Legal
Privacy policy
We take your privacy seriously. Your photos and data are yours — we handle them accordingly.
Last updated: September 2026
Privacy in plain English
- ✓ Your photos are encrypted at rest and deleted once your order is dispatched.
- ✓ We never use your photos for any purpose except printing your order.
- ✓ We never sell your personal data to third parties.
- ✓ Payments are handled by Cashfree — we never see your card number.
- ✓ You can request deletion of your account and data at any time.
Who we are
StoryPop is a consumer brand operated by Smartshopz LLP, a company registered in Bengaluru, Karnataka, India (GSTIN: 29ABKFS2031L1ZL). For privacy enquiries, contact us at support@storypop.in.
What data we collect
Account information
Name, email address, phone number. Required to create an account and process orders.
Shipping address
Collected at checkout to deliver your order. Stored so you don’t have to re-enter it.
Photos you upload
Uploaded photos are stored in encrypted cloud storage and used exclusively to print your order. They are automatically deleted once your order is marked dispatched. We do not retain, review, or use your photos for any other purpose.
Payment information
Payments are processed by Cashfree (PCI-DSS compliant). We receive a payment confirmation and transaction ID — we never receive or store your card number, CVV, or UPI PIN.
Order history
Your order records (products, quantities, amounts, addresses) are stored to allow order tracking and customer support. We retain these for 3 years for accounting purposes under Indian law.
How we use your data
- —To process and fulfill your order
- —To send order confirmation, dispatch notification, and tracking information
- —To respond to your support queries
- —To send transactional WhatsApp/SMS messages related to your order (no marketing without consent)
- —To comply with applicable Indian laws and tax regulations
We do not send marketing emails or WhatsApp messages unless you explicitly opt in. You can unsubscribe at any time.
Who we share data with
We do not sell, trade, or rent your personal information. We share your data only with the following service providers, and only to the extent necessary:
Cashfree Payments
Payment processing. They receive your payment details; we receive only confirmation.
Delhivery
Shipping. Your name and delivery address are shared to generate your shipping label.
Cloud hosting
Database and file storage. Your account data and photos are hosted on encrypted servers.
Rapido (Bengaluru orders only)
Same-day delivery. Name and address shared only for local delivery.
Google Analytics and Google Ads
With your measurement permission, we use analytics and advertising cookies to measure site activity and the effectiveness of StoryPop advertising. Google receives pseudonymous device and event data, not your photos or order contact details.
Microsoft Clarity
With your measurement permission, we use session analytics to understand how visitors navigate the site and improve usability. We do not use it to review uploaded photos or payment details.
Security
Your data is stored with encrypted storage at rest and in transit (TLS). Photo files are stored in private, access-controlled storage — they cannot be accessed without authentication.
Passwords are hashed and never stored in plaintext. Payment data never touches our servers.
If we ever become aware of a data breach that affects your personal information, we will notify you by email within 72 hours.
Cookies
We use functional cookies — specifically, a session cookie to keep you logged in and a cart cookie to preserve your cart across sessions. You can choose whether to allow measurement by Google Analytics 4 (GA4), Google Ads, and Microsoft Clarity. If you allow it, we use these services to understand aggregate site use and measure the performance of StoryPop advertising. This may include pseudonymous campaign identifiers such as Google click IDs and UTM parameters, which we store with an order to understand which marketing activity led to it. We do not send your uploaded photos or payment details to Google or Microsoft.
Your rights
You can, at any time:
- —Request a copy of all data we hold about you
- —Request deletion of your account and personal data (excluding order records required by law)
- —Update your personal information via your account settings
- —Opt out of marketing communications
To exercise any of these rights, email support@storypop.in. We will respond within 7 business days.
Children
StoryPop is not intended for use by individuals under 18. We do not knowingly collect data from minors. If you believe we have collected data from a minor, contact us immediately.
Changes to this policy
If we make material changes to this policy, we will notify you via email and update the ”Last updated” date above. Continued use of StoryPop after a policy update constitutes acceptance of the new policy.
Privacy questions? Email us directly.
support@storypop.in