The GenZ Store lets Instagram brands run a simple online store. This policy explains what personal data we handle, why, and your rights under India's Digital Personal Data Protection Act, 2023 (DPDP Act). For customers, the brand you order from is the one who decides what to do with your order; we provide the tool and keep the data safe.
What we collect when you place an order
- Your name, phone number, delivery address, pincode, city and state, and any delivery notes you type.
- Your payment reference (UTR) and a payment screenshot, only if you choose to share them.
- Reference images or text a brand asks for, such as a name to print on a product.
- The time you accepted this policy at checkout, and a one-way hash of your IP address used only to stop abuse.
We ask for your consent with a checkbox before an order is placed. You can say no by not placing the order.
Who sees it
Your order details are shared only with the brand you order from, so they can confirm payment and deliver your order. We do not sell your data, run ads on it, or share it with other brands. Our service providers (hosting, database, file storage) process it on our behalf under confidentiality obligations. We disclose data if the law requires it.
What brands share with us
Brand owners give us their email, store details, WhatsApp number, UPI ID and product information. Payments happen directly between you and the brand on UPI. We never handle or hold your money.
Instagram data
A brand may connect its Instagram professional account. With the brand owner's consent we read that account's own profile (name, bio, picture) and its own posts (images, captions, links) only to create draft products for the brand to review. We do not read direct messages, followers or other people's content, and we never post for the brand.
- The Instagram access token is stored encrypted and is used only for the import and refresh jobs.
- Imported images are copied to our storage so they keep working after Instagram links expire.
- Captions and images may be processed by an AI service to suggest product names, prices and options. The brand reviews everything before publishing.
- Disconnecting Instagram in Settings deletes the stored token and Instagram identifiers immediately.
How long we keep data
Order details are kept for as long as the brand needs them to fulfil the order and handle returns, support and tax records, and then deleted or anonymised. Rate-limit counters are deleted within days. Brand accounts are kept until the brand asks us to close them.
Security
Data is transmitted over HTTPS, stored in access-controlled databases and file storage, and access to full order details is limited to the signed-in brand. No system is perfectly secure; if a breach affects you we will notify you and the Data Protection Board as the law requires.
Your rights and data deletion
You can ask us to access, correct, or delete your personal data, or withdraw your consent, at any time.
- Customers: email support@thegenzstore.com with your order code and phone number and we will delete or anonymise your order data, and tell the brand to do the same.
- Brands: disconnect Instagram in Settings to delete the token at once, delete products you no longer want, or email support@thegenzstore.com to delete your account and all imported Instagram content.
- We respond to verified requests within 30 days. You may also complain to the Data Protection Board of India.
Children
Our service is not meant for children under 18, and we do not knowingly collect their data.
Changes and contact
We will update this page when our practices change. Questions: support@thegenzstore.com.