Your information.
Handled with care.

Who this policy covers

This policy explains how Detoxleaf handles personal information connected with its website, customer accounts, orders and support services. It applies when you browse the store, create an account, buy wheatgrass trays, save a delivery schedule or contact our team. Third-party services you choose to use have their own privacy policies.

Information we collect

Account information includes your name, email address and authentication information. Profile and delivery information may include a phone number, recipient name, delivery address, city, state and PIN code. Authentication is handled by Supabase Auth; we do not display or store your password in customer profile tables.

Order information includes purchased items, quantities, prices, discounts, payment status, payment references, selected delivery dates, order updates and support requests. We may also receive reviews, ratings, saved products, reward entries, delivery-waitlist consent and information you choose to share with support. Our hosting and security providers may process technical information such as IP addresses, device or browser details, request logs and timestamps.

Why we use your information

We use information to operate your account, validate coverage and stock, process and fulfil orders, maintain delivery schedules, record payments, provide support and communicate relevant updates. We also use it for fraud prevention, troubleshooting, maintaining transaction records and meeting applicable legal obligations.

We send order, payment, account and delivery notices in connection with your use of the service. Delivery-waitlist notices are based on the request you submit. Marketing communications, if introduced, will use the choices and consent required by applicable law; placing an order is not blanket permission for unrelated marketing.

Cookies and local storage

Essential authentication cookies keep your session signed in and support account security. Browser storage remembers your basket. Clearing cookies or site storage may sign you out or remove your basket. The website does not require you to accept unrelated advertising tracking to place an order.

The built-in platform guide processes its current topic-based answers in your browser. Its conversation is kept in page memory and is not sent to an external AI service by that guide. Do not enter passwords, payment OTPs or unnecessary sensitive information into any chat or support field.

Service providers and sharing

We use service providers where needed to run the store: Supabase for authentication and database services, Razorpay for payment processing, Resend for configured transactional email delivery, and hosting and delivery service providers involved in supplying your order. We share information relevant to the service they perform rather than making customer records public.

Razorpay collects and processes payment instrument information within its payment flow. The store records transaction references and status, rather than storing full card numbers, CVV codes or payment OTPs. When you choose WhatsApp, that conversation is processed by WhatsApp under its own terms; the contact form opens a draft that you choose whether to send.

We do not sell your personal information. Information may be disclosed where required by law, to respond to a valid legal request, or to protect customers and the service from fraud or misuse.

Public reviews and account access

A published review may show your chosen display name, rating and review text, and any review media approved for publication. Do not put private contact details or someone else’s personal information in a public review. Order details, saved addresses and support conversations are restricted to the customer account and staff with appropriate access.

Retention and security

We keep personal information for the purposes described here and for applicable accounting, tax, dispute-resolution, fraud-prevention and legal requirements. The retention period depends on the type of record and the reason it is needed. Closing an account does not necessarily require deletion of transaction records that must be retained.

We use account verification, access controls and other reasonable safeguards appropriate to the service. No website or transmission method can guarantee absolute security. Keep your credentials private and contact us promptly if you suspect unauthorized activity. Service providers may process data in different locations, subject to applicable transfer requirements.

Your choices and requests

You can edit supported profile and address details in your account. Contact us to request access, correction, account closure or deletion, to withdraw an optional consent, or to raise a privacy concern. We may verify your identity before making changes and may retain records where required or permitted by applicable law. Withdrawing information required to fulfil an order may affect our ability to provide that service.

The store is intended for customers able to make purchases lawfully. Please do not create an independent account or provide a child’s information if you are not authorized to do so. Tell us if you believe a child’s information has been supplied inappropriately.

Contact and policy updates

Contact Detoxleaf using the Contact page or your account Support section, or call or message +91 87961 59077.

For a privacy request, identify the account email and the nature of the request; never send your password or payment OTP. We may update this policy as our services or legal requirements change. The updated date is shown on this page. Material changes will be communicated where applicable.