Privacy & Data Protection Policy

1Introduction & Scope

Wardrob Technologies Pvt. Ltd. ("Wardrob", "we", "our", or "us") operates a luxury peer-to-peer fashion rental marketplace connecting discerning renters, verified garment curators/listers, and centralized sanitization inspection hubs.

This Privacy Policy applies to our website (wardrob.com), mobile applications (iOS & Android), mobile capture inspection modules, and automated transactional notifications.

2Information We Collect

To guarantee seamless garment transit, anti-theft security for high-value designer attire, and verifiable sanitization, we collect:

• Account Credentials: Full name, verified mobile phone number, and email address used for session verification and delivery coordination.
• Delivery & Logistics Details: Shipping address, apartment/suite number, PIN code, and contact person names for secure door-to-door courier dispatch.
• Government Identity & KYC: Aadhaar number, PAN card number, and identity verification photos for high-value rental security and boutique owner onboarding.
• Garment Inspection Imagery: Live pre-dispatch and post-rental inspection photographs captured by our central hub quality experts and boutique listers.
• Device & Telemetry Data: IP address, device operating system, hardware tokens, and rate-limiting metadata used strictly to defend against automated fraud, unauthorized scraping, and brute-force attacks.

3How We Use Your Information

We process your personal information strictly for legitimate commercial and operational purposes:

• Facilitating rental orders, security deposit management, and return pick-ups.
• Executing 3-leg logistics (Lister to Central Hub, Hub to Renter, Renter back to Hub).
• Conducting garment sanitization, dry-cleaning inspection, and damage dispute resolution.
• Sending transactional notifications, courier tracking links, and digital receipts via In-App Alerts and verified email.
• Protecting owners and users against fraud, lost attire, and identity impersonation.

4KYC Security & AES-256-GCM Encryption

Because our catalog features couture garments valued up to ₹5,00,000, verifiable identity checks are mandatory. To protect your privacy:

• Hardware-Derived AES-256 Encryption: All sensitive identity records (Aadhaar numbers, PAN cards, and bank account numbers) are encrypted at rest using industry-standard AES-256-GCM authenticated cryptographic ciphers with unique initialization vectors (IV).
• Role-Based Access Control: Only vetted, authorized compliance officers can inspect KYC documents during onboarding verification. No regular employee or peer user has access to raw identity credentials.
• Mobile Keystore Storage: Auth tokens on mobile devices are saved in secure hardware keystores (iOS Keychain / Android Keystore) via FlutterSecureStorage.

5Financial Data & Payment Gateway

All payment transactions, including rental charges, refundable security deposits, boutique onboarding fees, and extensions, are processed via Razorpay, an RBI-licensed, PCI-DSS Level 1 certified payment gateway.

Wardrob servers never store or process raw credit/debit card numbers, CVVs, or Netbanking passwords. Refundable security deposits are escrowed and released back to your original payment method automatically upon successful post-rental hub quality inspection.

6Hub & Courier Data Sharing

To execute your rental experience, limited data is shared strictly on a need-to-know basis:

• Certified Central Cleaning Hubs: Quality controllers receive order details, garment SKUs, and return timestamps to perform sanitization and defect checks.
• Courier & Logistics Partners: Delivery executives receive recipient name, delivery address, and contact number solely to perform dispatch and pick-up.
• Statutory & Legal Authorities: Disclosed only if compelled by a court of law or lawful enforcement agency in accordance with the laws of India.

7Account Deletion & Data Erasure (App Store & Play Store Compliant)

In full compliance with Google Play Store, Apple App Store, and the Digital Personal Data Protection (DPDP) Act of India, you maintain full control over your digital footprint.

You may initiate account deletion at any time directly through the mobile application (Profile > Account & Data Privacy > Delete Account) or by submitting a written request to our concierge.

• Immediate Active Rental Guard: Accounts cannot be deleted while outfits are actively rented out, in transit, or awaiting security deposit settlement.
• Irreversible PII Anonymization: Once confirmed, all personal identifiable information (name, phone, email, password hash, KYC records, and push tokens) are permanently purged or irreversibly anonymized.
• Active Session Termination: All authentication sessions across all devices are immediately invalidated in real time.

8Grievance Officer & Concierge Contact

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, the details of our Grievance Redressal Officer are provided below: