as needed for the purposes described in this policy. Locations saved with orders, bookings, deliveries, listings or service requests may be retained with those records to complete the transaction, resolve disputes, prevent fraud and meet legal, tax or accounting obligations. Device-derived current location is retained only as needed for the feature or related transaction.

When you delete your account, we delete or de-identify personal data associated with it, except information we must retain for legal compliance, safety, fraud prevention, dispute resolution or legitimate transaction records. Backup copies are removed on our normal secure backup cycle.

Data may be processed on systems operated by us or our service providers in India or other countries. Where required, we use appropriate contractual, organisational and technical safeguards for such transfers.

7. Security

We use reasonable administrative, technical and organisational safeguards designed to protect personal data against unauthorised access, alteration, disclosure or loss. No internet transmission or storage system is completely secure, so we cannot guarantee absolute security. Keep your sign-in information confidential and contact us if you suspect unauthorised account use.

8. Your choices and rights

• review or update available profile and address information in the app;
• deny or revoke location, camera, notification or other device permissions in device settings;
• unsubscribe from optional marketing communications while continuing to receive essential service messages;
• request access, correction or deletion of personal data, subject to applicable law; and
• delete your customer account in the TownPoints app through Profile / My Account > Delete Account.

Vendors and delivery partners, or anyone who cannot use the in-app option, may use our Account Deletion page or email contact@townpoints.in. We may verify your identity before completing a privacy request.

9. Children's privacy

TownPoints is not directed to children under 18, and children may not create an account without the involvement and consent of a parent or legal guardian where permitted by law. We do not knowingly collect personal data from a child contrary to applicable law. A parent or guardian who believes a child has provided data may contact us to request its deletion.

10. Changes to this policy and contact us

We may update this policy when our Services, data practices or legal obligations change. We will post the revised policy here, update the date above and provide additional notice in the app when required.