Privacy Policy - QFC Merchant
Last updated: 21 July 2026
QFC ("we," "us," "our") operates the QFC Merchant app and the QFC platform (pos.smehub.in), a store management and order-fulfillment service for small and medium businesses ("the Service"). This policy explains what information we collect through the Service, how we use it, and your rights regarding it.
1. Who we are
QFC is operated by SMEHub (GSTIN 33BCNPM8348H1Z7). Contact: tosmehub@gmail.com.
2. Information we collect
- Merchant account information: phone number, password (stored as a secure hash), business name, store name, store address, city, pincode, and UPI ID for receiving payments.
- Customer account information: name and phone number, used to place and manage orders.
- Order data: items ordered, delivery address (for door delivery orders), pickup/delivery preferences, order status, and payment method.
- Payment verification: for UPI payments, customers may upload a payment screenshot as proof of payment; this image is stored to allow the merchant to verify the transaction.
- Device push notification tokens: if you use the QFC Merchant Android app, we register a device token (via Firebase Cloud Messaging) so we can deliver order alerts to your device. This token identifies your app installation, not you personally.
- Usage and analytics data: we use Google Analytics to understand how the Service is used (e.g. pages visited, general usage patterns) to help us improve it.
3. How we use information
- To operate core Service functions: processing orders, managing inventory, and facilitating payment and delivery between merchants and customers.
- To send order and account notifications via push notification, WhatsApp, and email.
- To maintain account security and prevent abuse.
- To understand usage patterns and improve the Service, via Google Analytics.
4. How information is shared
- Between merchants and customers: order and delivery details are shared between the customer placing an order and the merchant fulfilling it, as necessary to complete the transaction.
- Google / Firebase: device push tokens are processed through Google's Firebase Cloud Messaging to deliver notifications; usage data is processed through Google Analytics. Both are governed by Google's own data terms.
- We do not sell personal data to third parties.
- We may share data with service providers who support our infrastructure (e.g. hosting) under confidentiality obligations, and as required by law.
5. Data retention
We retain account and order data for as long as necessary to provide the Service and meet legal/regulatory obligations, after which it is deleted or anonymized.
6. Your rights
You may request access to, correction of, or deletion of your personal data by contacting tosmehub@gmail.com. We handle such requests in accordance with India's Digital Personal Data Protection (DPDP) Act.
7. Security
We apply reasonable technical and organizational measures to protect data against unauthorized access, loss, or misuse.
8. Children's privacy
The Service is intended for business use by merchants and their customers and is not directed at children.
9. Changes to this policy
We may update this policy from time to time. Material changes will be posted on this page with an updated "Last updated" date.
10. Contact us
Questions about this policy: tosmehub@gmail.com