Privacy Policy – Bunchat Admin

Last updated: June 2025

This Privacy Policy describes how Sphiron Technologies ("we", "us", or "our") collects, uses, and protects information when you use the Bunchat Admin mobile application (the "App"). The App is an internal administration tool used exclusively by authorised personnel of Bunchat to manage products, categories, and customer orders for the Bunchat Nepali ethnic cultural wear platform.

1. Information We Collect

We collect only the information necessary to operate the App:

Authentication data — Your registered phone number is used to create and verify your admin account via Firebase Authentication.
Product data — Product names, prices, categories, and images that you upload while managing the store catalogue.
Order data — Customer names, phone numbers, ordered product details, quantities, and order status that are generated through the customer-facing Bunchat platform.
Device token — A push notification subscription ID (via OneSignal) used to deliver order alerts to this device.

2. How We Use Your Information

To authenticate and authorise access to the admin panel.
To display, manage, and update product listings and categories.
To view and process customer orders.
To send push notifications when new orders are placed.
To store product images securely on Cloudinary.

3. Third-Party Services

The App uses the following third-party services. Each service has its own privacy policy:

Firebase (Google LLC) — Authentication and Firestore database for storing product and order data. firebase.google.com/support/privacy
Cloudinary — Cloud storage for product images. cloudinary.com/privacy
OneSignal — Push notification delivery service. onesignal.com/privacy_policy

4. Data Storage and Security

All data is stored in Google Firebase Cloud Firestore (region: asia-south1). We implement industry-standard security measures including encrypted connections (HTTPS/TLS), Firebase Security Rules, and authenticated access only. Product images are stored securely on Cloudinary's servers.

While we strive to protect your information, no method of electronic storage is 100% secure. We cannot guarantee absolute security.

5. Data Sharing

We do not sell, trade, or rent your personal information to third parties. Data is shared only with the third-party services listed in Section 3 solely for the purpose of operating the App.

6. Data Retention

Authentication and account data is retained as long as your admin account is active. Order records are retained for business and legal compliance purposes. You may request deletion of your account by contacting us at the address below.

7. Children's Privacy

This App is intended solely for use by authorised adult administrators. It is not directed at children under 13, and we do not knowingly collect personal information from children.

8. Your Rights

As an authorised user of this App, you have the right to:

Access the personal data we hold about your admin account.
Request correction of inaccurate data.
Request deletion of your account and associated data.

To exercise any of these rights, contact us using the details below.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify authorised users of any material changes. The "Last updated" date at the top of this page will reflect the most recent revision.

10. Contact Us

If you have any questions about this Privacy Policy, please contact:

Company: Sphiron Technologies
App: Bunchat Admin
Email: tiwariabishek44@gmail.com
Location: Kathmandu, Nepal