Privacy Policy — United States

The OneAppPlus marketplace platform (www.oneappplus.com) is operated by ONEAPPPLUS INC ("OneAppPlus", "We", "Us" or "Our"), which inter alia facilitates and provides a marketplace for KYC-verified Sellers — including GI-certified weavers, artisans, and craft producers — to sell their products to US customers.

This Privacy Policy describes our policies and procedures on the collection, use, disclosure, sharing, processing, transfer, storage, and retention of data provided to us by you through the use of the Platform. By accessing or using our Platform, you agree to be bound by this Privacy Policy. We comply with the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), the Children's Online Privacy Protection Act (COPPA), and other applicable US federal and state privacy regulations.

We may update this Privacy Policy from time to time and will notify you of material changes via email or a Platform notice before changes take effect.

1. Data Collected

1.1 When you use the OneAppPlus Platform, we collect the following categories of personal information:

Category (CCPA)	Examples	Purpose
Identifiers	Name, email address, phone number, account username, IP address	Account management, order notifications, customer support, fraud prevention
Commercial Information	Products purchased, order history, wishlist, cart contents, returns	Order fulfilment, dispute resolution, personalised recommendations
Financial Information	Stripe payment transaction reference only — full card data is tokenised by Stripe (PCI-DSS Level 1), never stored by us	Payment processing and reconciliation
Geolocation Data	Shipping address, US state (for sales tax calculation)	Order fulfilment, sales tax, carrier handover
Internet / Electronic Activity	Pages visited, search queries, time on page, browser type, device type	Security, fraud prevention, Platform analytics
Inferences	Product preference profiles derived from purchase and browse history	Personalised product recommendations
Sensitive Personal Information	Account credentials (password stored in hashed form only)	Authentication and account security

1.2 We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete it in accordance with COPPA.

2. App Permissions

2.1 The OneAppPlus mobile application may request the following permissions:

• Camera — for product review photos and return/damage claim evidence uploads.
• Storage — to select and upload images from your device gallery.
• Notifications — to send order updates, dispatch confirmations, and promotional alerts (with your consent).
• Microphone — for optional voice search functionality.

2.2 You can grant or revoke permissions at any time via your device settings. Some features may be limited without certain permissions.

3. Cookie Policy

3.1 We use cookies, pixel tags, and similar tracking technologies. Types used:

• Strictly Necessary — login sessions, cart, checkout. Cannot be disabled.
• Functional — locale/market preferences, recently viewed items.
• Analytics — aggregate usage data (page views, load times). Not linked to personal identity.

3.2 We do not use cookies for cross-context behavioural advertising or share your data with external advertising networks. Manage cookie preferences via your browser settings. See our full Cookie Policy.

4. Use of Data

4.1 We use the information collected for the following purposes:

• Order Processing & Fulfilment — processing your orders, calculating and collecting US sales tax, generating purchase receipts, and coordinating delivery with our logistics partners.
• Import & Customs — for cross-border India-origin orders, coordinating commercial invoice, HS code, and customs documentation with our Exporter of Record.
• Account Management — authentication, account recovery, and security monitoring.
• Personalisation — product recommendations based on your purchase and browse history.
• Communication — order updates, dispatch notifications, delivery confirmations, and (with consent) promotional communications.
• Platform Improvement — analysing usage patterns to improve functionality, performance, and user experience.
• Security & Fraud Prevention — detecting, investigating, and preventing fraudulent transactions and other illegal activity.
• Legal Compliance — meeting obligations under applicable US federal and state law, including tax, import, and consumer protection regulations.

5. Disclosure and Sharing of Data

5.1 We do not sell your personal information to third parties. We disclose your data only as follows:

• Stripe — payment processing under PCI-DSS Level 1 standards. OneAppPlus receives only a payment token/reference.
• Carriers & Logistics (UPS, FedEx, USPS, customs/freight brokers) — shipping name, address, and phone for delivery and import clearance.
• Sellers / Vendors — shipping name, address, and phone for dispatch coordination only. Sellers never see your email, payment details, or purchase history.
• Service Providers — cloud infrastructure (AWS), analytics, and fraud-prevention tools under strict data-processing agreements.
• Law Enforcement / Regulators — where required by subpoena, court order, FTC, state attorney general, or other applicable US federal or state legal process.

6. Your Privacy Rights

California Residents (CCPA / CPRA):

• Right to Know — request the categories and specific pieces of personal information we have collected about you, the sources, our business purposes, and the third parties with whom we share it.
• Right to Delete — request deletion of your personal information, subject to legal retention requirements.
• Right to Correct — request correction of inaccurate personal information.
• Right to Opt Out of Sale/Sharing — we do not sell or share personal information for cross-context behavioural advertising. No action is required.
• Right to Limit Use of Sensitive Personal Information — we use sensitive personal information (account credentials) only for authentication. No further limitation is needed.
• Right to Non-Discrimination — we will not discriminate against you for exercising any of these rights.

Other US Residents: Depending on your state, you may have similar rights under state privacy laws. Contact us at privacy@oneappplus.com to exercise any applicable right.

Submit privacy requests to: privacy@oneappplus.com (subject: "Privacy Request — US"). We respond within 45 days (extendable by a further 45 days with notice) as required under the CCPA/CPRA.

7. Retention of Data

7.1 Transaction records are retained for 7 years for US federal and state tax, audit, and import-documentation purposes.

7.2 Account and profile data is retained while your account is active or until you request deletion. We will honour deletion requests within 45 days, subject to legal retention requirements.

8. Third-Party Services and APIs

8.1 The Platform may use third-party APIs for payment processing (Stripe), logistics tracking, and analytics. These services have their own privacy policies. By using the Platform, you consent to data sharing with these services to the extent described in this Privacy Policy.

8.2 The Platform may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies.

9. Security

9.1 We implement appropriate technical and organisational security measures including TLS/HTTPS encryption in transit, AES-256 encryption at rest for sensitive fields, role-based access controls, and regular security audits.

9.2 In the event of a security breach that is likely to affect your personal information, we will notify you as required by applicable US state data breach notification laws.

10. Governing Law

10.1 This Privacy Policy is governed by the laws of the State of Delaware. Any dispute shall be resolved by binding arbitration under the American Arbitration Association's Consumer Arbitration Rules, on an individual (non-class) basis, except where prohibited by applicable law.

11. Contact

Email: privacy@oneappplus.com (subject: "Privacy Request — US")
General support: support@oneappplus.com