-
Notifications
You must be signed in to change notification settings - Fork 0
Privacy Policy
Last Updated: 16 January 2026 Effective Date: 23 December 2025
This Privacy Policy explains how OWLHOP VENTURES PRIVATE LIMITED (“Company”, “we”, “us”, “our”) collects, uses, stores, shares, and protects information when you use any of our applications, websites, or services operated under the brand names Step&Hop, S&H, SNH, or stepnhop (collectively, the “Platform”).
This Privacy Policy applies only to:
- Users located in India
- Suppliers, businesses, and partners operating in India
- Transactions conducted within India
- Administrative and operational access exercised from India
The Platform is not directed at, does not target, and is not intended for individuals or businesses located outside India. If you are accessing the Platform from outside India, you should not use the Platform.
This Policy applies to:
- Individual users (buyers, customers, or consumers) located in India
- Businesses and suppliers registered and operating in India
- Authorized administrators and operational personnel based in India
All users must be 18 years or older and have the legal capacity to enter into binding agreements under Indian law.
We collect information strictly necessary to operate a secure, transaction-enabled platform within India.
- Name (individual or business name)
- Date of Birth (individuals – optional)
- Phone number (India-based)
- Email address (optional)
- Business details
- Proof of identity of authorized business representatives
- Proof of business ownership or registration
- Business banking information (India-based accounts)
- Product images uploaded by suppliers
- Images submitted for verification, returns, or issue resolution
Purpose:
To enable product listings, verification, and transaction support within India.
- Address (individual or business within India)
- Location selected on maps
- Geographic coordinates (latitude and longitude)
Purpose:
To enable business discovery, logistics, and delivery services within India.
Businesses may record audio descriptions of products.
Important Clarification:
Audio recordings are not stored permanently. They are:
- Temporarily processed using AI to generate text descriptions
- Converted into text
- Discarded immediately after processing
Only the generated text description is stored.
Used to enable:
- Calls to Step&Hop customer support in India
- Calls between buyers and suppliers within India during transactions
Phone numbers are not publicly displayed.
- App usage patterns
- Search queries
- Login timestamps
- Device, crash, and diagnostic data
- Performance metrics
Purpose:
To improve platform functionality, stability, security, and user experience for India-based users.
We use collected information to:
- Create and manage user and business accounts in India
- Enable product listings and transactions
- Facilitate communication between buyers and sellers
- Verify identity and prevent fraud
- Provide customer support
- Improve platform features and performance
- Comply with Indian legal and regulatory obligations
To maintain trust and safety on the Platform:
- Product photos and descriptions may be reviewed by authorized administrators before publication
- Reviews are conducted to prevent fraud, misuse, and policy violations
| Data | Visibility |
|---|---|
| Product photos | Visible to buyers |
| Business location | May be visible to buyers |
| Product descriptions | Visible after review |
| Phone number | Shared only for transaction-related communication |
Administrative access is role-based, logged, and restricted to authorized personnel.
Primary data storage is hosted using Google Firebase and Google Cloud Platform, with servers located in the asia-south1 (India) region.
Certain authorized service providers may process data from other jurisdictions only for technical support or service delivery, subject to contractual safeguards and applicable Indian law.
We implement appropriate technical and organizational safeguards, including:
- Secure authentication mechanisms
- Encrypted data transmission
- Role-based access controls
- Restricted administrative access
- Continuous monitoring and audit logging
No system is completely secure; however, we take reasonable steps to protect your data.
We use trusted third-party service providers, including:
- Google Firebase (authentication, database, storage, analytics, crash reporting)
- Google Cloud Platform
- Google Maps
- Sarvam AI (audio-to-text processing)
- Exotel API (telephonic communications and helpdesk services)
These providers process data only on our instructions and under strict confidentiality and security obligations.
We do not sell personal data.
Data may be shared:
- Between transacting users within India as required to complete transactions
- With service providers strictly for platform operations
- When required by Indian law, regulation, or legal process
- Data is retained while an account remains active
- Users may go offline or mark their account as inactive
Upon permanent account deletion:
- Personal data is deleted or anonymized
- Certain records may be retained where legally required under Indian law
Detailed retention policies:
- https://github.com/sam2code/SNH_Public/wiki/Supplier-Account-Deletion
- https://github.com/sam2code/SNH_Public/wiki/User-Account-Deletion
Subject to applicable Indian law, users have the right to:
- Access and update their personal and business information
- Request permanent deletion of their account and personal data
- Withdraw consent for optional features
Withdrawal of essential permissions may limit Platform functionality.
| Permission | Purpose |
|---|---|
| Camera | Upload product photos |
| Location | Share business location |
| Microphone | Record product descriptions |
| Phone | Call support or transact |
Permissions are requested only when required and can be managed via device settings.
By providing your mobile number, you consent to receive service-related communications via SMS, calls, WhatsApp, or push notifications, even if registered under DND/NCPR.
You may opt out of non-essential communications.
The Platform does not knowingly collect personal data from individuals under 18 years of age.
Accounts identified as belonging to minors may be restricted or deleted, and associated data will be handled in accordance with Indian law.
We may update this Policy periodically.
- The “Last Updated” date will be revised
- Material changes may require renewed acceptance
- Continued use of the Platform constitutes acceptance of updates
This Policy is governed by and designed to comply with:
- India Digital Personal Data Protection Act (DPDP)
- Applicable Indian consumer protection and information technology laws
For privacy concerns, data requests, or questions:
- Email: founders.desk@stepnhop.com
- Customer Support: +91-40-4189-2729
- Address: Hyderabad, India