Privacy Policy
Last updated August 2026
Anviloom collects the minimum it needs to sell you clothes and get them to your door. This page says what that minimum is, in plain words. If anything here worries you, write to hello@anviloom.in and a person will answer.
Who we are
Anviloom is registered at Padinjarangadi, Edappal, Palakkad, Kerala, India. We decide what is collected here and why, which is what makes us answerable for it.
What we collect
Your name and email when you create an account — sign-in is passwordless, by a one-time code we mail to you, or through Google if you choose it. We never see or store a password.
Your delivery details when you place an order: name, mobile number, email, and the address itself. Guests give the same details; an account just remembers them for next time.
Your bag and order history, so the shop works the way a shop should — what you added, what you bought, and what we still owe you (a pending delivery, a free gift).
What we never collect
Card, UPI and banking details go straight to Razorpay, our payment processor — they never pass through or rest on Anviloom's servers. We keep only Razorpay's reference identifiers for your payment, which contain no financial data.
Who we share it with
Four services touch your data, each for one job: Razorpay processes payments, Resend delivers our emails (sign-in codes, order confirmations and status notices), Google confirms who you are if you choose to sign in with it, and our hosting provider runs the site and its database. None of them is permitted to use your data for anything else, and we do not sell or rent it to anyone.
Cookies
We set only the cookies the shop cannot work without: one that keeps you signed in, one that remembers a guest's bag, and one that lets you see your own order confirmation. None of them can be read by JavaScript, and we set nothing for advertising or analytics.
Razorpay's checkout, which loads on the payment page alone, sets cookies of its own that we neither control nor read. What it does with them is covered by Razorpay's own privacy policy.
Where it is held
The site, its database and its email delivery run on Vercel (the site), MongoDB Atlas (the database) and Resend's Tokyo region, ap-northeast-1 (email delivery). Some of that sits outside India — the emails we send you are dispatched from Japan — so shopping here means your details are transferred abroad, to the four services named above, for the purposes named above, and for nothing else.
How we protect it
Everything travels over HTTPS. Sign-in codes are hashed before they are stored and deleted the moment they are used, so a code that has been spent no longer exists. The cookies that keep you signed in and remember your bag cannot be read by JavaScript. Access to the database and the admin area is limited to the people who run the shop.
No system is perfect and we will not pretend otherwise — but the one thing that would hurt most to lose is not ours to lose, because your card and banking details never reach us.
How long we keep it
Sign-in codes expire within minutes and delete themselves. A guest's abandoned bag expires on its own. Completed orders are kept as long as tax and accounting law requires. Your account and the addresses saved to it stay until you ask us to remove them.
Your choices
You can ask us to show you what we hold about you, correct it, or delete your account and its data entirely — email hello@anviloom.in from the address on the account. We keep records of completed orders as long as tax law requires, and nothing longer.
You can withdraw your consent at any time by asking us to close your account. Doing so does not undo what was lawful while the consent stood, and it cannot erase order records the law requires us to keep.
Children
This shop is not intended for children, and we do not knowingly collect anything from anyone under 18. If you believe a child has given us their details, write to us and we will delete them.
Changes to this policy
If this policy changes, the date at the top of the page changes with it, and the version published here is always the one that applies.
Grievance Officer
The officer named below handles complaints about how your data is collected or used, as the Information Technology Act, 2000 and the rules made under it require. We acknowledge a complaint within 48 hours and aim to resolve it within one month.
Vishnu T — Founder
Anviloom, Padinjarangadi, Edappal, Palakkad, Kerala, India
Email: hello@anviloom.in