Privacy Policy

Srevia – Luxury Jewellery

Developer: RTD CREATIVES · Effective date: 4 October 2026 · Last updated: 4 October 2026

RTD CREATIVES (“we”, “us”, “our”) operates the mobile application Srevia – Luxury Jewellery (the “App”). This Privacy Policy explains what information we collect from you when you use the App, how we use it, who we share it with, and what rights you have over it. By using the App, you agree to the practices described in this Policy.

We take your privacy seriously. We only collect what we genuinely need to let you browse, purchase, and receive jewellery through the App, and to run the business behind it.

1. Information we collect

1.1 Information you provide to us

• Account information — when you sign in with Google, we receive your name, email address, and profile picture URL from Google.
• Profile details — you may add or edit your first name, last name, phone number, and date of birth from the Profile screen.
• Shipping addresses — address lines, city, state, PIN code, and the contact name/phone you associate with each address.
• Order information — the items you add to cart, the orders you place, payment status, and delivery status.
• Wishlist — the products you save for later.
• Reviews — the rating and text you submit for a product after a verified delivered purchase.
• Support messages — any content you send us through Help & Support, email, or in-App forms.

1.2 Information collected automatically

• Device and app diagnostics — basic device model, operating system version, App version, crash logs, and performance data, used to keep the App stable.
• Session identifiers — Firebase Authentication tokens used to keep you signed in securely.

1.3 Information we do NOT collect

• We do not access your contacts, SMS, call logs, or microphone.
• We do not track your precise GPS location.
• We do not read any photos on your device other than ones you explicitly choose to upload (if that feature is enabled for your account).
• We do not sell or rent your personal information to anyone.

2. How we use your information

We use the information above to:

• Create and secure your account.
• Show you jewellery, prices, and offers, and let you place orders.
• Process and confirm your payment, and refund it if applicable.
• Ship your order to the address you provide and send you order updates.
• Let you track orders, manage your wishlist, and leave reviews.
• Respond to your support requests.
• Detect, prevent, and investigate fraud, abuse, or security incidents.
• Comply with legal, tax, and accounting obligations under Indian law.
• Improve the App — fixing crashes, making flows faster, adding features our customers ask for.

3. Third-party services we use

We use a small number of trusted third parties to run the App. Each one receives only the information needed for its role, and each has its own privacy policy. The main ones are listed below.

Service	Why we use it	Data they may process
Google Firebase (Auth, Firestore, Cloud Functions)	Sign-in, account database, product catalog, orders, reviews.	Email, name, profile photo URL, phone, addresses, order history, reviews, device/session tokens.
Google Sign-In / Credential Manager	Authenticates you with your Google account.	Google account identifier, name, email, profile photo URL.
Cloudflare R2 / Workers	Hosts product images and runs lightweight server endpoints.	Image URLs, request metadata (IP address, timestamp).
Razorpay	Processes online payments at checkout.	Order amount, your name, email, phone, and payment instrument details — collected directly by Razorpay, not by us.
Shipping partners	Delivers your order.	Recipient name, delivery address, phone, order weight/value.

We do not store your full card number, UPI PIN, CVV, or bank password at any time. Payment credentials are collected and handled by Razorpay, a PCI-DSS compliant payment processor regulated by the Reserve Bank of India.

4. Payments

When you place an order, you are redirected to Razorpay to complete payment. Razorpay collects and processes your payment instrument details under its own privacy policy. Once your payment succeeds, Razorpay sends us only the transaction identifier, amount, and status; we store this against your order so we can show you the correct order history and process any refund.

5. Shipping and delivery

To deliver your order we share the recipient’s name, phone number, and delivery address with the shipping partner handling that order. These partners use that information only to deliver your package and are not permitted to use it for any other purpose.

6. Reviews

You can submit a product review only after the related order is marked Delivered. Your first name and the initial of your last name are shown alongside your review; your full name, email, address, and order details are never shown publicly. You can ask us to remove a review you posted at any time by writing to the contact address below.

7. Data retention

• Account information — kept for as long as your account is active.
• Orders, invoices, and payment records — retained for a minimum of 8 financial years as required by Indian tax law, even if you later delete your account.
• Addresses and profile edits — kept until you remove them or close your account.
• Support messages and crash logs — typically retained for 24 months, then deleted or anonymised.

When you ask us to close your account we delete your profile, wishlist, saved addresses, and reviews. Order and invoice records remain for the statutory retention period above, but are no longer linked to a usable login.

8. Security

We use industry-standard safeguards to protect your information:

• HTTPS/TLS encryption for all data in transit between the App and our servers.
• Firebase Authentication and Firestore Security Rules to make sure only you (and, where legally required, our authorised sellers) can see your account data.
• Scoped service accounts and least-privilege access for anyone on our team who handles data.
• No local storage of payment credentials on your device.

No electronic system is ever 100 % secure. If we ever become aware of a breach that affects your personal information, we will notify affected users and the appropriate authorities as required under the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.

9. Your rights

As a user, you may:

• Access and correct your profile data directly from the Profile → Manage My Account screen in the App.
• Delete your account through the App or by writing to us at the address below.
• Withdraw consent for any optional processing, with effect for the future.
• Request a copy of the personal information we hold about you.
• Lodge a complaint with the Data Protection Board of India, or with us first so we can try to resolve it.

We respond to verified requests within 30 days.

10. Children’s privacy

The App is not directed at children under 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, please write to us and we will delete the account and the information we hold.

11. International data transfers

Some of our service providers (Firebase, Cloudflare, Razorpay) operate data centres outside India. When your information is transferred outside India for processing, we rely on the provider’s contractual safeguards and on their own compliance with applicable laws to protect it.

12. Changes to this Policy

We may update this Policy to reflect new features, service providers, or legal requirements. If we make material changes, we will notify you in the App or by email before the changes take effect. The “Last updated” date at the top of this page always shows the current version.

13. Contact us

If you have questions about this Policy, or want to exercise any of the rights above, please write to us:

RTD CREATIVES
Email: rtdcreatives.anurag@gmail.com
Grievance Officer: Anurag Swarnkar
Response time: within 30 days of receipt