Chhotto Delivery
Privacy Policy

Information Collection

We collect personal information primarily for account registration, enabling users to create and manage their profiles effectively. This data also facilitates the provision of delivery services, ensuring orders are accurately processed and delivered to the correct locations.

Personal Information

• Name
• Telephone number
• Address
• Photo for user avatars
• Messages for internal text messaging
• Location

Use of Information

We use personal information collected via our application for a variety of business purposes described below:

• Name for identification within Chhotto Delivery application
• Telephone number for authorization purposes only (OTP auth)
• Address for delivery person to know where to pickup goods for delivery
• Photo for user avatars
• Messages for internal text messaging
• Location is used for tracking Delivery Person and display on the map for Store Owner and Customers, and determine and pre-select country code for a phone number field and analytics purposes to improve user experience

Disclosure of Your Information

Chhotto Delivery application uses use Twilio, a third-party service, to send one-time password (OTP) codes as part of our secure login process. This helps verify user identity and enhances the security of account access.

Security of Your Information

To Third-party

Twilio employs industry-standard security measures to protect data, particularly focusing on encrypting data in transit. Here's how Twilio typically handles encryption:

• TLS (Transport Layer Security): Twilio uses TLS to encrypt data as it is transmitted over the internet. This ensures that any data sent between Twilio's servers and the app, including one-time passwords (OTPs), remains secure and cannot be intercepted by unauthorized parties
• HTTPS: All API communications with Twilio, including those involving the transmission of OTPs for login purposes, are conducted over HTTPS, which is HTTP secured through the use of TLS. This adds a layer of security that protects the integrity and confidentiality of the data being exchanged

These protocols ensure that data, while being transmitted to and from Twilio, is effectively shielded against eavesdropping, tampering, and forgery, maintaining the security and privacy of user information.

Within the application

We prioritize the security of your information by utilizing the SSL protocol to ensure that data in transit is encrypted and protected. Additionally, we implement auto-expiring tokens with a short lifespan of just 10 minutes to further safeguard access and interactions. Overall, our practices adhere to fundamental security requirements, maintaining a robust defense against unauthorized access and data breaches

Data Retention

To ensure our users' privacy, Chhotto Delivery application offers two methods for account and data deletion

From Application

For direct deletion within the app, navigate to the account settings, where you can remove all personal data associated with your account

Through an Email

Additionally, users seeking to delete their account externally can email ramana@plat4minc.com

‍