StoreCha Privacy Policy

1. Scope and Core Commitment

StoreCha (“we”, “our”, or “the Platform”) provides headless commerce infrastructure, merchant operations dashboards, and Cash on Delivery (COD) management solutions to businesses operating in Pakistan. This policy outlines how we handle merchant account details, customer shipping addresses, delivery landmarks, and transaction histories.

2. Strict Multi-Tenant Data Isolation

Every merchant store provisioned on StoreCha operates under cryptographically enforced tenant isolation. Your catalog pricing, supplier costs, customer names, phone numbers, and delivery logs are isolated to your private tenant ID (`ten_...`). No competing merchant on the platform has access to your customer lists, sales volume, or supplier margins.

3. Pakistani Consumer Delivery Data

To fulfill Cash on Delivery shipments, StoreCha collects customer names, Pakistani mobile numbers (03XX-XXXXXXX), delivery addresses, nearest landmarks, and tehsils/cities. This data is utilized solely for:

• Generating airway bills and load manifests for contracted domestic courier partners (TCS, Leopards, PostEx, Trax).
• Automating 1-tap WhatsApp and SMS verification tokens before parcel dispatch.
• Calculating local RTO refusal risk scoring to prevent fraudulent doorstep orders.

4. Courier and Payment Rail Transmissions

When a merchant commits a shipment, normalized consignment payloads are transmitted securely over TLS 1.3 to the merchant's configured courier API endpoints. Payment tokens processed through JazzCash, EasyPaisa, or Raast are processed via secure server-to-server HMAC authentication and never stored in plain text.

5. Data Retention & Merchant Rights

Merchants retain 100% ownership of their store catalog, order history, and customer databases. You can export your full operational archive at any time in standard JSON or CSV formats. Should you decide to cancel your subscription, your tenant database can be wiped upon verified request.

6. Privacy Contacts

For data protection inquiries or GDPR/Pakistani electronic data compliance verification, contact our engineering office at privacy@storecha.com.