Privacy Policy

This Privacy Policy explains how Devoluxe Cons Private Limited ("DevoSmart", "we", "us", "our") — the company that owns and operates www.devosmart.in — collects, uses, discloses, protects, and retains your personal data when you visit, register on, or purchase from our website. We are headquartered in Bengaluru, Karnataka, India.

By using our Site, creating an account, or placing an order, you consent to the practices described in this Policy.

Depending on how you interact with us, we may collect:

• Account data (when you register): full name, email address, mobile number (with +91 country code), and an encrypted password.
• Order & shipping data: shipping address, city, state, pincode, contact phone number, and order history.
• Payment metadata: transaction reference, payment method (UPI/card/netbanking), last-4 digits of card (masked), and success/failure status. We do not store full card numbers, CVV, PIN, UPI PIN, or net-banking credentials — these are handled exclusively by our PCI-DSS compliant payment gateway partners.
• Device & usage data: IP address, browser type, device identifiers, pages visited, time on page, referral URL.
• Communication data: emails, chat transcripts, and support tickets you send us.

• Create and manage your DevoSmart account.
• Process, fulfil and ship your orders and issue GST invoices.
• Provide customer support, respond to enquiries, and process returns and refunds.
• Send transactional communications (order confirmations, dispatch alerts, delivery updates) via email and SMS.
• Send promotional emails only if you have explicitly opted in — you can unsubscribe at any time.
• Detect and prevent fraud, abuse, and violations of our Terms.
• Comply with legal obligations (GST filings, statutory reporting).
• Analyse aggregate usage to improve product listings, search, and site performance.

We use cookies and equivalent browser storage (localStorage, sessionStorage) to:

• Keep you signed in to your DevoSmart account.
• Remember items in your shopping cart across sessions.
• Measure site performance and understand how visitors use our pages.
• Prevent fraud and secure your session.

You can control or disable cookies through your browser settings. Please note that certain features (such as staying signed in and keeping items in your cart) may not work if cookies are disabled.

Payments on DevoSmart are processed exclusively via trusted third-party payment gateways that are certified PCI-DSS Level 1 compliant. When you make a payment:

• You are redirected to (or interact with an embedded frame of) our payment partner.
• Your card number, CVV, UPI PIN, and net-banking credentials are entered directly on the payment partner's secure interface — they are never sent to, seen by, or stored on DevoSmart's servers.
• We receive only a transaction reference, status, method, and masked last-4 digits for reconciliation and invoicing.

All communication between your browser, our servers, and payment partners is encrypted end-to-end using TLS 1.2 or higher.

We do not sell your personal data. We share it only with:

• Logistics partners — name, address, phone number for delivery.
• Payment gateways — for processing transactions.
• Cloud & analytics service providers — under strict confidentiality and data-processing agreements.
• Regulatory & law-enforcement authorities — when compelled by valid legal process under Indian law.

We retain your personal data only for as long as necessary to fulfil the purposes described in this Policy, comply with our statutory obligations (typically a minimum of 8 years for tax and GST records under Indian law), resolve disputes, and enforce our agreements.

Under applicable Indian data protection law, you may:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (subject to legal retention).
• Withdraw consent for marketing communications.
• Nominate another individual to exercise these rights on your behalf in the event of death or incapacity.
• Lodge a complaint with the Data Protection Board of India.

To exercise any of the above, email us at privacy@devosmart.in or contact our Grievance Officer (details below).

We implement industry-standard technical and organisational safeguards — including TLS encryption, hashed and salted password storage, restricted internal access, and regular security reviews — to protect your data against unauthorised access, alteration, disclosure, or destruction. However, no method of internet transmission or electronic storage is 100% secure, and we cannot guarantee absolute security.

Our services are intended for users aged 18 and above. We do not knowingly collect personal data from children. If you believe a child has provided us data, please contact us and we will delete it promptly.

We may update this Policy from time to time to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page indicates when the Policy was last revised. We encourage you to review it periodically.