Privacy Policy

1. Who We Are

AiStore Nepal (aistorenepal.com) is operated by Digital Daud Pvt. Ltd. (PAN: 619718228), Dallu, Kathmandu, Nepal. We are committed to protecting your personal information and your right to privacy.

2. Information We Collect

We collect the following information:

• Email address — required for account creation and OTP authentication
• Name — optional, used for personalized communication
• Order information — products purchased, payment status, delivery details
• IP address — for security and rate limiting purposes
• Browser/device information — for analytics and security

We do not collect passwords (we use OTP authentication) or payment card details (handled by our payment partner).

3. How We Use Your Information

• To authenticate your account via email OTP
• To process and fulfill your orders
• To send order confirmation and delivery emails
• To provide customer support
• To prevent fraud and abuse
• To improve our services

We do not sell your personal information to third parties.

4. Data Storage and Security

Your data is stored on servers hosted by Hostinger in a secure environment. Sensitive product credentials in our inventory are encrypted using AES-256-GCM encryption. OTP codes are stored as bcrypt hashes — the plaintext is never saved. Session tokens are stored in httpOnly cookies and cannot be accessed by JavaScript.

5. Cookies

We use the following cookies:

• asn_session — authentication session (httpOnly, 7 days)
• asn_cart_session — guest cart identifier (httpOnly, 30 days)

We do not use advertising or tracking cookies.

6. Third-Party Services

We share data with:

• API Nepal — payment processing (receives order amount and reference)
• SMTP email provider — to deliver OTP and order emails

These providers have their own privacy policies and are contractually bound to protect your data.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Opt out of marketing communications

To exercise these rights, email us at contact@aistorenepal.com.

8. Data Retention

We retain your account data for as long as your account is active. Order records are retained for 7 years for legal and tax compliance. You may request account deletion at any time; order history required for compliance will be anonymized.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you by email or a notice on our website. Continued use of our services after updates constitutes acceptance.

10. Contact

For privacy questions or data requests, contact: contact@aistorenepal.com or WhatsApp: +977 9803329258.