Privacy Policy
Frunora (operated by Vrushabh Fruits and Vegetables)
Proprietor: Shri Vaibhav Prakash Dalvi
MSME Reg. No.: UDYAM-KR-03-0055845
No Google Analytics, no Facebook Pixels, and no third-party ad networks. We do not sell your personal data.
Raw card numbers and UPI credentials are handled exclusively by our payment gateway (PhonePe or Razorpay) and never stored on our servers.
Customers log in via short-lived OTPs sent on WhatsApp or by email — eliminating the risk of stored password leaks.
1. Introduction
Welcome to Frunora ("we", "us", or "our"). Vrushabh Fruits and Vegetables (Proprietor: Shri Vaibhav Prakash Dalvi, MSME Reg. No. UDYAM-KR-03-0055845; trading as Frunora) operates the Frunora website and fruit pre-order delivery service currently available in Bengaluru, Karnataka, India.
This Privacy Policy explains what personal data we collect, how we use it, with whom we share it, and what rights you have in relation to it. By using our website or placing an order with us, you agree to the practices described in this document.
If you do not agree with this policy, please do not use our services.
2. Who We Are
| Detail | Information |
|---|---|
| Registered Business | Vrushabh Fruits and Vegetables |
| Proprietor | Shri Vaibhav Prakash Dalvi |
| MSME Reg. No. | UDYAM-KR-03-0055845 |
| Type | Micro Enterprise (Proprietorship) |
| Mobile | +91 7709348868 |
| Service Area | Bengaluru, Karnataka, India |
| Contact Email | help@frunora.com |
| Website | https://frunora.com |
3. Information We Collect
3.1 Account & Identity Information
When you create an account or log in, we collect:
- Mobile number — your login when you sign in with WhatsApp, and where we send your login code and order updates on WhatsApp; otherwise optional, for delivery coordination. Stored in E.164 format (e.g. +919876543210).
- Email address — your login when you sign in by email, and used for order communication; optional when you sign up with WhatsApp.
- Full name — collected during your first login or from your Profile page.
- Account role — customer, admin, or delivery_partner, assigned at account creation.
Customers authenticate via a one-time password (OTP) sent on WhatsApp or by email — no password is created or stored for customer accounts. Signing in with WhatsApp also means you agree to receive your order updates there. Staff (admin and delivery partner) accounts use a separate email + password flow.
3.2 Delivery Address Information
When you add a delivery address, we collect:
- House number and floor
- Building and block number
- Street name
- Landmark
- Area, city, and state (optional)
- Pincode — verified against our list of serviceable pincodes before saving
- Receiver's name — the person at the delivery address
- Receiver's phone number — a 10-digit Indian mobile number, used only for delivery coordination
- Address label (Home / Work / Other)
- Delivery instructions (optional)
3.3 Order Information
When you place an order, we record:
- Items ordered (fruit names, varieties, weights, combo crate contents)
- Prices, subtotal, discounts, delivery fee, gift packaging fee, and grand total
- Coupon codes used
- Chosen delivery date and time slot
- Selected payment method (online or Cash on Delivery)
- Payment identifiers from our payment gateway (order ID, transaction ID) — we do not store card numbers, UPI credentials, or any raw payment instrument details
- Payment status and timestamp
- Order status history (placed, confirmed, out for delivery, delivered, cancelled, etc.)
- Delivery photo — uploaded by the delivery partner on successful completion
3.4 Session & Authentication Data
- HTTP-only cookies — we use two cookies for authentication: a short-lived access token (15-minute lifetime) and a longer-lived refresh token. These are
httpOnly, meaning JavaScript on the page cannot read them — by design, so a malicious script cannot steal them. - localStorage profile cache — your public profile (name, email, role) is cached in your browser's
localStorageunder the keyfrunora_authso pages render your signed-in state instantly. This is cleared on logout. - Cart cookie — your shopping cart is stored in a server-side session cookie so it persists across page loads without requiring a login. When you log in, your guest cart is merged with your account's cart.
3.5 Device & Technical Information
Like most websites, our servers may automatically collect:
- IP address
- Browser type and version
- Operating system
- Referring URL
- Pages visited and timestamps
We use this information for security, performance monitoring, and debugging — not for profiling or advertising.
4. How We Use Your Information
| Purpose | Legal Basis |
|---|---|
| Fulfil and manage your pre-orders | Performance of a contract |
| Verify delivery addresses (pincode serviceability check) | Performance of a contract |
| Send OTP codes for account access | Performance of a contract |
| Coordinate delivery with sourcing and delivery partners | Performance of a contract |
| Process online payments via PhonePe or Razorpay | Performance of a contract |
| Collect Cash on Delivery payments | Performance of a contract |
| Apply coupon codes and calculate live quotes | Performance of a contract |
| Allow you to reschedule or track your order | Performance of a contract |
| Display order history and saved addresses in your account | Legitimate interest / contract |
| Prevent fraud and ensure platform security | Legitimate interest |
| Comply with applicable Indian law | Legal obligation |
| Improve our service using anonymised analytics | Legitimate interest |
5. Payment Processing
Online payments are processed by our payment gateway, currently PhonePe; some payments may instead be processed by Razorpay. Both are PCI-DSS compliant. When you pay online:
- The gateway's checkout script (
mercury.phonepe.comorcheckout.razorpay.com) is loaded in your browser. - You enter your payment credentials (UPI, cards, net banking) directly into the gateway's secure interface — we never see or store them.
- After payment, our server confirms the payment status directly with the gateway before marking your order as paid.
- Each gateway is governed by its own privacy policy: PhonePe, Razorpay.
For Cash on Delivery orders, no payment data is collected online.
7. Data Retention
| Data Category | Retention Period |
|---|---|
| Account profile (name, email, mobile) | While your account is active, or up to 3 years after last login |
| Saved delivery addresses | While your account is active |
| Order records | 7 years (for financial and legal compliance) |
| Payment transaction records | 7 years (as required by Indian accounting standards) |
| Authentication cookies | Access token: 15 minutes; Refresh token: as configured by the server |
| Browser localStorage cache | Until you log out or clear your browser storage |
| Delivery photos | 90 days after delivery |
9. Security
We take the following measures to protect your data:
- httpOnly cookies — authentication tokens are stored in httpOnly cookies, inaccessible to JavaScript, to defend against XSS token theft.
- HTTPS/TLS — all traffic between your browser and our servers is encrypted in transit.
- PCI-DSS compliant payment gateways — payment data never passes through our servers.
- Access-checked delivery photos — visible only to the order's customer and our team, never public.
- Role-based access control — customer data is accessible to staff only in the
adminordelivery_partnerroles, and only to the extent needed for their work.
Despite these measures, no internet transmission is 100% secure. We encourage you to keep your email account secure, as it is your login credential for Frunora.
10. Children's Privacy
Frunora is not directed at children under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us at help@frunora.com and we will delete it promptly.
11. Your Rights
Under applicable Indian data protection law, you have the right to:
- Access — request a copy of the personal data we hold about you.
- Correction — update your name and mobile number from the Profile tab in your account; contact us to update your email.
- Deletion — request deletion of your account and personal data (subject to the retention obligations in Section 7).
- Portability — request your order and profile data in a machine-readable format.
- Withdraw consent — where processing is based on consent, withdraw it at any time without affecting lawfulness of prior processing.
12. Third-Party Links
Our website may link to third-party sites (e.g. PhonePe's or Razorpay's payment interface). We are not responsible for the privacy practices of those sites. Please review their policies independently.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this document. For material changes, we will notify you by email. Continued use of Frunora after changes take effect constitutes acceptance of the revised policy.
14. Contact Us
For any questions, concerns, or requests regarding this Privacy Policy:
Frunora (operated by Vrushabh Fruits and Vegetables)
Proprietor: Shri Vaibhav Prakash Dalvi
Flat 303, DS MAX STARRY, Shikaripalya Main Road, Maragondanahalli, Bommasandra, Bengaluru (Urban), Karnataka - 560105
MSME Reg. No.: UDYAM-KR-03-0055845
© 2026 Frunora by Xrovo. All rights reserved.
Frunora — Fresh fruit pre-orders delivered to your doorstep in Bangalore
© 2026 Frunora by Xrovo. All rights reserved.