Privacy policy

CordeliaApps builds and operates the platform that gives independent stores their own shopping app. We are based in India and work with stores in India, the United Kingdom, the United States and across Europe. For the data described below, we are the controller, and you can reach us at support@cordeliaapps.com.

If you allow it, we use Google Analytics to understand how people find and use this site — pages viewed, the site that referred you, rough location derived from your IP address, and your device and browser type. We also record when someone opens the sign-up dialog and when an account is created, so we can tell whether the site actually helps.

Nothing is loaded until you accept. Decline and no analytics script is downloaded, no request is made and no cookie is set. We do not use analytics for advertising and we do not sell data to anyone.

Our host, Vercel, keeps short-lived server logs including IP addresses, as any web server does. That is necessary to serve and secure the site.

You can change your mind at any time, and withdrawing is as easy as allowing. Declining stops anything further being sent; it cannot recall what was already delivered.

Creating a store account gives us your email address and a password, which is handled by Firebase Authentication and never visible to us. Alongside it we keep a record of your account, the stores you own, and when it was created.

Running a store means we store what you put into it: your store's name and settings, your catalog of products, categories, brands, banners and coupons, the orders your shoppers place, and any images you upload. Your Razorpay key identifier is stored so payments can settle to you; the corresponding secret is encrypted at rest.

When shoppers use your store's app, their accounts, addresses, carts, orders and reviews sit in the same platform. For that data you are the controller and we act on your behalf as a processor — we handle it to run the service for you and do not use it for our own purposes.

Google (Firebase and Google Analytics) for authentication, database, file storage and analytics. Vercel for hosting. Razorpay for payments, where a store has connected an account. Each processes data on our instructions, and this may involve transfers outside your country.

Account and store data stays for as long as the account is open. Delete your account and we remove your profile and the store data tied to it. Orders are kept as a business record — they are a store's sales history and may be needed for tax or a dispute, so they are not erased on request. Analytics data is retained by Google under that product's own retention settings.

You can ask for a copy of your data, ask us to correct it, ask us to delete it, or object to how we use it. Email us and we will answer within a month.

If you are in the United Kingdom or the European Union you keep every right your local law gives you, including the right to complain to your data protection authority. Nothing here reduces those rights.

We update this policy as the product changes, and the date at the top shows when it last changed. If a change matters to you, we will say so rather than quietly reposting it.