Privacy

To fulfil an order we need a name, mobile number, delivery address and — if you supply one — an email address. Your account stores the contact methods you verify and the addresses you save.

We also keep the technical records any storefront needs: order history, cart contents and server logs that let us diagnose problems.

Sign-in is handled by our API with a session cookie marked HttpOnly and SameSite, so JavaScript on the page cannot read it. Guest carts are likewise keyed by an HttpOnly cookie. We do not put authentication tokens in local storage.

The only browser-storage values the storefront writes are non-sensitive preferences: your recent search terms and the products you picked to compare.

Card details are never entered on swaymAI. When a card or UPI provider is configured, you complete payment on the provider's own domain, and we only store the resulting payment reference and status.

When you follow a link to a partner merchant, that merchant becomes the data controller for what happens on their site. Our affiliate disclosure explains the commercial relationship.

You can update your name and addresses from your account, revoke other sessions, and ask us to delete your account by contacting us.