Privacy policy

Google sign-in

When you choose Google sign-in, Google shares your basic profile and verified email address with us. We store your Google account identifier, email address, and name to create or identify your Sikkim Store account. We do not store your Google password or request access to Gmail messages, Drive files, calendars, or contacts. Although Google’s basic profile permission includes a profile picture, our account service does not store that picture.

Our server verifies Google’s sign-in response. Google access and identity tokens are used during that exchange and are not saved for ongoing access to Google APIs. We do not sell Google user data or use it for advertising. You can review or remove the connection in your Google Account settings. Removing the connection does not automatically delete an existing Sikkim Store account.

Information you provide

Account features may store addresses, wishlist items, support requests, and reviews that you submit. Vendor features may store business details, pickup addresses, document references, shop information, and product listings. We use this information to provide those features and manage applications, support, and marketplace operations. Published shop information, listings, and reviews are visible to visitors.

Cookies and analytics

We use an essential session cookie to maintain your sign-in and shopping cart. Sessions expire after 30 days; signing out ends access through the current signed-in session. Browser cookie controls can limit these cookies, but account and cart features may then stop working.

Public production storefront pages use Google Analytics to understand website usage. Analytics can process page visits, interactions, browser and device information, and approximate location derived from network information. The seller and administrator workspaces do not load our Analytics tag. Our integration does not send your Google sign-in identifier, name, or email address to Analytics. See how Google uses information from sites that use its services. You can manage cookies in your browser and use Google’s Analytics opt-out browser add-on.

Service providers and access

We use Vercel to host the website, Railway to run the API, background services and databases, and Google for authentication and analytics. These providers process information needed to operate their services and may process it outside your location. Authorized platform staff can access information needed for support and operations. Private vendor operations are restricted to members of that vendor, and platform administration requires additional authentication.

Retention and your requests

Account and submitted information remains stored unless it is removed through an available feature or an account-data request. Signing out does not erase stored account information. To request access, correction, or deletion, email raynirola@gmail.com from your account email address. We may need to verify your identity before acting. Records needed for security, dispute resolution, or applicable legal obligations may need to be retained; copies in operational backups may remain until those backups are replaced.

Marketplace transactions and changes

The marketplace is currently preparing for live trading. Purchase, payment, delivery, and seller policies will be provided before those services are enabled. We will update this notice when our data practices change and show the revision date on this page.