We only collect personal information that is reasonably necessary to fulfill your orders, provide customer support, ensure secure transactions, and operate our e-commerce platform.

We use the personal information we collect for the following specific, legitimate business purposes:

• Order Processing & Fulfillment: Verifying order details, reserving inventory, packaging products, generating GST-compliant tax invoices, and delivering items to your address.
• Payment Verification: Facilitating secure online payment processing through our authorized payment partner and verifying transaction signatures.
• Transactional WhatsApp Messages: Sending immediate order confirmations, downloadable PDF tax invoices, dispatch alerts, and live tracking numbers directly to your WhatsApp number.
• Transactional Emails: Sending digital receipts, tax invoices, order status changes, and shipping updates.
• Customer Service & Support: Responding to inquiries, resolving delivery questions, and processing return or refund requests.
• Security & Fraud Prevention: Protecting our website, preventing fraudulent transactions, verifying payment integrity, and maintaining system security.
• Legal & Regulatory Compliance: Complying with applicable Indian laws, tax regulations (such as GST invoice retention requirements), and accounting standards.

OkBro utilizes the WhatsApp Business Platform / WhatsApp Cloud API provided by Meta Platforms, Inc. to deliver prompt, convenient, and paperless transactional communications regarding your purchases and inquiries.

We do not sell, rent, lease, or trade your personal information to third parties. We share only the minimum information necessary with trusted third-party service providers who assist us in operating our store and fulfilling your orders:

• WhatsApp / Meta Platforms, Inc.: For delivering transactional WhatsApp order notifications, invoices, and customer support.
• Razorpay Software Private Limited: For secure payment gateway processing and verification (UPI, cards, net banking).
• Email Service Providers (Resend / Google): For delivering automated transactional emails, order invoices, and support communications.
• Courier & Logistics Partners: For transporting and physically delivering ordered packages to your specified shipping address.
• Cloud Infrastructure & Database (Vercel & Neon / PostgreSQL): For secure web hosting, cloud database storage, and product image hosting (Vercel Blob).

All service providers are authorized to process your information solely for the purpose of providing their respective services to OkBro and in compliance with appropriate confidentiality standards.

All online payments on OkBro are securely processed through Razorpay, an industry-standard, PCI-DSS compliant payment gateway using 256-bit encryption.

We never collect, store, or view your sensitive payment credentials(such as complete credit/debit card numbers, CVV codes, expiry dates, UPI PINs, or net banking passwords) on our servers. All sensitive financial information is entered directly into Razorpay's encrypted payment interface.

Our database stores only non-sensitive transaction verification details (such as Razorpay Order ID, Payment ID, payment status, and amount) required for order fulfillment, tax invoicing, and accounting records.

We retain your personal information only for as long as is reasonably necessary to fulfill the purposes outlined in this Privacy Policy, including:

• Fulfilling your purchase orders and managing deliveries.
• Providing post-purchase customer service, warranty, and return support.
• Maintaining statutory transaction, tax, and GST accounting records as required under Indian commercial and taxation laws.
• Preventing fraud, resolving disputes, and enforcing our agreements.

When personal information is no longer needed for these legitimate business or legal purposes, it is securely deleted or anonymized where practicable.

We implement appropriate technical, administrative, and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, loss, or destruction. These measures include:

• HTTPS / TLS encryption for all data transmitted between your browser and our servers.
• Encrypted database connections with SSL enforcement.
• Environment-isolated storage of API secrets, keys, and credentials.
• Restricted, role-based administrative access to internal order management systems.

Please note that no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee absolute security.

Depending on applicable law, you have the following rights regarding your personal information:

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data.
• Right to Deletion: You may request the deletion of your personal data, subject to legitimate legal, accounting, and tax retention obligations.
• Right to Inquire: You may contact us at any time with questions regarding how your data is handled.

If you wish to request the deletion of your personal data stored by OkBro, you can submit a deletion request by following these simple steps:

*Please note: Certain transaction and invoice records cannot be immediately deleted where retention is legally mandated for taxation (GST), accounting, dispute resolution, or fraud prevention compliance under Indian law.

You can also review our dedicated Data Deletion Page for further details.

We use minimal, privacy-conscious technologies to ensure website functionality:

• Essential Session Cookies: Used strictly for secure user authentication and login session management where applicable.
• Browser Local Storage: Used to maintain your shopping cart items (okbro-cart) so products remain in your cart as you browse our catalog.
• Analytics: Aggregate, non-identifiable web traffic insights via Vercel Analytics. We do not use intrusive third-party cross-site tracking cookies or advertising pixels.

OkBro's website, products, and services are intended for general adult consumers and are not knowingly directed to children under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal information, please contact us at okbro.helpline@gmail.com and we will promptly delete such records.

We may update this Privacy Policy from time to time to reflect changes in our legal obligations, operational practices, or service features. Any modifications will be posted directly on this page with an updated “Last updated” date at the top. We encourage you to review this policy periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us: