Privacy Policy
Last updated: October 5, 2026
Rutoherbs (“Rutoherbs”, “we”, “us”, or “our”) is operated by Rutoherbs Private Limited, registered at Kotputli-Behror, Rajasthan, India(“Company”). This Privacy Policy explains how we collect, use, store, share and protect personal information when you use our website, mobile app, or buy from us (together, the “Services”).
1. Information we collect
- Account information: name, email address, phone number, password (stored as a one-way hash, never in plain text), and your chosen branch/store preference.
- Identity verification (KYC): government ID documents and related information you submit to verify your identity for referral payouts, as required by our payment partners and applicable law. KYC documents are stored securely and access is restricted to authorized staff reviewing your verification.
- Order and payment information: items purchased, delivery address, and order history. Card and payment details are collected and processed directly by our payment partners (Razorpay, Cashfree, and/or UPI); we do not store your full card number, CVV, or UPI PIN on our servers.
- Referral and commission data: your referral link activity, downline structure (up to 5 levels), and commission/wallet balances, used to calculate and pay referral earnings.
- Returns and support information: details and any photos/attachments you submit when requesting a return, refund, or support.
- Usage information: device/browser information, IP address, pages visited, and actions taken on the Services, including for fraud prevention and security (for example, login attempt logs).
- Communications: emails, SMS, and in-app notifications we send you, and any replies or support requests you send us.
2. How we use your information
- To create and manage your account, process orders, and deliver products.
- To verify your identity (KYC) before enabling referral payouts, as required by our payment partners and applicable anti-fraud/anti-money-laundering obligations.
- To calculate, display, and pay referral commissions across up to 5 referral levels.
- To process payments and refunds through our payment partners.
- To send order updates, OTP/verification codes, and service communications by email and/or SMS.
- To respond to support requests and process return/refund requests.
- To detect, investigate, and prevent fraud, abuse, and security incidents (for example, we log failed login attempts and redact sensitive fields such as passwords and tokens from internal audit logs).
- To comply with legal, tax, and regulatory obligations.
3. Who we share information with
- Payment gateways (Razorpay, Cashfree) to process payments and payouts — they receive the information needed to complete your transaction under their own privacy policies.
- Staff and administrators of Rutoherbs with a role-based need to access the data (for example, KYC reviewers, order/returns staff) — access is permission-gated and logged.
- Service providers who help us operate the Services (hosting, email/SMS delivery, push notifications), bound by confidentiality obligations.
- Legal and regulatory authorities where required by law, court order, or to protect our rights, safety, or property.
We do not sell your personal information to third parties.
4. Data retention
We retain personal information for as long as your account is active and as needed to provide the Services, comply with our legal obligations (including tax and anti-fraud record-keeping requirements), resolve disputes, and enforce our agreements. KYC documents are retained only for as long as necessary for verification and compliance purposes, after which they are deleted or anonymized in line with applicable law.
5. Your rights
Depending on where you live, you may have the right to access, correct, export, or request deletion of your personal information, and to object to or restrict certain processing. To exercise these rights, contact us using the details in Section 8. We may need to verify your identity before acting on a request, and some information must be retained where required by law (for example, completed transaction and KYC records).
6. Cookies and similar technologies
We use essential cookies to keep you signed in and to secure your session. We do not use third-party advertising cookies. If this changes, this policy will be updated and, where required, we will ask for your consent.
7. Security
We use reasonable technical and organizational measures to protect your information, including encrypted transport (HTTPS), hashed passwords, role-based access controls, and audit logging with redaction of sensitive fields. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
8. Contact us
If you have questions about this Privacy Policy or wish to exercise your rights, contact us at [email protected] or write to Rutoherbs Private Limited, Kotputli-Behror, Rajasthan, India.
9. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version here with a new “Last updated” date, and where changes are material, we will provide additional notice.