Privacy Policy
What personal information Mechji collects, why, who it is shared with, how long it is kept, and the choices you have.
At a glance
This Privacy Policy explains how Mechji ("Mechji", "we", "us") handles personal information when you use the Mechji app, the Mechji Vendors app and the Mechji website at https://www.mechji.com (together, "Mechji").
Mechji is an online marketplace where independent sellers ("vendors") offer products and services to customers. Sellers are separate businesses; they are responsible for how they use the information they receive through Mechji to fulfil your orders and bookings.
Where a country or regional addendum applies to you, it is shown after this policy and adds to it.
One Mechji account can have a customer profile and, if you register a business, a linked seller profile. This policy covers both.
Your name, email address, phone number and password (stored only as a one-way hash). Optionally a profile photo, date of birth, gender and a short bio. If you sign in with Google, we receive your name, email address, phone number (if on your Google account) and profile photo from Google.
Up to three saved delivery addresses (name, phone, address and map coordinates). Your country, currency, time zone and language settings. Location from your device when you allow it — see "Location data" below.
What you order or book, prices and taxes, delivery or service address, contact phone, optional GST details, gift recipient details and notes you add. For each product order we also record the device type, IP address and browser or app identifier (user agent) used to place it, to help prevent fraud and resolve disputes.
Messages, photos and locations you share in chats with sellers or customers, with delivery and read status, and the app or browser identifier (user agent) of the sending device.
Ratings, review text, photos and videos you post; reports and helpful votes; replies sellers post; and ratings sellers give customers after an order.
Support requests, messages and attachments, dispute evidence and outcomes. When you report a user, seller or content, we record the report, any evidence, and the IP address and user agent it was sent from.
Push notification tokens with your device model, operating system and app version, your notification preferences, and the notifications we have sent you.
Which stores you follow and your update preferences for them.
Which version of our terms and policies you accepted and when, from which app, and the app version; and each change to your marketing and analytics choices.
Business name, owner name, business email and phone, category, description, website, business address and map location, working hours, store photos and videos, optional GSTIN, verification status and our reasons for decisions, subscription plan, and records of commission and subscription payments to Mechji.
Sellers can add staff members. For each, the seller may provide name, phone, email, photo, gender, date of birth and address; identity document type, number and images; for delivery agents, vehicle and driving-licence details and current location; for service agents, skills, experience and certificates. Sellers must have the right to share this information with us and must tell their staff about this policy.
We do not receive or store card numbers, CVV, UPI PINs or bank log-in credentials. We do not ask customers or sellers for identity documents. We do not track your location in the background.
We ask for your device location only while you are using Mechji, to find sellers and services near you, to check whether a service covers your address, and to set your country, currency and time zone. You can refuse; you can still enter an address or choose your country yourself.
To work out your country from your location, we send approximate coordinates to OpenStreetMap Nominatim and keep only the resulting country.
Addresses you save or use for an order or booking, and locations you share in chat, are stored with that record. Sellers provide their business location, which we check with Google Maps; the location of stores and services is used to show them to nearby customers.
If a seller uses delivery agents on Mechji, the seller can record an agent's current location for deliveries.
We do not track your location continuously or in the background.
When you order or book, we share with that seller the details needed to fulfil it: your name, phone number, delivery or service address, what you ordered or booked, and your notes. Sellers may share these with the staff member they assign.
You pay the seller directly (for example cash on delivery, UPI or another method the seller offers). Mechji does not receive or hold these payments. The seller records on Mechji when payment is collected and when a refund is made, including the method and a transaction reference.
For services, we issue one-time codes to confirm the start and completion of the service. The codes are stored in protected (hashed and encrypted) form and removed once used. Sellers may upload photos and a description of completed work.
Sellers pay Mechji for subscription plans and commission through Razorpay. You enter card, UPI, net-banking or wallet details directly with Razorpay. We receive and keep the Razorpay order and payment identifiers, the payment method type, the amount and currency, and the email and phone number used at checkout, and we use them to confirm payments, issue invoices and handle refunds.
See the Payment Terms for more.
Your store profile is shown to customers: business name, description, category, photos and videos, working hours, the areas you serve, ratings and reviews, and the location details needed to find your store or at-store services. Your owner name, personal contact details, GSTIN and payment records are not shown publicly, except that contact details may be shared with a customer for an order or booking with you.
Chats are between you and the other participant. They are not end-to-end encrypted. Messages and chat photos are deleted automatically 30 days after they are sent. Either participant can block the other.
Mechji staff do not read chats routinely. They may access a chat when it is reported, to resolve a dispute or support request, or where required by law.
We send one-time codes by SMS or voice call and account emails (verification, password reset, seller application updates) through our messaging provider.
Transactional notifications about your orders, bookings, payments, refunds, cancellations, chats and account security are part of the service. You can switch off categories such as chat messages, store updates, service reminders and review reminders in Settings; security, payment, refund and cancellation messages and one-time codes are always sent.
Promotional notifications are off by default. They are sent only if you turn on "Promotions" in Settings, and you can turn it off at any time. We keep a record of each change.
Push notifications are delivered through Expo and Google Firebase Cloud Messaging using your device's push token. Chat notifications can show a preview of the message on your lock screen, depending on your device settings. See the Messaging & Notifications Policy.
Reviews are public. They show your name and profile photo with your rating, text, photos and videos. You can edit or delete your reviews. Reviews that receive several reports are hidden automatically until checked, and we may remove content that breaks the Reviews & Ratings Policy.
We use the following service providers to run Mechji. They process personal information on our behalf, for the purposes described.
We require service providers to protect the information and to use it only to provide their services to us.
Mechji and our service providers may store and process information in countries other than the one you live in, including countries whose data-protection laws differ from yours. Where the law requires it, we use the safeguards it provides for such transfers. Your country or regional addendum describes these safeguards where applicable.
See the Account Deletion & Data Retention Policy for what happens when you delete your account.
We protect information with measures including one-way hashing of passwords and one-time codes, encrypted storage of service and return codes, restricted and permission-based staff access, and automatic deletion of chats after 30 days. Data is sent between the apps and our servers over encrypted connections.
No online service is completely secure. Keep your password and one-time codes to yourself, and tell us at mechji247@gmail.com if you think your account has been misused.
To make a request, contact mechji247@gmail.com. We may need to confirm your identity first. Your country or regional addendum may give you further rights and set time limits for our reply.
Mechji is intended for people who can form a binding contract under the law of their country. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact mechji247@gmail.com and we will delete it.
We may update this Privacy Policy from time to time. Each version has a version number and an effective date, and earlier versions stay available for reference.
When a change materially affects your rights, we will tell you in the app or on the website before it takes effect and, where required, ask you to accept the new version before you continue using Mechji.
Mechji operates Mechji. Registered address: Pathankot.
You can also contact us from Help & Support in the Mechji apps and website.
