Privacy Policy

1. Introduction & Scope

Mahoti Farms ("we", "us", or "our"), operating the AwesomEgg platform, is committed to safeguarding the personal privacy of our customers and visitors. This Privacy Policy describes how we collect, process, store, and protect your personal information when you visit our website (mahoti-farm.pages.dev), mobile app, or purchase products through our local hubs.

2. Personal Information We Collect

We collect information necessary to fulfill your orders and deliver exceptional customer service, including:

• Account Identifiers: Name, mobile phone number, email address, and 6-digit authentication PIN hash.
• Delivery Information: Apartment name, building tower, flat number, street address, city, state, postal PIN code, and GPS delivery coordinates (PostGIS points).
• Transaction & Order History: Order numbers, product items purchased, total invoice amounts, payment mode (UPI, Card, COD, Wallet), and delivery timestamp records.
• Device & Usage Data: IP address, browser type, operating system, and access timestamps for security audit purposes.

3. Payment Information & Razorpay Security Compliance

All online payments made on AwesomEgg (including UPI, Credit Cards, Debit Cards, Net Banking, and Digital Wallets) are securely routed and processed through Razorpay Software Private Limited.

Razorpay is certified under PCI-DSS (Payment Card Industry Data Security Standard) Level 1, ensuring the highest echelon of cryptographic data security. Mahoti Farms does not store, capture, or retain sensitive card numbers, CVVs, or bank net-banking passwords on our application servers.

4. How We Use Your Information

Your personal data is used solely for legitimate business purposes:

• Processing and fulfilling your daily farm-fresh orders from local neighborhood hubs.
• Routing assigned delivery agents to your doorstep and communicating delivery progress via SMS and WhatsApp.
• Administering the righto Cash loyalty wallet, referral discounts, and promotional coupons.
• Detecting and preventing fraudulent transactions, PIN brute-force attempts, and unauthorized access.
• Complying with statutory accounting and tax regulations in India.

5. Data Sharing & Third-Party Disclosures

We do not sell, rent, or trade your personal data to third-party marketing companies. Data is shared strictly on a need-to-know basis with:

• Assigned Delivery Agents: Name, phone number, and delivery destination solely to complete your delivery trip.
• Payment Processors: Razorpay for authorization, charge capture, and refund processing.
• Communication Providers: Authorized telecom partners (MSG91 / Airtel) to deliver transactional OTPs and order status SMS messages.
• Law Enforcement: Only when strictly mandated under Indian law or court order.

6. Data Security & Retention

We maintain industry-standard physical, technical, and managerial safeguards including HTTPS/TLS encryption in transit, hashed credentials, and role-based access control (RBAC). Data is retained for as long as your account remains active or as required by Indian accounting and taxation laws.

7. Your Privacy Rights

You have the right to inspect, update, or request the deletion of your personal data stored with us. You may exercise these rights at any time by contacting our Grievance Officer.