Privacy Policy

Introduction

At HREEM NATURALS PRIVATE LIMITED, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you visit our website, make a purchase, or use the MSHOT partner app for Android.

It covers two kinds of people. Customers who buy from our website, and business partners — distributors, CMOs and direct sales agents — who hold an account on our partner portal or app. Business partners give us more information than customers do, because we are required to verify who they are before they can trade.

Information We Collect

When you use our website or place an order

Personal Information: Name, email address, phone number, shipping address, and billing details when you place an order or create an account.
Usage Data: Pages visited, time spent on our site, browser type, and device information to improve our services.
Cookies: We use cookies to enhance your browsing experience and remember your preferences.

When you hold a partner account, on the portal or in the app

Account details: Your name, email address, mobile number, and the password you set.
Identity and business documents: Your Aadhaar, PAN and shop licence — the document numbers, and photographs of the front and back that you upload for verification. This is required before a partner account can trade.
Bank details: Account holder name, account number and IFSC, together with a supporting document. We need these to pay your commissions and to process withdrawal requests.
Business records: The orders you place and raise, the payments you record or declare, any payment receipts you upload, and the stock, invoice and commission records belonging to your organisation.
Referral information: Who invited you, and which partners you go on to invite. If you install the app from an invitation link, the app reads the referral code that link carried so that your sign-up is credited to the right sponsor.

How We Use Your Information

To process and fulfil your orders
To communicate with you about your orders and account
To send promotional offers and updates (only with your consent)
To improve our website and customer experience
To verify a partner's identity and business before their account is activated
To calculate and pay commissions, and to process withdrawal requests
To keep the order, invoice, GST and payment records that Indian law requires us to keep
To credit a sign-up to the partner who referred it

Who We Share It With

We do not sell your personal information. We share it only where it is needed to run the service:

Payment gateway: Razorpay processes online payments. Card and banking credentials are entered with them, not with us, and we never see or store them.
Communication providers: Our SMS and email providers, to send one-time passcodes and account notifications.
Hosting and infrastructure providers: Who store the data on our behalf.
Government and tax authorities: Where the law requires us to disclose, such as GST filings and statutory records.
Within the partner network: A partner's business name, tier and trading history are visible to the organisation that sponsors them and to the organisation they trade with, because that is how a distribution account works. Identity documents and bank details are not.

Permissions the App Asks For

Camera and photo library: Only when you choose to attach a KYC document or a payment receipt. Nothing is read from your device unless you pick it.
Clipboard: Read only at the moment you tap "Paste invite code" on the sign-up screen, and only to look for an invitation code.
Install referral: Read once, on the first launch after installing, to recover the invitation code that brought you to the app.
Internet: To reach our servers.

The app does not collect your location, your contacts, or your call or message history. Our payment library declares NFC and basic phone-state permissions as part of its own functionality; we do not use them to gather information about you.

Data Security

We implement industry-standard security measures to protect your personal information. Payment processing is handled through secure, PCI-compliant payment gateways.

Identity documents, bank documents and payment receipts are held in private storage. They are not published, not indexed, and are shown only to signed-in staff and partners entitled to see them. Passwords are stored as one-way hashes, so nobody at HREEM NATURALS can read yours.

How Long We Keep It

We keep your account information for as long as your account is open. After an account is closed we keep the order, invoice, payment and GST records associated with it for as long as Indian tax and company law requires us to, and we keep nothing else.

Your Rights

You have the right to access, update, or delete your personal information at any time by contacting us or managing your account settings.

Deleting Your Account

You can ask us to delete your account and the personal data in it at any time. Email support@mshot.com from the address registered on the account, or write to the postal address below, and say that you want your account deleted.

We will remove your profile, your identity documents and your bank details within 30 days of a verified request. Invoices, payments and tax records must be retained under Indian law and will be kept for the required period, but they will no longer be connected to a login you can use.

Children

Our services are not directed at anyone under 18, and we do not knowingly collect personal information from children. A partner account requires a registered business.

Changes to This Policy

We may update this policy as the service changes. The revision date at the top of this page always shows when it was last changed, and material changes will be notified to account holders.

Contact Us

For any question about this policy, or to exercise any of the rights above:

HREEM NATURALS PRIVATE LIMITED
Third Floor Front Portion of Prop No. 8/33, RJH Complex, Kirti Nagar INDL. Area, New Delhi 110015
Email: support@mshot.com
Phone: 7299080715