Spice Monk

1. Scope of This Privacy Policy

This Privacy Policy applies to the Spice Monk mobile applications and the services connected with them, including TRU DATAA, TRU PACK, Spice Monk (B2C), and Spice Monk Business (B2B).

By using our applications, you acknowledge that you have read this Privacy Policy. Where consent is required by applicable law or by the operating system, we will request the appropriate permission before collecting or using the relevant information.

2. Our Applications

3. Information We Collect

The information collected depends on the application, the features you use, and the information you voluntarily provide.

We do not intentionally collect more information than is reasonably necessary for the relevant business or app functionality. Users should not submit sensitive personal information unless it is specifically requested for a legitimate service purpose.

4. Location Information

Location information is used only where it is relevant to the functionality of the relevant application.

Seller / Shop Location

TRU DATAA may collect the precise location of a seller's shop or business during seller registration. This is used to record the correct business location and help authorized riders or delivery personnel reach the seller's shop for delivery operations.

Sales Personnel Location

TRU DATAA may collect location information associated with authorized sales personnel for attendance, field-operation and workforce management purposes, where the relevant feature is enabled and permission is granted.

Rider / Delivery Operations

TRU PACK may use location-related information where required to support delivery operations and accurate seller/delivery location handling.

Location access is subject to the permissions available on your device. If you deny a location permission, certain location-dependent features may not work or may require an alternative method where available.

5. How We Use Information

We may use collected information for the following purposes:

• Create, authenticate and manage user, seller, employee or rider accounts.
• Register and review business sellers.
• Process, manage and fulfil orders.
• Assign and deliver orders.
• Maintain order status, delivery status and operational records.
• Manage products, product information and seller-specific availability where applicable.
• Maintain seller ledgers, payment/settlement records and reconciliation information.
• Verify B2B payment submissions and screenshots.
• Manage sales personnel attendance and authorized field operations.
• Provide customer and seller support.
• Communicate with users about accounts, orders, payments, verification and service-related matters.
• Prevent fraud, misuse, unauthorized access and security incidents.
• Maintain, troubleshoot and improve application performance and reliability.
• Comply with applicable laws, regulations, legal processes and legitimate business requirements.

We do not sell personal information as a business practice.

6. Payments

Spice Monk B2C

The B2C application supports online prepaid payments through an integrated third-party payment service provider. Payment credentials such as card numbers, banking credentials or other sensitive payment credentials may be handled directly by the payment provider rather than stored by Spice Monk, depending on the payment integration used. Please review the applicable payment provider's terms and privacy policy for its own data practices.

TRU DATAA and TRU PACK

These applications do not use an online payment gateway for the ordinary seller settlement/payment entries described above. Authorized personnel may record the amount received and related settlement information in the application.

Spice Monk Business

The B2B application does not provide an integrated payment gateway. Sellers may use the QR code, UPI ID or bank details displayed in the application to make payment to Spice Monk and may submit a payment screenshot through the application for manual verification.

Payment screenshots and related payment information are used for payment verification, reconciliation, record keeping and support.

7. Sharing and Disclosure of Information

We may disclose or provide access to information only when reasonably necessary for the purposes described in this Policy, including:

• Authorized Spice Monk personnel: Administrators, sales personnel, riders, support personnel and other authorized employees may access information necessary for their assigned responsibilities.
• Service providers: Technology, hosting, authentication, communication, payment, analytics, security, mapping or infrastructure providers may process information on our behalf where required to provide their services.
• Payment providers: B2C payment information may be processed by the integrated payment service provider.
• Legal and regulatory authorities: Information may be disclosed where required by law, court order, legal process or to protect rights, safety or security.
• Business transactions: Information may be transferred as part of a merger, acquisition, restructuring, financing or sale of relevant business assets, subject to applicable legal requirements.

8. Data Security

We use reasonable administrative, technical and organizational safeguards designed to protect information against unauthorized access, alteration, disclosure, loss or misuse.

Security measures may include access controls, authentication mechanisms, restricted administrative access, secure transmission where supported, server-side controls, monitoring and operational safeguards.

However, no method of electronic transmission or storage can be guaranteed to be completely secure. We cannot guarantee absolute security of information.

9. Data Retention and Deletion

We retain information only for as long as reasonably necessary for the purposes described in this Policy, including providing services, maintaining business and transaction records, resolving disputes, preventing fraud, enforcing agreements and complying with legal, tax, accounting or regulatory obligations.

When information is no longer required, we may delete, anonymize or securely dispose of it, subject to applicable retention requirements.

Account Deletion

Where an application provides account creation, users may request deletion of their account and associated personal information through the account deletion functionality provided in the application or through the support/deletion process made available by Spice Monk.

Some information may be retained when required by law or reasonably necessary for legitimate purposes such as completed transaction records, financial/accounting records, fraud prevention, security, dispute resolution or legal compliance. Where information must be retained, we will limit its use to the applicable purpose.

10. Your Choices and Privacy Rights

Depending on your location and applicable law, you may have rights relating to your personal information, which may include:

• Requesting access to personal information we hold about you.
• Requesting correction of inaccurate or incomplete information.
• Requesting deletion of your account and eligible personal information.
• Withdrawing consent where processing is based on consent.
• Objecting to or requesting restriction of certain processing where applicable.
• Requesting information about how your data is used or shared.

Some requests may be subject to verification and legal exceptions. To exercise a privacy right, contact us using the details in the Contact Us section.

11. App Permissions

Depending on the application and features you use, the apps may request permissions such as:

• Location: To capture seller/shop locations and support authorized sales or delivery operations where applicable.
• Camera / Photos: Where a feature allows a user to capture or select a payment screenshot or other information required for an authorized workflow.
• Notifications: Where enabled, to provide order, account, delivery or service-related notifications.

Permissions are controlled by your device's operating system. You may change permissions through your device settings, although disabling a permission may prevent related features from working.

12. Children's Privacy

Our applications are intended for general customers, registered business users and authorized personnel, and are not designed specifically for children.

We do not knowingly solicit or intentionally collect personal information from children where prohibited by applicable law. If you believe a child has provided personal information to us improperly, please contact us so that we can review and take appropriate action.

13. Third-Party Services and SDKs

Our applications may use third-party services, SDKs or infrastructure providers for functions such as authentication, OTP delivery, payment processing, hosting, maps/location, notifications, analytics, diagnostics, security and application operations.

These providers may process certain information according to their own privacy policies and contractual obligations. The specific third-party services used may vary between applications and versions.

Where a third-party service processes information on our behalf, we expect it to use appropriate security measures and process information only for authorized purposes.

Apple's App Store privacy disclosures are maintained separately in App Store Connect and must accurately reflect data collected by the app and relevant third-party partners.

14. Advertising and Tracking

Spice Monk does not intend to use personal information for targeted advertising or cross-app tracking as part of the core functions described in this Policy.

If this changes in the future, we will update our privacy disclosures and implement any consent or permission requirements that apply to the relevant technology.

15. International Data Processing

Depending on the hosting, infrastructure and service providers used by Spice Monk, information may be processed or stored in locations outside your state, city or country. Where required, we will take appropriate measures for such processing in accordance with applicable law.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our applications, services, technology, legal requirements or data practices.

When we make changes, we will update the “Last Updated” date at the top of this Policy. Material changes may also be communicated through the application or other appropriate channels where required.

17. Contact Us

If you have questions, concerns, privacy requests or account/data deletion requests, please contact:

For faster assistance, please mention the relevant application name (TRU DATAA, TRU PACK, Spice Monk, or Spice Monk Business) and provide only the information necessary to identify your account or request.