Mobile Application Privacy Policy

1. Introduction & Scope

Welcome to ARS BAZZAR. This Privacy Policy outlines how ARS INDUSTRY ("we", "our", or "us") collects, uses, processes, discloses, and protects your personal data when you use our mobile application ("App") available on the Google Play Store.

ARS BAZZAR operates as a local e-commerce platform originating from Domkal, Murshidabad, West Bengal, with upcoming expansion across the entire territory of India. We are committed to protecting your privacy in strict accordance with the India Digital Personal Data Protection (DPDP) Act, the General Data Protection Regulation (GDPR) where applicable, and Google Play Developer Program Policies (including the Google User Data Policy).

By downloading, installing, or using ARS BAZZAR, you explicitly acknowledge the data practices described in this document.

2. Data Fiduciary / Controller

Under the India DPDP Act, ARS INDUSTRY acts as the Data Fiduciary, determining the purpose and means of processing your personal data. Our operations are headquartered at:

3. Legal Basis for Processing

We process your personal data under the following legitimate legal frameworks:

• User Consent: When you voluntarily grant runtime permissions or sign up for services within the App.
• Contract Fulfillment: When processing your name, address, and mobile number to fulfill and deliver your retail orders.
• Legal Obligations: To maintain transparent accounting records, verify authentic transactions, and comply with applicable local statutory laws.
• Legitimate Business Interests: To optimize application speed, verify system reliability, mitigate fraud, and maintain secure support communication.

4. Information We Collect & How We Use It

We only collect data that is strictly necessary to provide, optimize, and secure our local e-commerce services. This collection falls into the following categories:

A. Account and Authentication Data

To access ordering capabilities, users must authenticate. User authentication is securely managed using Firebase Authentication. Passwords are handled by Firebase according to Google's security infrastructure. Alternatively, if you log in via Google Sign-In, we receive tokenized profile information (name, email, and profile picture URL) authorized by your Google account configuration.

B. Transaction and Payment Information

Presently, ARS BAZZAR operates exclusively on a Cash on Delivery (COD) fulfillment model. We do not collect, process, or store credit card numbers, bank account details, or net banking credentials. To support future technical scalability, updates may introduce Unified Payments Interface (UPI) and other digital payment aggregators. Any such integration will occur through secure, PCI-DSS compliant third-party SDKs, and this policy will be updated accordingly.

C. User-Generated Content (UGC)

Our application does not include public-facing profiles, social walls, or community commentary zones. User-generated content is strictly restricted to functional feedback mechanisms and private Customer Support Chat messages. This transactional text is stored securely in our database to help resolve your operational inquiries.

D. Product Media Hosting

We integrate Cloudinary infrastructure for optimized delivery of product imagery. Currently, Cloudinary is used only for hosting administrator-uploaded product images. No personal user media is currently uploaded.

5. Android OS Permissions & Runtime Disclosures

In accordance with the Google Play User Data Policy, we provide transparent declarations regarding the explicit permissions our App requests. We never scan unrelated storage directories, silently monitor background actions, or sell permission-gated data assets.

6. Cookies and Similar Technologies

The Android application itself does not use browser cookies to log your habits. However, underlying integrations including Firebase SDKs and Google Play Services may automatically deploy localized hardware device identifiers, analytical tokens, or temporary instance IDs. These are strictly used to authenticate user roles, secure data transmission channels, monitor performance thresholds, and keep system functionality working reliably.

7. Third-Party Data Processors

To deliver modern cloud architecture, we partner with sub-processors who adhere to stringent privacy standards. These entities are bound by contractual data protection terms and are prohibited from using your information for independent marketing pursuits.

8. International Data Transfers

Because ARS BAZZAR relies on cloud networks provided by Google and Firebase, the information you supply may be routed, processed, and stored on secure data architecture located across multiple geographical regions. Google manages these nodes in accordance with standard international contractual clauses, ensuring data protection measures follow you across boundaries to safeguard your profile integrity.

9. Foreground Service Architecture & Battery Impact

Our app respects standard mobile computing restraints. The integration of FOREGROUND_SERVICE_DATA_SYNC is entirely dependent on user preference for interactive support. It presents a persistent, non-dismissible system notification while active, ensuring you are fully aware that a secure sync pipeline is running. You may close the support channel at any time to instantly terminate this foreground process and eliminate any supplementary battery draw.

10. Data Retention & Deletion Rights

We preserve your account history only as long as your profile remains active or as required by Indian legal frameworks governing financial transactions and corporate compliance.

11. Information Security Standards

We implement multi-layered security safeguards to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

• Transport Layer Security: All data transmissions between the ARS BAZZAR client application and our cloud back-ends are strictly enforced over encrypted HTTPS/TLS pathways.
• Identity Protection: Firebase Authentication protocols protect administrative access tiers, ensuring your operational profiles remain isolated.
• Infrastructure Control: Database read/write parameters are strictly regulated via server-side security logic. Only vetted corporate administrators can access backend panels to fulfill orders.

Disclaimer: We use industry-standard security measures and continuously improve our security practices. We do not make claims regarding unverified cryptographic methods.

12. Children's Privacy

ARS BAZZAR is engineered for a general audience. It is not designed or intentionally engineered to collect, store, or process personal data from children under the age of 13. If you are a parent or legal guardian and discover that your child has provided personal information without your supervision, please contact our support desk immediately. We will take swift corrective measures to scrub that data from our live databases.

13. Your Rights Under Indian DPDP Act and GDPR

As a data principal, you hold explicit structural freedoms over your data assets. These rights include:

1. Right to Access & Confirmation: You can review the exact operational data points we hold regarding your profile.
2. Right to Correction & Erasure: You can demand the updating of inaccurate coordinates or the absolute deletion of your historical footprint.
3. Right to Withdraw Consent: You can revoke application runtime permissions (such as Location, Contacts, or Notifications) directly through your smartphone operating system settings at any moment.
4. Right to Grievance Redressal: You have the right to register issues regarding potential data mishandling with our dedicated support apparatus.

14. Updates to This Privacy Policy

ARS INDUSTRY retains the right to modify this Privacy Policy to reflect changing regulatory requirements, legal standard shifts, or app updates. When adjustments occur, we will alter the "Last Updated" timestamp at the top of this document. We encourage users to periodically review this page to stay informed about how we protect their information.

15. Contact & Grievance Redressal

If you have questions, complaints, or feedback regarding our privacy practices, or if you wish to exercise your legal rights, please contact our support team: