Your Privacy
What we collect, why we need it, how we protect your measurements and the rights you have under the DPDP Act 2023.
Encrypted
measurements
Never sold
your data
Last updated 13 October 2026 · Pepaco
Who We Are
Pepaco (“we”) runs the Pepaco website and app, a doorstep tailoring service in Bengaluru, Karnataka. Under the Digital Personal Data Protection Act, 2023 (DPDP Act), we are the Data Fiduciary for the personal data you share with us.
This policy explains what we collect, why we need it, who we share it with and the choices you have.
What We Collect
- Account details: your name, email address and mobile number.
- Visit details: your address and area, the visit window you choose and any notes for the tailor.
- Measurements and garment details: your measurements, the styles and fabrics you choose, and sample photos you upload.
- Orders and payments: your orders, invoices, amounts paid and how you paid. We never see or store full card details.
- Consent records: the time and network address when you agreed to our Terms and to messages from us.
- Security records: sign-in attempts and similar records we need to keep your account safe.
How We Use It
- To book, carry out and deliver your orders, and to send you invoices.
- To contact you about your orders by email, phone or WhatsApp.
- To save your measurements so your next order is quicker.
- To keep the service secure and stop misuse, for example by limiting sign-in attempts.
- To keep the records that tax and consumer laws require.
We send offers only if you agree to receive them, and you can stop them at any time. We do not sell your personal data.
How We Protect Your Measurements
Your measurements are encrypted (AES-256-GCM) before they are saved, using a key that is kept separately from the database. Someone with a copy of the database alone would see scrambled data.
Only you can open your saved measurements in your account. Our team uses them only to make and fit your clothes.
Good to Know
This is not end-to-end encryption. Our systems need to read your address and measurements so a tailor can do the work, so we limit who can access them.
WhatsApp and Other Messages
When you sign up, you can agree to receive order updates on WhatsApp, such as booking confirmations, visit reminders and refund updates.
We send offers on WhatsApp only if you agree. To stop them, reply STOP or tell us, and we will stop.
How Long We Keep It
- Account details: while your account is open.
- Saved measurements: until you delete them or close your account.
- Orders and invoices: as long as tax and accounting laws require.
Your Rights
Under the DPDP Act, you can ask us to:
- Give you a summary of the personal data we hold about you.
- Correct or update it.
- Delete it, unless the law requires us to keep it.
- Stop using it where you had given consent.
- Let someone you nominate act for you if you are unable to.
To use any of these rights, email support@pepaco.in or contact our Grievance Officer. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.
Children
Accounts are for people aged 18 and over. Parents and guardians can book services for their children, and those details are saved in the parent's account.
Changes to This Policy
If we change this policy, we will update the date at the top of this page. If the change is important, we will also tell you by email or WhatsApp.
Questions About This?
Ask us on WhatsApp or by email. We reply every day.
Other Policies