How Buy-lo handles your information.

Buy-lo is the shopper app operated by BUYLO TECH SOLUTIONS PRIVATE LIMITED. You can browse as a guest. Creating an account requires a mobile number, SMS verification and your name; email is optional. We process your account ID, profile information and sign-in sessions to provide and protect your account.

When you save an address or place an order, we process your recipient name, phone number, delivery address and any location coordinates you provide. These details are used for serviceability, delivery and order management.

When you are signed in, Buy-lo stores your wishlist, product-view history, search history, notification preferences and read status to support your shopping experience. Guest search history and cart state are stored on your device.

We process your orders, product selections, amounts, payment status, refunds, returns and order notes. Mol Bhav offers, counter-offers and optional text notes are shared with the dealer you choose so you can negotiate a participating product.

You can choose a location manually or allow the app to use your device location. Precise coordinates and the resulting city or postcode are used to find nearby products, check delivery coverage and populate an address. You can change location permission in your device settings.

Buy-lo iOS build 4 and later use Apple Maps for map features. Earlier iOS builds displayed Google Maps through a web view; Android uses the Google Maps SDK. Google receives map requests, IP addresses and coordinates and may retain them to provide and improve its services under its privacy policy. Nominatim, operated by the OpenStreetMap Foundation, receives address and coordinate queries and network information used to resolve addresses and operate its service.

Razorpay processes checkout and payment details. Buy-lo stores payment and order references, transaction status, amounts and refund information. Payment details entered into the payment provider’s checkout are handled by that provider. The bundled Razorpay SDK also declares collection of contact, payment, device and interaction information for functionality, analytics and personalization, along with crash and diagnostic information.

MSG91 processes phone numbers and verification messages for SMS sign-in. If you choose WhatsApp updates, the messaging service processes the details needed to send those updates. In releases with push notifications enabled, Firebase Cloud Messaging processes installation identifiers and notification tokens for message delivery.

The seller fulfilling your purchase receives the customer and delivery details needed for the order. The selected dealer receives your Mol Bhav offers and notes. We use cloud infrastructure, messaging, map and payment providers to run these features.

Those providers process information under their applicable terms and privacy policies. Information may also be disclosed when legally required. Buy-lo’s initial release is intended for adults aged 18 and over and does not include paid or sponsored advertising.

Our API records request URLs, IP addresses, browser or device user-agent information and response details for service operation and troubleshooting. Request URLs may contain location coordinates or record references. The current default application-log retention is 30 days.

Account deletion clears the live account records described below. The database maintains a rolling set of seven automated backups and seven days of point-in-time recovery logs. Earlier account information may remain in those restricted recovery copies until they expire. Managed files removed from cloud storage remain recoverable by the operator for seven days under the storage provider’s soft-delete setting.

Completed transaction references, product lines, amounts and statuses do not currently have an automatic expiry. Deletion removes the app-held customer and delivery details and free-text notes from these records. The deletion-request ledger retains internal account and transaction identifiers and completion status to record and retry cleanup; it contains no copied name, phone, email or address. Provider-held and seller-held records follow their own retention practices.

You can update profile details and manage saved addresses in the app. You can decline device location access and choose your location manually. Device settings control notification permissions.

To delete your account, open Delete Account from your profile or use the account-deletion page linked below. Verify the mobile number registered to your account and explicitly confirm deletion. Unfinished orders, payments, refunds or returns must be completed or cancelled first.

Deletion removes account identity and contact details, saved addresses, wishlist, search and viewing history, notifications and device tokens. It removes app customer, contact and delivery details and free-text notes from completed transaction records, and deletes private Mol Bhav messages. Transaction records such as product lines, amounts, payment references, order numbers and statuses remain. Payment and order references can still identify a transaction in a provider’s or seller’s records. The deletion page shows whether cleanup has completed or is still in progress.

The Buy-lo deletion flow covers records held by Buy-lo. Payment, messaging and map providers have their own data practices and retention obligations; their policies and contact paths are linked below.

For questions about this policy, contact BUYLO TECH SOLUTIONS PRIVATE LIMITED through the contact page. Account deletion is handled through the self-service deletion page. Updates to this policy are published here when the app’s data practices change.