Legal
Privacy Policy
Last updated 1 September 2026
This policy explains what Third Invention collects when you browse or buy, why we collect it, and what we do with it. We have tried to write it in plain language rather than legalese.
What we collect
When you browse. Nothing that identifies you. Your bag and wishlist are stored in your own browser and are not sent to us until you check out.
When you create an account. Your email address, and a password you choose. If you sign in with Google, we receive your name, email address and profile picture from Google — nothing else, and never your Google password.
When you place an order. The delivery details you enter: name, mobile number, email address, full address with PIN code, and any delivery notes you add. We also keep what you ordered and what you paid.
When you contact us. Whatever you choose to put in your message.
What we do not collect
We never see your card details. Payments are handled entirely by Razorpay on their own systems. Your card number, CVV and UPI PIN are never sent to us and never stored by us. We keep only a payment reference so we can match a payment to your order.
We do not run advertising trackers, analytics scripts, or third-party pixels on this site. We do not build profiles of you, and we do not sell or rent your personal information to anyone.
Cookies and browser storage
We use a small number of strictly necessary items, and nothing else:
- A session cookie that keeps you signed in. Signing out removes it.
- Two entries in your browser's local storage that remember your bag and wishlist. These never leave your device until you check out, and clearing your browser data removes them.
There are no advertising or analytics cookies, which is why you are not asked to accept any.
Who else handles your data
We use a small number of established providers to run the shop. Each receives only what it needs to do its job:
- Supabase — stores your account and your orders.
- Razorpay — processes payments and holds the payment details we never see.
- Vercel — hosts the website and keeps short-lived technical logs.
- Cloudinary — stores and delivers the product photographs.
- Google — only if you choose to sign in with Google.
- Our delivery partners — they receive your name, address and mobile number so they can deliver your order.
How long we keep it
Order records are kept as long as we are required to for tax and accounting purposes. Your account details are kept until you ask us to delete them.
Your choices
You can ask us to:
- tell you what personal information we hold about you,
- correct anything that is wrong,
- delete your account and personal details, except records we must keep by law,
- stop sending you marketing email, at any time.
Write to thirdinvention@gmail.com and we will respond as quickly as we can.
Keeping it safe
The site is served over HTTPS. Passwords are stored only as cryptographic hashes — we cannot read them. Access to order data is restricted to the people who need it to fulfil your order. No system is perfect, but we take this seriously and fix problems quickly when we find them.
Children
This shop is intended for adults. We do not knowingly collect information from children.
Changes
If this policy changes we will update the date at the top of this page. Material changes will be communicated to account holders by email.
Contact us
Questions about this policy, or about your data, can go to thirdinvention@gmail.com or +91 8606773626.
See also our Terms of Service.