Cookie & Tracking Policy

We use strictly necessary storage only. There are no advertising cookies, no cross-site tracking, no session-replay or screen-recording tools, no analytics that profile individuals, and no marketing pixels in the Service or in a storefront we host. Because nothing non-essential is stored, we do not show a consent banner.

If we ever introduce optional analytics, it will be off until you agree wherever the law requires consent, it will never be a session-replay tool enabled by default, and it will mask passwords, payment details and personal information before anything leaves your device. This Policy will be updated first.

• Sign-in: your session token and basic account details, in the browser's local storage, so you stay signed in. Removed when you sign out.
• Preferences: language, layout and similar interface choices, in local storage, so the Service looks the way you left it.
• Storefront: the basket and, if you have a shopper account, your shopper session for that store, in local storage, so an order survives a page reload.
• Offline work in the mobile and desktop apps: an encrypted local database of the records the offline pages need, described in Section 9 of the Privacy Policy.
• Security: our network provider may set short-lived cookies used only to tell people from automated attacks. They are not used to identify you or to follow you across sites.

Fonts, icons, QR codes, barcodes and placeholder avatars are served or drawn by the Service itself. A page contacts another company only in the cases below, and only when you use that feature:

• Payments: when you pay by card or wallet, the payment page of the provider you chose (for example Stripe, eSewa, Khalti, Fonepay or ConnectIPS) is loaded or opened. That provider may set its own cookies for fraud prevention under its own policy. We never receive your full card number.
• Map links: a link that opens a location on OpenStreetMap is only followed if you click it.
• Features a Customer switches on: an AI assistant, translation, SMS or WhatsApp provider chosen and configured by the Customer receives the content needed to perform the request. These run from our servers, not from your browser.
• Push notifications in the mobile app, through Expo's push service and Apple or Google's notification service, only if you allow notifications.

The apps contain no advertising identifiers and no third-party analytics or crash-reporting SDKs. They talk only to the Customer's TECHSHAN-IMS server and, when you use them, the payment and notification services above.

A storefront is operated by the business that owns it. We do not add trackers to storefronts. A business that adds its own tags or pixels to its storefront is responsible for the notice and consent that requires, and for listing them in its own policy.

You can clear this storage at any time in your browser or by uninstalling the app; doing so signs you out and empties your basket. Because we do not sell or share personal information for advertising, a Global Privacy Control or Do Not Track signal needs no further action from us, and we treat it as a request not to start any such processing in future.

We will update this Policy before changing what is stored or which services are contacted. Questions: [email protected].