Privacy Policy

1. Information We Collect

To provide you with our premium water delivery services, we collect the following types of information:

• Personal Details: Your name, email address, phone number, and physical/delivery address when you register an account.
• Account Security Data: Securely hashed passwords using industry-standard cryptography, and temporary session tokens (including 2-Factor Authentication OTPs).
• Transaction Details: AquaWallet balances, order logs, purchase history, invoices, and simulated payment logs (e.g. UPI, Card, Netbanking logs).
• Support Logs: Subject, details, and replies compiled under support tickets you raise with customer service.

2. How We Use Your Information

Your data is processed strictly for functional and operational needs, including:

• Fulfilling, scheduling, and delivering your water can orders to your specified addresses.
• Managing and validating your AquaWallet balance, secure 1-click recharges, and payment gateway authorizations.
• Optimizing delivery routes and real-time mapping for delivery partners to ensure quick morning deliveries.
• Authenticating logins via 2-Factor Verification (2FA) codes sent to your registered email address.
• Responding to customer inquiries, complaints, and billing issues raised via the ticket system.

3. Data Security and Retention

We implement robust administrative, technical, and physical security measures to shield your data:

• Password Hashing: Passwords are never stored in raw formats. They are protected using PHP's native `password_hash()` default algorithms.
• Session Controls: Temporary sessions hold unverified user states during the 2FA cycle, avoiding early logins or credential leakage.
• Data Isolation: All records are stored securely within local database instances and are protected from external scripting intrusions.

4. Cookies & Service Workers

• Theme Selection Cookies: We store a small persistent cookie (`theme`) to synchronize your color theme preference (Light/Dark mode) across browser loads.
• PWA Service Workers: The service worker (`sw.js`) caches static style, script, image, and font files locally to enable faster page loads and offline fallback accessibility. No tracking is done via our service workers.

5. Third-Party Sharing Policy

We maintain a strict zero-sharing policy. We do not sell, trade, or distribute your name, phone number, address, or email to third-party advertising brokers or commercial agencies. Simulated gateway APIs are used exclusively inside checkout procedures without storing real financial instruments.

6. Contact Us

For any privacy questions or requests regarding your data, please contact our Delhi support headquarters: