Privacy Ledger

Ledger revised: 24 July 2026

1. Why we keep a ledger

Appily Fortynine records only the data required to create accounts, verify email OTP, fulfil seed parcels, process payments, and answer support tickets. We do not sell personal data.

2. Categories we store

• Identity & contact: name, email, phone, delivery address
• Account security: password hash, verification timestamps
• Order history: SKUs, amounts, payment mode, courier references
• Support threads and grievance correspondence
• Technical logs needed to secure the storefront (IP, device, session tokens)

3. Legal bases

Processing is grounded in contract performance (fulfilment), legitimate interests (fraud prevention, vault security), and consent where OTP marketing or optional fields apply. Sensitive personal data is not solicited for ordinary seed purchases.

4. Retention

Order and tax-linked records are kept for the statutory period applicable in India. Unverified account drafts may be purged after a short inactivity window. Support tickets remain while a grievance is open, then archive per internal policy.

5. Your controls

You may request access, correction, or deletion of account data (subject to legal retention) by writing to hello@appilyfortynine.com. OTP-verified login remains required before profile changes that affect fulfilment.

6. Processors

Payment gateways, email SMTP, and logistics partners receive only the fields needed to complete their task. They may not reuse vault customer data for unrelated marketing.