Privacy Policy

1. Who this policy is for

Rutvaa is a video-first Indian ethnic wear store. This policy covers two groups: (a) customers who browse and shop on our store, and (b) authorised staff who use our admin tools to publish product videos to our own YouTube channels.

2. Information we collect

• Customer details: phone number, name, delivery address, and order history that you provide when shopping.
• Account & usage data: session identifiers and basic device information needed to run the store securely.
• Google account data (admin only): when an authorised staff member links a Google/YouTube account, we receive the account email address, the list of YouTube channels they manage, and permission to upload and manage videos on those channels.

3. How we use Google and YouTube data

When a staff member links a Google account, Rutvaa requests permission to upload videos to and manage the metadata of the YouTube channels that account controls. We use this access only to:

• list the channels linked to the account so the correct channel can be selected;
• upload product videos to the chosen channel; and
• set or update the title, description, and privacy status of those uploads.

Rutvaa's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google or YouTube data for advertising, we do not sell it, and we do not transfer it to others except as needed to provide this upload feature or where required by law.

4. How we store and protect data

Google OAuth tokens are encrypted at rest (AES-256-GCM) and are never displayed or logged. Access is limited to the systems that perform uploads. We use reputable cloud providers and apply reasonable technical and organisational safeguards to protect all data we hold.

5. Data sharing

We do not sell your personal information. We share data only with service providers that help us operate (for example hosting, payments, and Google's own APIs for the upload feature), and only to the extent needed to provide the service or to comply with the law.

6. Data retention and deletion

We keep data only as long as needed for the purposes above or as required by law.

• Google/YouTube access: a staff member can remove a linked Google account at any time from the admin tool (YouTube accounts → Unlink). Unlinking immediately revokes and deletes the stored Google tokens from our systems. You may also revoke access directly at myaccount.google.com/permissions.
• Customer data: to request deletion of your account or personal data, contact us at support@rutvaa.com and we will delete it subject to any legal record-keeping obligations.

7. Your rights

You may request access to, correction of, or deletion of your personal data. To exercise these rights, contact us using the details below.

8. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by an updated “Last updated” date on this page.

9. Contact us

Questions about this policy or your data? Email us at support@rutvaa.com.