Privacy Policy

Last updated: 2026-10-11

At a glance

We collect only what we need to sell, deliver and check trade-ins, and to support you.
We never see or store your card number, CVV, UPI PIN or bank login.
We don't sell your data or use it for advertising.
Analytics cookies run only if you accept them.
You can ask to see, correct or erase your data at any time.

1. Who is responsible

SWAP MY TECH E-SOLUTION PRIVATE LIMITED is the Data Fiduciary for your personal data under the Digital Personal Data Protection Act, 2023 (DPDP Act). For any privacy request, email support@swapmytech.com.

2. What we collect and why

Name, email and phone: to take your order, send updates and support you.
Address and pincode: to deliver, and for a trade-in, so our agent can visit you.
Sign-in details: if you sign in with Google, your name, email, profile picture and Google ID (never your password). You can also sign in with an emailed code.
Order and device details: what you bought, and for a trade-in the model, condition answers, photos and IMEI or serial number, to value it and check it isn't stolen.
Payment status: the payment reference and status from Razorpay. Never card or UPI credentials.
Swapper chat: your name, mobile number and messages, so we can answer and call you back.
Security data: IP address and browser details, to prevent fraud and abuse.
Site activity: pages viewed, searches, cart and checkout steps, counted by our own server without cookies, and linked to your account only while you are signed in. See the Cookie Policy.
Google Analytics: only if you accept analytics cookies.

Only what each needs: Razorpay (payments), Google (sign-in, and analytics if you accept), our email provider (order and sign-in emails), our delivery partners (to deliver your order), the supplier of your new product, and our hosting provider. If we resell a traded-in device, we don't pass on your contact details unless the law requires it. Most processing is in India; any transfer abroad follows DPDP rules.

4. How long we keep it

Tax and payment records: 8 years, as Income Tax and GST law requires, even after you delete your account.
Contact and order details: for as long as you are a customer, then with those tax records.
Cancelled or abandoned orders: contact details are anonymised 24 months after the last activity.
Sign-in details: until you delete your account.
Site activity: 13 months. Google Analytics: up to 14 months. Swapper chats: 12 months. Security logs: 90–180 days.

5. Your rights

You can ask to access, correct or erase your data, nominate someone to act for you, withdraw consent, or raise a complaint. Request erasure from your profile or by email to support@swapmytech.com; we acknowledge within 48 hours and complete it within 7 working days. For other requests we check your identity first, acknowledge within 48 hours and resolve within 30 days. Withdrawing consent may stop us providing some services.

6. Security

Data is encrypted in transit, access is limited to the staff who need it, and backups are kept off-server. If a breach affects you, we will tell you and the Data Protection Board of India as the DPDP Act requires.

7. Children

Our services are for adults aged 18 and over. We do not knowingly collect children's data.

8. Changes

If this policy changes in a material way, we will update the date above. Questions go to support@swapmytech.com.