PRIVACY POLICY

Last Updated: September 12, 2026

Aniyor Marketplace Private Limited ("Aniyor", "we", "us", or "our) operates the Aniyor website, marketplace, applications, seller platform, communications channels and related services (collectively, the "Services").

Aniyor is a technology-enabled marketplace intended primarily for devotees, spiritually inclined individuals and community members seeking devotional, spiritual and spiritually aligned products, services and experiences from independent Sellers.

This Privacy Policy explains how we collect, use, store, disclose and otherwise process personal information when you visit or use the Services, create an account, communicate with us, purchase or enquire about products or services, interact with Sellers through the platform, or otherwise engage with Aniyor.

By using the Services, you acknowledge that you have read and understood this Privacy Policy. Where applicable law requires your consent for a particular processing activity, we will seek that consent in the manner required by law.

This Privacy Policy should be read together with our Terms of Service, Seller Terms, Shipping & Fulfilment Policy, Refund, Return & Cancellation Policy, and other applicable policies or terms displayed on the Services.

Where there is a conflict between this Privacy Policy and another Aniyor policy, this Privacy Policy will govern matters relating specifically to the collection, use, storage, processing and disclosure of personal information.

---

1. Personal Information We Collect

"Personal Information" means information that identifies or can reasonably be associated with an individual.

Depending on how you interact with Aniyor, we may collect the following categories of Personal Information:

1.1 Contact and Identity Information

This may include:

• Name;

• Email address;

• Mobile or telephone number;

• Billing address;

• Shipping or delivery address;

• City, state, country and postal code;

• Account or customer identifiers;

• Information required for verification, where applicable.

1.2 Account Information

If you create an account, we may collect:

• Login credentials;

• Account preferences;

• Saved addresses;

• Wishlist and saved items;

• Communication preferences;

• Account settings and related information.

We do not intend to store your payment-card password, PIN, CVV or other authentication credentials used by your payment provider.

1.3 Order and Transaction Information

We may collect information relating to your interactions and transactions with Aniyor, including:

• Products and services viewed or purchased;

• Cart and wishlist activity;

• Orders, cancellations, returns and refunds;

• Seller associated with an order;

• Order value and transaction details;

• Shipping and delivery information;

• Payment status and transaction references;

• Coupons, promotions and gift cards used;

• Reviews, ratings and feedback.

1.4 Payment Information

Payments may be processed through third-party payment gateways and financial service providers.

Depending on the payment method used, we may receive information such as:

• Payment method;

• Transaction reference;

• Payment status;

• Payment confirmation;

• Limited payment-related information necessary to reconcile or support a transaction.

Payment-card and banking information may be collected and processed directly by the relevant payment service provider in accordance with its own privacy policy and security practices.

1.5 Communications

We may collect information you provide when communicating with us or with Sellers through Aniyor, including:

• Customer-support requests;

• Chat messages;

• WhatsApp communications where you initiate or consent to such communication;

• Emails;

• Feedback;

• Complaints;

• Information submitted through forms, surveys or campaigns.

1.6 Device and Technical Information

When you use the Services, we may automatically collect certain technical information, including:

• IP address;

• Browser type and version;

• Device type;

• Operating system;

• Network information;

• Approximate location derived from technical information where permitted;

• Unique device or browser identifiers;

• Referring pages;

• Pages or features accessed;

• Date, time and duration of activity.

1.7 Usage and Interaction Information

We may collect information about how you interact with the Services, including:

• Products searched or viewed;

• Pages visited;

• Products added to cart;

• Wishlist activity;

• Campaign interactions;

• Reviews and ratings;

• Promotional interactions;

• Links or features accessed;

• General browsing and engagement patterns.

1.8 Seller Information

If you register or operate as a Seller on Aniyor, additional information may be collected, including information required for:

• Seller registration;

• KYC and verification;

• PAN, GST and tax compliance;

• Bank-account verification;

• Business or entity verification;

• Licences, registrations or certifications;

• Product and service listings;

• Seller communications;

• Orders, payouts and settlements.

Seller information may be subject to additional terms contained in the Seller Terms.

---

2. How We Collect Personal Information

We may collect Personal Information from the following sources:

2.1 Directly From You

For example, when you:

• Create an account;

• Place an order;

• Contact us;

• Contact a Seller through Aniyor;

• Submit a review;

• Subscribe to communications;

• Participate in a campaign;

• Submit a form;

• Register as a Seller; or

• Otherwise provide information to us.

2.2 Automatically

We may collect information automatically through:

• Cookies;

• Pixels;

• SDKs;

• Log files;

• Analytics technologies;

• Similar technologies used on websites and applications.

2.3 From Sellers and Service Providers

Where necessary to provide the Services, we may receive information from:

• Sellers;

• Payment providers;

• Logistics and shipping providers;

• Technology providers;

• Customer-support providers;

• Marketing and communication platforms;

• Fraud-prevention providers.

2.4 From Other Third Parties

We may receive information from third parties where permitted by applicable law, including service providers, business partners, publicly available sources, advertising or analytics partners, and platforms through which you interact with Aniyor.

---

3. How We Use Personal Information

We may process Personal Information for the following purposes:

3.1 Providing the Marketplace

We use Personal Information to:

• Create and manage accounts;

• Display and recommend relevant products or services;

• Process orders;

• Connect customers with Sellers;

• Facilitate Seller communications;

• Process cancellations, returns and refunds;

• Facilitate shipping and delivery;

• Provide customer support;

• Process reviews and ratings;

• Provide marketplace features and functionality.

3.2 Payments and Transactions

We may use Personal Information to:

• Process or facilitate payments;

• Confirm transactions;

• Reconcile payments;

• Process refunds;

• Detect payment-related fraud;

• Maintain transaction records;

• Facilitate Seller settlements and payouts.

3.3 Communications

We may use Personal Information to send:

• Order confirmations;

• Shipping and delivery updates;

• Return and refund updates;

• Account notifications;

• Customer-service responses;

• Important service announcements;

• Security notifications;

• Other transactional communications.

3.4 Marketing and Promotions

Where permitted by law and, where required, with your consent, we may use your Personal Information to:

• Send promotional communications;

• Inform you about products, services, events, campaigns and offers;

• Provide personalised recommendations;

• Measure campaign performance;

• Conduct surveys and engagement campaigns;

• Communicate through email, SMS, WhatsApp or other permitted channels.

You may opt out of promotional communications at any time through the available unsubscribe or opt-out mechanism.

Opting out of promotional communications will not prevent us from sending essential transactional or service-related communications.

3.5 Improving the Services

We may use information to:

• Understand how customers use Aniyor;

• Improve website and application functionality;

• Improve product discovery;

• Develop new features;

• Analyse marketplace performance;

• Personalise the shopping experience;

• Test and improve user experience;

• Diagnose technical problems.

3.6 Security and Fraud Prevention

We may process information to:

• Authenticate users;

• Protect accounts;

• Detect fraudulent or suspicious transactions;

• Prevent misuse of the Services;

• Investigate security incidents;

• Protect customers, Sellers and Aniyor;

• Enforce our Terms and policies.

3.7 Legal and Regulatory Compliance

We may process Personal Information where necessary to:

• Comply with applicable laws and regulations;

• Meet tax, accounting and financial obligations;

• Respond to lawful requests from government or regulatory authorities;

• Respond to legal proceedings;

• Establish, exercise or defend legal claims;

• Investigate violations of our policies;

• Protect our legal rights.

---

4. Legal Basis for Processing

Depending on the circumstances and applicable law, we may process Personal Information:

• With your consent;

• To provide goods or services requested by you;

• To perform or administer a transaction;

• To comply with legal obligations;

• For legitimate and lawful business purposes where permitted by applicable law;

• To protect the security and integrity of the Services;

• For other purposes permitted by applicable law.

Where consent is required, we will provide appropriate notice and seek consent in the manner required by law.

Where applicable, you may withdraw consent for processing based on consent. Withdrawal of consent will not affect processing that was lawfully carried out before withdrawal and may not affect processing that is permitted or required by law on another basis.

---

5. How We Share Personal Information

We may disclose Personal Information to third parties where reasonably necessary to provide the Services, operate our business, comply with law or otherwise for purposes described in this Privacy Policy.

These may include:

5.1 Sellers

When you purchase or enquire about a product or service, we may share relevant information with the Seller so that the Seller can:

• Fulfil your order;

• Provide the requested service;

• Arrange delivery;

• Respond to order-related communications;

• Process returns, replacements or refunds;

• Provide customer support.

Sellers are independent businesses and may have their own privacy obligations and policies.

5.2 Payment Service Providers

We may share information with payment gateways and financial service providers to:

• Process payments;

• Verify transactions;

• Process refunds;

• Detect fraud;

• Reconcile transactions.

5.3 Shipping and Logistics Providers

We may share relevant information with logistics and delivery providers to facilitate:

• Pickup;

• Shipping;

• Tracking;

• Delivery;

• Returns;

• Reverse logistics;

• Delivery-related customer communication.

5.4 Technology and Service Providers

We may use third-party providers for services such as:

• Website hosting;

• Cloud infrastructure;

• Marketplace technology;

• Customer support;

• Communications;

• WhatsApp messaging;

• Workflow automation;

• Analytics;

• Reviews;

• Marketing;

• Security;

• Fraud prevention;

• Data storage;

• Software and infrastructure management.

These providers may process information on our behalf or independently where permitted by law.

5.5 Shopify

Aniyor uses Shopify as part of its ecommerce and marketplace technology infrastructure.

Shopify may process Personal Information in connection with your use of the Services. Shopify's own privacy practices may apply to information it processes.

For more information, please refer to Shopify's Privacy Policy.

5.6 Business Partners

Where permitted by law, we may share information with business or marketing partners for purposes such as analytics, advertising, campaign management or service delivery.

We will provide applicable choices or opt-out mechanisms where required.

5.7 Corporate Transactions

Personal Information may be disclosed as part of:

• A merger;

• Acquisition;

• Financing;

• Restructuring;

• Sale of assets;

• Corporate reorganisation;

• Insolvency or bankruptcy proceedings.

5.8 Legal and Regulatory Requests

We may disclose information where reasonably necessary to:

• Comply with applicable law;

• Respond to lawful governmental requests;

• Respond to court orders or legal processes;

• Protect the rights, safety or property of Aniyor, customers, Sellers or others.

---

6. Marketplace and Seller Communications

Aniyor may facilitate communications between customers and Sellers for legitimate marketplace purposes.

Depending on the transaction, information necessary to fulfil an order or service may be shared with the relevant Seller.

Sellers may not use customer information obtained through Aniyor for unrelated purposes, including unauthorised marketing, data resale or other activities prohibited by applicable law or Aniyor's Seller Terms.

---

7. Cookies and Similar Technologies

Aniyor and certain service providers may use cookies and similar technologies to:

• Operate the Services;

• Remember preferences;

• Maintain shopping-cart functionality;

• Understand usage;

• Measure performance;

• Improve the Services;

• Detect fraud and security issues;

• Support advertising and marketing where permitted.

You may be able to manage cookies through your browser or device settings.

Disabling certain cookies may affect the functionality of the Services.

---

8. Reviews, Ratings and Public Content

If you submit a review, rating, photograph, video, comment or other content that is intended to be publicly displayed, that information may be visible to other users.

You should avoid including unnecessary Personal Information in public reviews or other content.

Publicly submitted content may remain available after you close your account where reasonably necessary for legitimate business, legal, archival or operational purposes, subject to applicable law.

---

9. WhatsApp, SMS, Email and Other Communications

Where you provide your contact details and, where required, consent to receive communications, Aniyor may communicate with you through:

• WhatsApp;

• SMS;

• Email;

• Telephone;

• Push notifications;

• Other communication channels supported by the Services.

These communications may include transactional notifications, customer support, campaign communications, surveys and promotional messages.

You may opt out of promotional communications using the available opt-out mechanism.

Transactional and legally required communications may continue where necessary.

---

10. Data Retention

We retain Personal Information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

• Provide the Services;

• Maintain your account;

• Complete transactions;

• Process returns and refunds;

• Maintain business and financial records;

• Comply with legal and regulatory obligations;

• Resolve disputes;

• Prevent fraud and abuse;

• Enforce our agreements and policies.

The applicable retention period may vary depending on the type of information, the purpose for which it was collected and applicable legal requirements.

When Personal Information is no longer required, we may delete, anonymise or otherwise dispose of it in accordance with applicable law and our retention practices.

---

11. Data Security

We take reasonable and appropriate measures designed to protect Personal Information against unauthorised access, disclosure, alteration, misuse or destruction.

These measures may include technical, organisational and operational safeguards appropriate to the nature of the information and processing involved.

However, no method of transmission or electronic storage can be guaranteed to be completely secure.

You are responsible for maintaining the confidentiality of your account credentials and should not share passwords, OTPs or other authentication information with anyone.

Aniyor will not knowingly request your payment-card PIN, banking password or OTP through an unsolicited communication.

---

12. International Data Transfers

Some of our technology, payment, communication, analytics, hosting or other service providers may process Personal Information outside India.

Where Personal Information is transferred, stored or processed outside India, we will do so in accordance with applicable law and any applicable requirements relating to cross-border transfers.

Certain third-party service providers may also have their own privacy policies and international processing arrangements.

---

13. Children's Privacy

The Services are not intended for children who are below the applicable age permitted under law to independently use the relevant service or provide consent.

We do not knowingly seek to collect Personal Information from children in circumstances where such collection is prohibited by applicable law.

If you believe that a child has provided Personal Information to us in circumstances where it should not have been collected, please contact us using the details below.

---

14. Your Privacy Rights and Choices

Subject to applicable law and any conditions or exceptions provided by law, you may have rights relating to your Personal Information, which may include:

• Requesting information about Personal Information processed by us;

• Requesting correction of inaccurate or incomplete information;

• Requesting deletion of Personal Information where permitted;

• Withdrawing consent where processing is based on consent;

• Managing communication preferences;

• Requesting information about how your Personal Information is processed or shared;

• Exercising other rights available under applicable law.

Certain requests may be subject to verification to protect against unauthorised access to Personal Information.

We may also be required or permitted by law to retain certain information even after a deletion request.

Where applicable, you may also exercise your rights through mechanisms provided by the relevant third-party service provider where that provider independently determines how your Personal Information is processed.

---

15. Marketing Preferences

You may stop receiving promotional communications from Aniyor by:

• Using the unsubscribe mechanism in an email;

• Following the opt-out instructions in an SMS or WhatsApp communication, where available;

• Adjusting available communication preferences;

• Contacting us using the details provided below.

Even after opting out of marketing communications, you may continue to receive essential communications relating to orders, accounts, payments, returns, refunds, security or other services you have requested.

---

16. Third-Party Websites and Services

The Services may contain links to websites, applications or services operated by third parties.

These third parties may have their own privacy policies, terms and security practices.

Aniyor does not control and is not responsible for the privacy practices of third-party websites or services.

You should review the privacy policy of any third-party service before providing it with Personal Information.

---

17. Third-Party Service Providers

Aniyor may use third-party providers for technology, payments, logistics, communication, analytics, customer support, reviews, security, hosting and other operational purposes.

Examples may include providers supporting:

• Shopify and ecommerce infrastructure;

• Payment processing;

• Shipping and logistics;

• WhatsApp and messaging;

• Customer support;

• Workflow automation;

• Analytics;

• Reviews and ratings;

• Cloud hosting;

• Fraud prevention.

The providers used by Aniyor may change over time as our Services develop.

Where appropriate, third-party providers may process Personal Information under contractual or other arrangements designed to protect such information.

---

18. Data From Sellers and Marketplace Partners

If you interact with a Seller through Aniyor, the Seller may provide or receive certain information necessary to fulfil your transaction or service.

Aniyor may also receive information from Sellers relating to orders, fulfilment, customer support, returns, refunds or service delivery.

Seller access to customer information is intended to be limited to information reasonably necessary for legitimate marketplace purposes and subject to applicable law and Aniyor's Seller Terms.

---

19. Fraud, Abuse and Security Investigations

We may monitor or analyse activity on the Services to identify:

• Fraudulent transactions;

• Account abuse;

• Fake or manipulated reviews;

• Payment abuse;

• Unauthorised access;

• Suspicious marketplace activity;

• Policy violations;

• Security threats.

Where permitted by law, we may use information obtained through these processes to investigate, restrict, suspend or terminate accounts or transactions and to protect Aniyor and its users.

---

20. Business and Legal Records

Aniyor may retain transaction, payment, communication and other records for periods required or reasonably necessary for:

• Tax and accounting purposes;

• Audit requirements;

• Regulatory compliance;

• Dispute resolution;

• Fraud prevention;

• Legal proceedings;

• Contract enforcement.

---

21. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes to our Services;

• Changes in our data practices;

• Changes in technology;

• Changes in our service providers;

• Legal or regulatory requirements;

• Operational requirements.

When we make changes, we will update the Last Updated date at the top of this Privacy Policy.

Where required by applicable law, we will provide additional notice or obtain consent.

---

22. Complaints and Privacy Requests

If you have a question, complaint or request relating to the processing of your Personal Information, please contact us using the details below.

We will review and respond to requests in accordance with applicable law and our applicable internal procedures.

Where applicable law provides a right to complain to a regulatory authority or other competent body, you may exercise that right.

---

23. Contact Us

Aniyor Marketplace Private Limited

CIN: U47912MH2025PTC449777

Registered / Business Address:
Innov8 Times Square, Unit No-2, 4th Floor, A Wing,
Times Square Building, Andheri-Kurla Road,
Marol Naka, Andheri (East),
Mumbai, Maharashtra – 400059, India.

Email: vicky@aniyor.net

Website: aniyor.net

For order-related matters, customers should ordinarily use the support or order-related communication mechanism provided through the Services.

For privacy-related requests, complaints or requests concerning Personal Information, you may contact us at vicky@aniyor.net.

---

24. Governing Framework

This Privacy Policy is intended to operate in accordance with applicable laws and regulations governing the processing and protection of Personal Information, including applicable Indian data protection and privacy requirements.

Nothing in this Privacy Policy is intended to restrict or exclude any right, remedy or protection that cannot lawfully be excluded under applicable law.

---

Last Updated: September 12, 2026