Privacy Policy

1. Who this covers

It covers people who use coreve (Store Owners and their teams, Digital Franchisees, Affiliates, and coreve staff) and, in the way described below, the customers of the stores that use coreve.

• For your own account (your name, mobile number and so on), coreve decides why and how it is used, so we are responsible for it.
• For a store's customers, the Store Owner decides why their information is used and we process it on the Store Owner's behalf, to run the platform for them. A customer who wants to see or remove their information should contact the store they bought from; we will help the store do it.

2. What we collect

• Account details: name, mobile number, email address, city, your role, and the one-time codes used to log in (we do not keep passwords because there are none). We also keep the time and version of the Terms you accepted.
• Business details (Store Owners): business name, address, billing address, GSTIN, website, the platform you use, and your team members' names, mobile numbers, emails and roles.
• Partner details: city, referral code, the territory allocated to a Digital Franchisee, who recruited whom, the agreement you accepted, and your payout details (UPI ID, or bank account holder, number, IFSC and bank name), which are stored encrypted.
• Order and customer data from a store: when a Store Owner connects their store, we receive order details (items, amounts, status) and customer details that come with the order (name, mobile number, email, delivery address and PIN code). In addition to referral links, Mycoreve matches orders to an appointed Digital Franchisee's allocated territory using the order's delivery city and PIN code received from the store's webhook, so that partner margin can be worked out accurately.
• Referral tracking: a referral code in a link, a cookie on the store's own website that remembers it, link clicks, and the time of the visit.
• Billing details: plan, invoices, payment status and, from Razorpay, a token for a saved UPI or card and a masked label such as “Visa ending 4242”. We do not receive your full card number, CVV or UPI PIN.
• Technical and security data: IP address, device and browser information, and a log of important actions in your account (who did what and when), kept for security and to settle disputes.
• Messages: what you send us when you ask for help, and notifications we send you.

3. How we use it

• to create and run your account, log you in and keep it secure;
• to track referrals, work out and show commission, and record payments between Store Owners and Partners;
• to bill Store Owners, issue GST invoices and collect payment;
• to send service messages: one-time codes, approvals, billing and security notices, and changes you or others make to your account;
• to give support, find and fix problems, prevent fraud and abuse, and keep the platform working and fast;
• to meet legal duties (tax, accounting, responding to lawful requests) and to protect our rights.

We use your information where you have given consent, where it is needed to give you the service you asked for, or where the law allows or requires it. We do not sell personal information, and we do not use it for third-party advertising.

4. Who can see what

• Digital Franchisees and Affiliates never see a customer's mobile number, email address, or full street address. They see only what they need to track their territory orders: the order number, order date, customer's first name, city/locality and delivery PIN code, products ordered, order amount counted for margin, order/return-window status, and their calculated partner margin.
• A Store Owner and the team members they allow see their own store's customers, orders and Partners, according to each person's role.
• A Partner's payout details are shown masked to the Partner. The Store Owner of the store they work for can see them in full, so that they can pay. Opening them is logged.
• coreve staff can see information only as far as their role needs, to run and support the platform. Staff access to a store, and any change a staff member makes to a person's details, is written to a log.

5. Who we share it with

We share information only with people who help us run coreve, and only what they need:

• Razorpay for taking payments, saving a payment method and sending payment links;
• SMS and messaging providers to send one-time codes and notices;
• hosting, database and security providers that store and protect the platform;
• the Store Owner you work with, and for a Digital Franchisee's promoters, that Digital Franchisee, as described above;
• professional advisers, auditors and authorities where the law requires or allows, for example for tax and legal compliance;
• a buyer or successor, if coreve's business is sold or merged, under the same promises as this policy.

Our providers may be located in or outside India. We choose providers that protect information with appropriate safeguards and we ask them to use it only for our purposes.

6. Cookies and tracking

• Sign-in cookie: keeps you logged in. It is needed for the platform to work.
• Referral cookie: when someone follows a Partner's link to a store, a small script on that store's own website remembers the referral code so the order can be credited. It carries a code, not your name or contact details.
• Webhook territory matching: in addition to referral link cookies, Mycoreve matches orders to an appointed Digital Franchisee's allocated territory using the order's delivery city and PIN code received directly via store webhooks at checkout.
• We do not use advertising or cross-site tracking cookies on coreve.

7. Payments

Card and UPI details are entered in Razorpay's own secure window and handled by Razorpay under its own privacy policy. coreve keeps only Razorpay's token and a masked label so it can charge your saved method. Payment details you give to be paid as a Partner (UPI or bank) are stored encrypted.

8. How long we keep it

• We keep account information while your account is active, and for a reasonable time afterwards for support, security and legal claims.
• After a Store Owner cancels, its Partners keep read-only access for 60 days.
• We keep invoices, payment and accounting records for as long as tax and company law require.
• The log of actions in accounts is kept for security and to settle disputes. When information is no longer needed, we delete it or make it anonymous.

9. How we protect it

We use encryption for payment details and secrets, one-time-code login, role-based access so people see only what they should, activity logs, and limits on staff access. No system is perfectly secure, so please protect your phone and your codes, and tell us at once if you think your account was used by someone else.

10. Your choices and rights

You can ask us to:

• tell you what personal information we hold about you and why;
• correct or complete it (you can fix many details yourself in Settings);
• erase it, where we no longer need it for the purposes or the law above;
• stop using it where you withdraw consent (this may mean we can no longer give you the service);
• help you with a complaint, and under the Digital Personal Data Protection Act, 2023 you may also name another person to exercise these rights for you if you cannot.

To use a right, contact us as described below. We may need to confirm who you are first. If you are not satisfied with our answer, you may complain to the Data Protection Board of India once it is operating, or to any other authority that has power over the matter.

11. Children

coreve is for businesses and adults (18 and over). We do not knowingly collect information from children. If you think we have, tell us and we will remove it.

12. Changes to this policy

We may update this policy. We will change the date above and, for important changes, tell you in the dashboard or by message. The version in force is always the one on this page.

13. Contact and grievances

For any question, request or complaint about your information, write to COREVE LIFESTYLE PRIVATE LIMITED, 21/152, CORRAZON, KOCHI UNIVERSITY, Kalamassery, Ernakulam, Kerala - 682022. Email: connect@mycoreve.com. You can also message us on WhatsApp: +91 97782 15961.

Mark your message “Privacy request” or “Grievance” and tell us your name and the mobile number on your account. We aim to acknowledge it within 3 working days and to resolve it within the time the law allows.