This policy explains what personal data Diemeco ("we") collects through The Shop by Diemeco at shop.diemeco.com ("The Shop"), why, who sees it, and what control you have. We handle personal data in line with India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.
1. What we collect
- Account: your mobile number, and your 6-digit login code, kept only in a one-way coded form that cannot be read back. If you add a recovery email, we keep it to help you back into your account.
- Your shop: shop name, what you sell, the items you tick, GSTIN (if any) and the date we checked it, state, city, area, address, shop phone, opening hours, weekly off and delivery. When a GSTIN is checked, we keep what the GST public register shows for it.
- Asks and replies: the asks workshops send you, your replies (price, ready time), how quickly you reply, and the ratings workshops give your shop.
- Your Digital Office: the quotes, orders, bills, receipts, notes, customers and suppliers you keep there, handled as described in section 3.
- Plan: once payments start, the plan, amount, date, status and receipt. Card, UPI and bank details are handled by the payment provider, not by us. We never ask for your UPI PIN, card or bank login.
- Usage and security: your language and theme, notifications you turn on, records of important actions, and technical data such as IP address needed to keep the service secure and to limit abuse.
2. Why we use it
- To create and secure your account, and to show your shop to workshops on Diemeco that need what you sell.
- To send you workshops' asks and the notifications you turn on, and notices about your account and plan.
- To provide your Digital Office, and once payments start, to take payments, issue receipts and keep tax records.
- To help you when you ask for help, to keep the service secure, and to enforce our Terms.
We do not sell your personal data, and we do not show ads.
3. Your customers and suppliers
The details of the customers and suppliers in your Digital Office are your records. You decide what to keep and why; we store and process them only on your behalf. We never contact your customers or suppliers, and never use their names or numbers for anything else.
4. Who sees what
- Workshops on Diemeco looking for supplies see your shop's name, what you sell, your area and city, hours, delivery, usual reply time and ratings. A workshop sees your shop phone only after you reply Have it or Can get it to its ask. They never see your GSTIN, your sign-in number or your Digital Office.
- Our team: to help with your account and keep The Shop fair, our support team can see your shop's details, your sign-in number, your plan, and counts of asks, replies and ratings; for your Digital Office, only how many records you have, not what is in them, except to fix a problem you report or where the law requires it.
- Service providers (data processors) who process data for us, only on our instructions and under written terms: Supabase (database, sign-in and file storage, in Mumbai, India), Vercel (application hosting, in Mumbai, India), GitHub (Microsoft), which stores our private weekly backups, an email provider for recovery emails, an SMS provider for sign-in codes once those start, and the push-notification services of your phone or browser, if you turn notifications on. Some of these providers may process data outside India. When we add a provider, such as an online payment provider, we will name it here first.
- Authorities where the law requires it, or to protect rights, safety or against fraud.
5. Cookies and notifications
We use only the cookies needed to keep you signed in, to remember your language and theme, and to protect the service. We do not use advertising cookies. We keep anonymous counts of visits to our public pages, with no cookie and no personal identifier. If you turn on notifications, we store the address your device gives us so that we can send them, and you can turn them off at any time.
6. How long we keep it
- Your account, shop and Digital Office: while your account is open. When you close it, it is first closed for 30 days; signing in again with the same mobile number in that time restores it. After 30 days they are deleted for good.
- Asks and replies: while your account is open, so that both sides can look back at them.
- Receipts and payment records for plans: 8 years, as tax and accounting law requires.
- Backups: a full copy of the database is made every week and kept for 90 days; a copy of uploaded files is kept for 35 days. Both are private and then deleted automatically. We use backups only to recover from an accident.
- Security and access logs: at least 1 year, as the Digital Personal Data Protection Rules, 2025 require, then deleted.
7. Your rights
You may ask to access, correct or delete your personal data, withdraw consent where we rely on it, and nominate someone to exercise these rights for you. Write to the Grievance Officer below: we acknowledge within 24 hours and respond within the time the law prescribes. If you are not satisfied, you may complain to the Data Protection Board of India.
8. Security
Data is encrypted in transit; files are kept in private storage and released only through short-lived secure links; access to records is restricted by the database itself, not only by the application. No system is perfectly secure, so please protect your phone and do not share your code. If a breach affecting your data occurs, we will tell you without delay and report it to the Data Protection Board of India within 72 hours, as the law requires.
9. Children
The Shop is for business use by adults. We do not knowingly collect data from anyone under 18.
10. Changes
We may update this policy and will show the new date above; if a change is significant we will tell you in the app. See our Grievance Policy for how to complain.
11. Contact and Grievance Officer
Grievance Officer: Amish Pathan, Diemeco, Bhagwati Society-1, Dudhsagar Road, Shakti Industrial Zone, Rajkot, Gujarat, India, 360003. Email: support@diemeco.com.