Privacy Policy

Overview

This policy explains what information COSMO Fancy Gifts (COSMO, we, us) collects when you use our website and app, how we use it, and the choices you have. By placing an order, creating an account, or otherwise using our services, you agree to the practices described here.

Information we collect

We collect information in these ways:

• Account information: name, email address, and password (managed securely via Firebase Authentication — we never see or store your raw password).
• Order information: delivery address, phone number, order contents, gift message/wrapping preferences, payment method (Cash on Delivery or UPI), and order history.
• Delivery location: for Quick Delivery orders, the precise pinned location you select on the map, used solely to confirm you are within our 5km delivery radius and to route your order to a delivery agent.
• Contact form submissions: your name, email, phone (optional), and message, when you write to us.
• Cart contents: stored locally in your browser (localStorage), not on our servers, until you check out.

How we use your information

• To process and fulfil your orders, including coordinating delivery or shipping.
• To communicate with you about your order status, including via WhatsApp if you initiate contact through our WhatsApp button.
• To respond to messages sent through our contact form.
• To maintain your account and order history.
• To improve our catalog, pricing, and service based on order and delivery patterns.

We do not sell your personal information to third parties, and we do not use it for third-party advertising.

Service providers we use

We rely on a small number of service providers to operate COSMO, each of which processes data on our behalf under their own privacy and security practices:

• Firebase (Google): authentication and our order/product database.
• Cloudinary: hosting for product images and any images you or we upload.
• OpenStreetMap / Leaflet: map tiles used for delivery-location pinning and tracking.
• WhatsApp: if you tap our WhatsApp button or receive a delivery update via WhatsApp, that conversation is subject to WhatsApp’s own privacy policy.
• QR code generation: if the admin-configured UPI payment method does not have a pre-uploaded QR image, we generate one on the fly via a third-party QR image API, which receives the UPI payment string needed to render the code — no personal or order information is included in that request.

Data retention

We keep your account and order history for as long as your account is active, so you can view your order history and reorder easily. If you would like your account or personal data deleted, contact us and we will process the request, subject to any records we are required to keep for legal or accounting purposes.

Your choices

• You can review and update your saved addresses and profile from your account page at any time.
• You can decline to share your device’s location — Quick Delivery simply will not be available without it.
• You can request access to, correction of, or deletion of your personal data by contacting us.

Children’s privacy

COSMO is not directed at children, and we do not knowingly collect personal information from anyone under 18.

Changes to this policy

We may update this policy as our services change. We will update the effective date above when we do — please check back periodically.

Contact us

Questions about this policy or your data? Reach us through our Contact page.