Privacy Policy

1. Information we may collect

Depending on how you use Insto, we may collect your name, mobile number, alternate mobile number, email address, delivery address, location details you choose to provide, account and referral information, order history, payment status, customer-support communications, device information and basic technical logs.

Payment credentials are processed by authorised payment partners. Insto does not intend to store complete card or UPI credentials.

2. Why we use information

• To create and secure your account.
• To confirm availability, fulfil and deliver orders.
• To process payments, refunds and customer support requests.
• To prevent fraud, misuse and duplicate transactions.
• To improve service reliability and comply with applicable law.
• To send service communications and, where permitted, offers you can opt out of.

3. Sharing

We may share only the information needed with service partners involved in payments, order fulfilment, delivery, communications, hosting, security and legal compliance. We do not sell personal data.

4. Retention and security

We retain personal data only for as long as needed for the stated purpose, legal obligations, dispute resolution and fraud prevention. We use reasonable technical and organisational safeguards, but no internet service can guarantee absolute security.

5. Your choices and rights

You may request access, correction or deletion of eligible personal data, withdraw consent where processing is based on consent, or raise a grievance. Some records may be retained where required by law or for legitimate dispute and fraud-prevention purposes.

6. Children

Insto is intended for users capable of entering into a valid contract. We do not knowingly create accounts for children without appropriate verifiable consent where required.

7. Contact

For privacy questions or requests, email privacy@insto.online or write to Insto, No. 33, 1st Floor, 1st Main, CBI Main Rd, HMT Layout, Gramatana, Bengaluru, Karnataka 560032, India. Identity verification may be required before completing a data request.