Privacy Policy · Retro Verse

1. Who We Are

Retro Verse is a product line of Retro Verse Pvt. Ltd. ("Retro Verse", "we", "us", "our"), a company incorporated in India with its manufacturing unit in Haridwar, Uttarakhand and its marketing office at Sector 56, Gurugram, Haryana 122011.

This Privacy Policy applies to the website retroverse.in and any associated mobile or digital touchpoints (collectively, the "Service"). By accessing or using the Service, you acknowledge that you have read and understood this policy.

2. Information We Collect

Information you provide directly

Phone number — collected at account creation for OTP-based authentication. We do not store your phone number alongside any social-media identifier.
Full name and email address — collected at checkout or from your account profile. Email is optional but required for order confirmation emails.
Shipping address — including street, city, state, and PIN code — collected to fulfil your order.
Payment metadata — Razorpay provides us with a payment reference ID and payment status only. We do not receive or store your card number, CVV, UPI PIN, or full bank account details. Those remain with Razorpay.
Order history and product reviews — records of what you purchased and any reviews you submit.
Marketing opt-in preference — whether you have agreed to receive promotional communications.
Contact form submissions — your name, email, phone, and message if you reach out through our contact form.

Information collected automatically

Session data — we use session cookies (via Supabase Auth) to keep you logged in. These are first-party, functional cookies; no advertising networks read them.
Server logs — standard server logs may include your IP address, browser type, pages visited, and timestamps. These are retained for a maximum of 30 days for security and debugging purposes.

We do not currently use Google Analytics, Facebook Pixel, or other third-party tracking or advertising scripts. If this changes, we will update this policy and notify you.

3. How We Use Your Information

To authenticate you via OTP and maintain your account session.
To process, fulfil, and communicate about your orders — including sending order confirmation, dispatch, and delivery notification emails.
To display your order history, saved addresses, and submitted reviews in your account dashboard.
To send you transactional SMS messages for OTP and order status (via MSG91).
To send you promotional communications only if you have explicitly opted in. You can withdraw consent at any time from your account profile or by emailing us.
To detect and prevent fraud, abuse, and policy violations.
To comply with applicable Indian laws and respond to lawful requests from government or regulatory authorities.

4. How We Share Your Information

We do not sell, rent, or trade your personal information. We share it only with the following processors, strictly to provide the Service:

Supabase Inc. — our database and authentication provider. Data is stored in the ap-south-1 (Mumbai) region on Amazon Web Services infrastructure.
Razorpay Software Pvt. Ltd. — payment processing. Razorpay is a licensed payment aggregator regulated by the Reserve Bank of India. Their privacy policy governs data they collect during payment.
MSG91 (Walkover Web Solutions Pvt. Ltd.) — OTP and SMS delivery. Your phone number is transmitted to MSG91 solely to deliver authentication messages.
Resend Inc. — transactional email delivery. Your email address is transmitted to Resend solely to deliver order and account emails.
Logistics carriers (Delhivery, Bluedart, DTDC, India Post, or similar) — your name, delivery address, and phone number are shared with the carrier assigned to your shipment.

All third-party processors are contractually prohibited from using your data for their own marketing or sharing it further.

5. Data Retention

Account data — retained as long as your account is active. If you delete your account, we will erase your personal profile within 30 days, subject to our legal obligations (e.g., tax records must be retained for 8 years per Indian law).
Order records — retained for a minimum of 8 years as required by Indian GST and accounting regulations. The personal identifiers (name, address) may be anonymised after 3 years.
Server logs — maximum 30 days.
Contact form submissions — retained in email inbox for up to 1 year, then deleted.

6. Your Rights Under the Digital Personal Data Protection (DPDP) Act, 2023

As a data principal under India's DPDP Act, you have the right to:

Access — request a summary of the personal data we hold about you.
Correction — request correction of inaccurate or outdated personal data. You can update your name, email, and address directly from your account profile page.
Erasure — request deletion of your personal data, subject to our legal retention obligations.
Grievance redressal — raise a complaint with our Grievance Officer (see Section 10).
Withdraw consent — withdraw your marketing opt-in at any time without affecting your ability to purchase.

To exercise any of these rights, email us at privacy@retroverse.in with the subject line "DPDP Data Request". We will respond within 30 days.

7. Children's Privacy

Retro Verse products are formulated for adult men (18 years and above). We do not knowingly collect personal data from anyone under 18. If we become aware that we have inadvertently collected data from a minor, we will delete it promptly. If you believe a minor has registered, please contact us immediately.

8. Cookies

We use session cookies provided by Supabase Auth to maintain your logged-in state. These are strictly functional — they contain only an encrypted session token and are not used for advertising, cross-site tracking, or profiling. No third-party advertising or analytics cookies are placed on your device.

You can disable cookies in your browser settings, but doing so will prevent you from logging in to your account or completing checkout.

9. International Data Transfers

Retro Verse is an India-only service. Your data is stored in AWS Mumbai (ap-south-1) and processed by Indian or India-compliant vendors. If any data is transferred outside India (for example, to Resend's email delivery infrastructure), we ensure the transfer is governed by appropriate contractual safeguards consistent with India's data protection framework.

10. Grievance Officer

In accordance with the Information Technology (Intermediary Guidelines) Rules and the DPDP Act, we have appointed a Grievance Officer. You may contact our Grievance Officer for any privacy-related complaint at:

Name: [INSERT GRIEVANCE OFFICER NAME]
Email: privacy@retroverse.in
Address: Retro Verse Pvt. Ltd., Sector 56, Gurugram, Haryana 122011
Response time: We will acknowledge your complaint within 48 hours and resolve it within 30 days.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, for material changes, notify registered users by email. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.