Policies

Privacy Policy

Last updated: 2026-07-05

At Tharara ("Tharara", "we", "us"), your privacy matters. This Privacy Policy explains how we collect, use, share, and protect your information when you visit our website, place an order, or interact with us on Instagram, WhatsApp, SMS, or email.

Information We Collect

When you use our website or interact with our services, we may collect:

  • Contact details you provide: name, email address, phone number, shipping/billing address.
  • Account data: login credentials (hashed), order history, saved addresses, wishlist, reviews.
  • Payment metadata from Razorpay (we do not store card numbers ourselves).
  • Behavioural data: pages viewed, products searched, cart activity, session identifiers.
  • Device data: browser type, IP address, operating system, referrer.
  • Instagram/Meta data (only if you choose to sign in with Instagram or message us on Instagram): your Instagram Business Account ID, public profile handle, messages you send us, and comments/mentions on our posts. See the Meta Platform Data section below.

How We Use Your Information

  • To process orders, payments, shipping, and returns.
  • To authenticate you (OTP via SMS/email, Google or Instagram sign-in).
  • To send transactional communications (order confirmations, shipping updates, back-in-stock alerts).
  • To send marketing communications (only where you have opted in, or as permitted by applicable law).
  • To answer your questions over Instagram DM, WhatsApp, SMS, email, or our concierge chat, including with AI-assisted responses reviewed or supervised by us.
  • To personalise product recommendations and search results.
  • To measure, improve, and secure our website, app, and marketing campaigns.

We do not sell your personal information.

Meta Platform Data (Instagram & Facebook)

If you sign in with Instagram Business Login, DM our Instagram account, or comment on our posts, we receive limited data from the Meta Graph API solely to respond to you and operate our Instagram storefront:

  • Your Instagram Business Account ID, username, and profile picture.
  • Direct messages you send us and replies we send you.
  • Comments you post on our shoppable posts, reels, or stories.
  • Mentions and tags of our brand account or designated hashtags.
  • Aggregated engagement and reach metrics on our own posts (via Instagram Insights).

We use this data strictly to operate our Instagram shop, answer your questions, show your user-generated content on our site only with your consent, and measure our own marketing. We do not use Instagram data to build profiles about non-customers, and we do not re-use this data beyond the purposes described here.

You can request deletion of your Instagram-sourced data at any time using the Data Deletion section below, or by removing Tharara under Instagram Settings → Apps and Websites.

Advertising & Analytics

We use Meta Pixel and the Meta Conversions API to measure the performance of our Instagram/Facebook ads and to show relevant products to people who have visited our site. Event data (such as page view, add-to-cart, purchase) is sent to Meta using hashed identifiers where applicable. You can opt out of interest-based advertising at Meta Ad Preferences and through your browser cookie settings.

AI-Assisted Interactions

To help us respond to you quickly and generate product descriptions and marketing content, we use AI models operated by OpenAI. When you chat with our concierge or DM our Instagram account, the content of your message may be sent to these providers under a standard data-processing agreement. We do not use your messages to train third-party foundation models, and we truncate and redact obvious personal identifiers from prompts.

Sharing

We share data only with service providers who help us run the business: Razorpay (payments), Twilio (SMS), ZeptoMail (transactional email), Google Cloud Storage (image hosting), Meta (ads and Instagram messaging), and OpenAI (AI responses). Each provider is contractually bound to use your data only to perform services for us. We may also disclose data where required by law.

Data Retention

We retain order-related data for as long as legally required for tax, accounting, and warranty purposes, typically 7 years. Account data is retained while your account is active and for up to 12 months after deactivation unless earlier deletion is requested. Instagram message and engagement data is retained for up to 12 months unless needed for fraud prevention.

Your Rights

You have the right to access, correct, export, or delete your personal data, and to object to or restrict certain uses. Email support@tharara.com and we will respond within 30 days.

Data Deletion

To delete data associated with your Instagram or Facebook account on our system, you can:

  • Remove Tharara under Instagram Settings → Apps and Websites (Meta will notify us automatically), or
  • Submit a direct request at /data-deletion, or
  • Email support@tharara.com.

Contact

Questions about this Privacy Policy? Email support@tharara.com or visit our contact page.