Privacy Policy

Welcome to Furbiko, operated by Furbiko Technologies India Private Limited ("Furbiko", "we", "us", or "our"). We are committed to safeguarding your personal data and upholding your right to privacy in compliance with India’s Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Consumer Protection (E-Commerce) Rules, 2020.

This Privacy Policy explains how we collect, use, store, process, disclose, and protect personal data when you use the Furbiko consumer mobile application (iOS & Android), the Furbiko Progressive Web Application (PWA), and our website available at https://furbiko.com (collectively, the "Platform").

1. Information We Collect

We collect personal data directly from you when you register, browse, purchase, or sell devices on our Platform, as well as automatically through your device interactions.

A. Information You Provide Directly

• Identity & Profile Details: Full Name, Email Address, Mobile Phone Number, Gender, and Profile Avatar.
• Delivery & Billing Addresses: Recipient Name, Contact Number, Street Address Line 1 & 2, Landmark, City, State, and Postal Pincode.
• Order & Purchase Information: Items purchased (including model, condition, specifications, and serial/IMEI numbers), total order value, coupons applied, and invoices generated.
• Payment & Refund Details: Selected payment method (Prepaid Online or Cash on Delivery). For COD return refunds, we collect your bank Unified Payments Interface (UPI) ID to transfer approved refunds directly to your account.
• User-Generated Content & Reviews: Star ratings, textual reviews, and customer photos of received products uploaded to the Platform.
• Customer Support & Warranty Communications: Messages, feedback, service requests, warranty claims, and return requests submitted via customer support.
• Sell on Furbiko (Device Trade-in Details): Device brand, model, storage, physical condition self-assessment, IMEI number, and government-issued identity proof (such as Aadhaar, Voter ID, or Driving License) required by law for second-hand device ownership transfer to prevent trafficking in stolen property.

B. Information Collected Automatically

• Device & Hardware Identifiers: Device manufacturer, hardware model, operating system version, browser type, IP address, and unique app instance identifiers.
• Push Notification Tokens: Firebase Cloud Messaging (FCM) tokens used exclusively to transmit order lifecycle notifications, tracking milestones, and service alerts.
• App Usage & Diagnostics: Pages viewed, search keywords, filters applied, app launch timestamps, crash logs, and performance metrics.

C. Sensitive Payment Data Disclaimer

All online payment processing is managed by our Reserve Bank of India (RBI) authorized payment gateway partner, Razorpay, using PCI-DSS Level 1 certified security and tokenization. Furbiko never collects, processes, or stores your credit card numbers, debit card numbers, CVVs, expiry dates, or banking net-banking passwords on its servers.

2. Device Hardware & System Permissions

The Furbiko application may request specific device permissions. You can grant, deny, or revoke these permissions at any time via your device operating system settings:

• Camera Permission: Used exclusively when you choose to take live photographs for product reviews, document proof for return requests (minimum 3 photographs required), or device physical assessment for trade-ins. The camera is never accessed in the background.
• Photos & Storage Permission (Photo Library): Used to allow you to select and upload existing images of delivered products, warranty invoices, or return inspection evidence from your photo gallery.
• Location Permission (Approximate or Precise): Used with your consent to automatically detect delivery pincodes, confirm serviceability with our logistics partner (Delhivery), and prevent delivery dispatch errors.
• Installed UPI Applications Query (Android): Used solely during the checkout process to detect installed UPI payment apps (such as Google Pay, PhonePe, Paytm, BHIM, Cred) so you can make seamless one-click UPI intent payments.
• Push Notifications Permission: Used to deliver critical real-time alerts regarding order placement, shipment tracking, out-for-delivery milestones, price drops, and account security.

3. Purpose and Legal Basis for Processing (DPDP Act, 2023)

Under the DPDP Act, we process your personal data under the lawful grounds of your explicit, informed consent and for specific legitimate business uses:

1. Order Fulfillment & Delivery: To pack, dispatch, transport, and deliver purchased goods to your designated address via authorized courier partners.
2. Payment Processing & Accounting: To authenticate payment transactions, issue GST-compliant tax invoices, and process refunds.
3. Warranty & Customer Care: To administer Furbiko’s certified warranty protection, verify repair requests, and facilitate 7-day returns.
4. User Authentication & Account Security: To verify your mobile number via One-Time Password (OTP), prevent identity fraud, and detect unauthorized account access.
5. Transactional Notifications: To provide SMS and push notification updates regarding your order, shipment tracking, and warranty expiry.
6. Service Improvement & Quality Assurance: To analyze user experience, optimize catalog performance, and maintain platform stability.
7. Legal Compliance: To satisfy mandatory statutory obligations under Indian tax laws (GST Act), consumer protection regulations, and lawful directives from judicial authorities.

4. Data Sharing and Third-Party Disclosures

We do not sell, rent, monetize, or trade your personal data. We disclose your data solely to trusted service providers bound by strict contractual confidentiality obligations:

• Logistics Partners (Delhivery): Your name, delivery address, postal pincode, and contact telephone number are shared to execute delivery, tracking, and reverse pickup.
• Payment Gateways (Razorpay): Transaction identifiers, billing amounts, and customer contact details are shared to authorize and settle electronic payments.
• Authorized Outlets / Sellers: When purchasing items fulfilled by verified marketplace sellers, the specific sub-order items, sub-order number, and destination details are shared to facilitate dispatch.
• Communication & Infrastructure Providers: SMS OTP gateways (Fast2SMS) and Google Firebase (push notifications and crash diagnostics) for service delivery.
• Legal & Law Enforcement Authorities: Disclosed only when legally required under summons, court order, or formal investigation under applicable Indian law.

5. Data Security Measures

Furbiko employs robust technical, administrative, and physical security measures in accordance with ISO/IEC 27001 principles and Rule 8 of the Information Technology SPDI Rules, 2011. These include:

• End-to-end Transport Layer Security (TLS 1.2/1.3) encryption for all data in transit across our APIs, PWA, and mobile apps.
• Secure cloud infrastructure with automated intrusion detection, network firewalls, and least-privilege role-based access control (RBAC).
• Encrypted data storage at rest for sensitive customer credentials and personal profiles.
• Automated security scanning, vulnerability assessments, and dependency integrity audits.

6. Data Retention and Account Deletion

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, satisfy active product warranty periods, and comply with mandatory statutory retention periods under Indian law (e.g., maintaining financial and tax records for 8 years under the Companies Act and GST Act).

Right to Account Deletion & Data Erasure

You have the unconditional right to request the permanent deletion of your Furbiko account and associated personal data at any time. To initiate account deletion:

• Send an email from your registered email address to app@furbiko.com with the subject line "Account Deletion Request" along with your registered mobile number.
• Upon verification, your profile, addresses, device tokens, and personal identifiers will be permanently anonymized or deleted from our active databases within thirty (30) days, subject only to statutory record-retention requirements under Indian tax and commercial law.

7. Your Rights as a Data Principal (DPDP Act, 2023)

Under the Digital Personal Data Protection Act, you possess statutory rights regarding your personal data:

• Right to Access: You may request a summary of the personal data we hold about you and the processing activities undertaken.
• Right to Correction & Erasure: You can edit inaccurate information directly within your App Account profile or request the correction or erasure of outdated data.
• Right to Grievance Redressal: You have the right to register a grievance with our designated Grievance Officer regarding any aspect of data handling.
• Right to Nominate: You may designate an authorized representative to exercise your data rights in the event of death or incapacity.
• Right to Withdraw Consent: You may withdraw your consent for future data processing at any time by contacting our support team or updating app permission toggles.

8. Children's Privacy

The Furbiko Platform is intended for individuals who are at least eighteen (18) years of age or competent to contract under the Indian Contract Act, 1872. We do not knowingly collect personal data from minors under 18 years of age without parental or legal guardian consent. If we become aware that personal data of a minor has been collected without verifiable guardian consent, we will promptly delete such data.

9. Cookies & Local Storage

Our Progressive Web App (PWA) and website utilize secure browser local storage and essential session cookies to remember your login session, shopping cart items, and user preferences. We do not use intrusive third-party cross-site tracking cookies. You can manage or clear local storage through your browser settings at any time.

10. Updates to this Privacy Policy

We may periodically revise this Privacy Policy to reflect changes in our operational practices, new features, or statutory regulatory amendments. When changes are made, the revised policy will be posted on this page with an updated "Effective Date". Your continued use of the Platform after the posting of modifications indicates your acknowledgement of the updated terms.

11. Grievance Redressal & Contact Information

In accordance with the Information Technology Act, 2000 and rules made thereunder, and the Consumer Protection (E-Commerce) Rules, 2020, the contact details of the designated Grievance Officer for Furbiko are published below: