title: Ribha — Privacy Policy version: 1.0 effective_date: TBD url: ribha.store/privacy ---

RIBHA

Share. Sell. Earn.

Privacy Policy

Effective date: [DATE] Version 1.0 ribha.store/privacy

This Privacy Policy explains what personal information Ribha collects, why, who we share it with, and how you can control it. It applies to everyone who uses Ribha — store owners and buyers. It is written in plain language and takes about 3 minutes to read.

On this page

Who we are
What we collect
Signing in with Google
How we use your information
Who we share it with
How long we keep it
Where it is stored and how it is protected
Cookies
Your rights under the DPDP Act, 2023
Deleting your account and data
Children
Changes to this policy
Grievance Officer and contact

1. Who we are

Ribha ("we", "us", "our") is a social commerce platform at ribha.store. For the personal information described in this policy, Ribha is the Data Fiduciary under the Digital Personal Data Protection Act, 2023 (DPDP Act).

Ribha is link-gated: stores and products are not publicly listed or searchable. They are only visible to people who receive a link.

2. What we collect

2.1 If you are a store owner

Account details: your name, and your phone number and/or email address (depending on how you sign in).
Store details: store name, store link, description, return policy, and storefront settings.
Product details: product names, descriptions, prices, stock, variants, and product images you upload.
Order records: orders placed with your store or fulfilled by your store, including order status history.
Terms acceptance: the date and version of the Store Owner Terms you accepted.
Buyer details you save: if you save repeat-buyer profiles (name, phone number, address), you store these on Ribha to place orders on your buyers' behalf.

2.2 If you are a buyer

Order details: your name, phone number, and delivery address.
Account details (optional): if you choose to create an account after ordering, your phone number and/or email address, and items you add to your wishlist.

2.3 For everyone

Device and log data: IP address, browser type, and basic usage events, collected for security, fraud prevention, and to keep the Platform running.

2.4 What we never collect

Ribha does not collect or store your PAN, GSTIN, Aadhaar, bank account number, IFSC, UPI ID, payment QR code, or card details. Ribha does not process payments — buyers and store owners agree payment directly with each other.

3. Signing in with Google

If you choose to sign in with Google, Google shares the following with Ribha, with your permission:

your name;
your email address;
your Google profile picture link.

We use your name and email address only to create your Ribha account, identify you when you sign in, and contact you about your account. Your profile picture link is received as part of Google's standard sign-in and kept in our authentication system; we do not display it or use it for any other purpose.

We do not access your Gmail, contacts, Drive, calendar, or any other Google data. We do not sell Google user data, use it for advertising, or share it with anyone except the service providers listed in §5 that operate the Platform for us.

Ribha's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can remove Ribha's access at any time from your Google Account (Security → Third-party apps with account access). This stops future Google sign-ins; to delete the data we already hold, see §10.

4. How we use your information

We use your information only to:

create and secure your account (including sending login OTPs);
run your store and show your storefront to people who have your link;
pass order details between buyers, store owners, and — where a sourced product is fulfilled by another store — that source store;
send order and account notifications by WhatsApp, SMS, or email;
prevent fraud and abuse, and enforce our terms;
comply with applicable law.

We never sell your information, share it for third-party marketing, or use it for advertising.

5. Who we share it with

Store owners and source stores: a buyer's name, phone number, and address are shared with the store they ordered from and, where relevant, the source store fulfilling the order. Those stores use it only to fulfil and support the order.
People who receive your link: your store name, description, products, and return policy are visible to anyone who has your storefront or invite link.
Service providers that operate the Platform for us — cloud database, authentication and file storage; website hosting; SMS / WhatsApp OTP delivery; and email delivery — under contracts that limit their use of your data to providing their service.
Authorities: where required by law, a court order, or to protect the safety of users.

6. How long we keep it

Account and store data: for as long as your account is active, and deleted within 30 days of account deletion.
Order data: 3 years from the date of the order (for tax, dispute, and warranty purposes), then deleted.
Saved buyer profiles: until the store owner who saved them deletes them, or their account is deleted.
Device and log data: 12 months, then deleted.

7. Where it is stored and how it is protected

Your information is stored on cloud servers located in India (Mumbai region). We protect it with encryption in transit (TLS), database access rules that limit each user to their own data, restricted staff access, and audit logs of staff actions.

No system is completely secure. If a personal data breach affects you, we will notify you and the Data Protection Board of India as required by the DPDP Act.

8. Cookies

Ribha uses only essential cookies — to keep you signed in and to keep your session secure. We do not use advertising or third-party tracking cookies.

9. Your rights under the DPDP Act, 2023

You have the right to:

Access a summary of the personal information Ribha processes about you;
Correct or update your information;
Erase your information, subject to retention required by law;
Withdraw consent previously given (this may limit some functionality);
Nominate another individual to exercise these rights in the event of your death or incapacity;
Grievance redressal — see §13.

To exercise any of these rights, email privacy@ribha.store from the phone number or email address linked to your account. We will respond within 15 days.

If you are not satisfied with our response, you may approach the Data Protection Board of India.

10. Deleting your account and data

You can ask us to delete your account and associated data at any time by emailing privacy@ribha.store. We will delete it within 7 working days, except records we must keep by law (for example, completed orders for tax purposes), which are deleted at the end of the retention period in §6.

Deleting a store owner account removes the store and its products from the Platform. Orders already placed remain visible to the other party to that order for the retention period.

11. Children

Ribha is not intended for anyone under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact privacy@ribha.store and we will delete it.

12. Changes to this policy

We may update this Privacy Policy. The current version is always available at ribha.store/privacy. If we make significant changes, we will notify store owners in the dashboard before the changes take effect.

13. Grievance Officer and contact

In compliance with the DPDP Act, 2023 and Rule 3(2) of the IT Intermediary Rules, 2021:

Name: [GRIEVANCE_OFFICER_NAME]
Designation: Grievance Officer
Email: grievance@ribha.store
Address: [REGISTERED_OFFICE_ADDRESS]

We will acknowledge your complaint within 48 hours and resolve it within 15 days.

Privacy / data rights: privacy@ribha.store
Grievances: grievance@ribha.store
General support: support@ribha.store

End of Privacy Policy Ribha · ribha.store · Version 1.0 · [DATE]