Legal

Privacy Policy

Effective date: 5 November 2026 · Last updated: 5 November 2026

1. Introduction

1.1 This Privacy Policy describes how Evolve Incorporation (“Evolve Incorporation”, “we”, “us” or “our”), a sole proprietorship firm owned by Kalpit Dave and having its registered address at B-709, Empire Business Hub, Science City Road, Sola, Ahmedabad, Gujarat, India, collects, uses, stores, shares and otherwise processes Personal Data in connection with Localite.

1.2 This Privacy Policy applies to (a) the website at localite.biz (the “Website”); (b) the Localite mobile application; (c) the Localite Business mobile application; and (d) the Localite Business web application, together with all related features and services (collectively, the “Services”).

1.3 This Privacy Policy is published in accordance with the Information Technology Act, 2000 and the rules made thereunder, and the Digital Personal Data Protection Act, 2023 and the rules made thereunder (together, the “DPDP Act”). For the purposes of the DPDP Act, Evolve Incorporation is the Data Fiduciary in respect of Personal Data processed through the Services, except to the extent stated otherwise in this Privacy Policy.

1.4 This Privacy Policy forms part of, and must be read together with, our Terms of Use. By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your Personal Data as described in it.

2. Definitions

In this Privacy Policy, unless the context otherwise requires:

  1. “Business” means a shop, store or other business that uses the Localite Business mobile application or web application to engage with its customers, and includes its owner and any person authorised by it to act on its behalf (a “Staff Member”);
  2. “Customer” means an individual who uses the Localite mobile application to engage with one or more Businesses;
  3. “Personal Data” means any data about an individual who is identifiable by or in relation to such data; and
  4. “you” and “your” refer to any person who accesses or uses the Services, whether as a Customer, a Business, a Staff Member or a visitor to the Website.

3. Eligibility

3.1 The Services are intended solely for persons who are 18 (eighteen) years of age or older. We do not knowingly collect or process the Personal Data of any person below 18 (eighteen) years of age.

3.2 If we become aware that we have collected Personal Data of a person below 18 (eighteen) years of age, we will close the relevant account and delete such Personal Data, subject to any retention required under applicable law.

4. Personal Data We Collect

4.1 Information you provide to us

  1. Account information: your mobile number, your name and, at your option, a profile photo.
  2. Business information: the name, category and location of the Business; the UPI ID of the Business; product information, such as product names, prices and images; and the details of Staff Members.
  3. Delivery addresses: addresses that a Customer saves for the purpose of delivery.
  4. Communications: chat messages, photos and voice notes, and order, bill, payment-request and khata messages, exchanged through the Services, which are protected as described in Section 5.
  5. Transaction information: carts, shopping lists, orders, bills and khata (credit) records, including the items, amounts and status of each.
  6. Correspondence: any information you provide when you contact us.

4.2 Information collected from your device with your permission

  1. Location: the precise location of your device, only while the application is in use, in order to show Businesses near a Customer and to calculate delivery distances, or to set the location of a Business.
  2. Camera and photo library: photos that you capture or select for use as a profile photo or for sharing in a chat.
  3. Microphone: audio, only while you are recording a voice note.
  4. Contacts (Localite Business only): the names and phone numbers stored in the contacts of the device, so that the Business may select persons to invite to the Services. Phone numbers are processed to determine whether the relevant person already holds a Localite account, and the phone numbers of persons whom the Business chooses to invite are used to send an invitation through WhatsApp.
  5. Notifications: a push notification token, to deliver notifications to your device.

You may withdraw any of these permissions at any time through the settings of your device. If you do so, the features that depend on the relevant permission may not function.

4.3 Information collected automatically

When you use the Services, we collect technical information, such as your device type, operating system, language preference, IP address and server log data, including the date and time of requests made to our servers.

4.4 The Website

The Website does not require you to create an account. The Website stores your choice of light or dark theme in the local storage of your browser, on your device; this preference is not transmitted to us. The servers that host the Website may record technical information, such as your IP address, when you visit the Website.

4.5 Persons invited by a Business

When a Business invites a person to the Services, we process the mobile number of that person to deliver the invitation. The Business is responsible for ensuring that it is lawfully entitled to share that mobile number with us for this purpose.

5. End-to-End Encryption

5.1 Chat messages exchanged through the Services, including text, photos, voice notes, and order, bill, payment-request and khata messages, are end-to-end encrypted. Such messages are encrypted on the sender’s device and can be decrypted only by the participants in the chat. Neither Evolve Incorporation nor its service providers can read the content of such messages.

5.2 We process the information necessary to deliver messages, such as the identity of the participants in a chat and the date and time of each message.

5.3 The transaction information described in Section 4.1(e) is stored on our servers so that the order, bill and khata features of the Services can function.

6. How We Use Personal Data

We process Personal Data for the following purposes:

  1. to create and manage your account and to verify your mobile number by means of a one-time password;
  2. to enable Businesses to invite Customers through QR codes, invite codes and WhatsApp invitations, and to connect Customers with Businesses;
  3. to show Customers the Businesses near them and to calculate delivery distances;
  4. to deliver messages and notifications;
  5. to provide carts, shopping lists, orders, bills, payment requests and khata (credit) records;
  6. to display the UPI ID of a Business to its Customers, so that they may make payments through a UPI application;
  7. to classify products and suggest product names, as described in Section 8;
  8. to maintain the security and integrity of the Services, and to detect and prevent fraud, abuse and spam;
  9. to respond to your requests and to send you information relating to the Services;
  10. to maintain, troubleshoot and improve the Services; and
  11. to comply with applicable law, respond to lawful requests of authorities, and establish, exercise or defend legal claims, and to enforce our Terms of Use.

7. Basis of Processing and Consent

7.1 We process your Personal Data on the basis of the consent you provide when you use the Services, and, where applicable, for the legitimate uses permitted under the DPDP Act, including compliance with applicable law.

7.2 You may withdraw your consent at any time by deleting your account or by writing to us at the address set out in Section 17. Withdrawal of consent does not affect the lawfulness of processing carried out before such withdrawal. Upon withdrawal, we will cease processing your Personal Data within a reasonable time, unless such processing is required or permitted under applicable law, and we may no longer be able to provide some or all of the Services to you.

8. AI-Assisted Features

Product information submitted by a Business, including product names and images, is processed by our artificial intelligence service provider, Anthropic, in order to classify products and to suggest product names. We do not use the content of chat messages for this purpose.

9. How We Share Personal Data

9.1 With other users

When a Customer engages with a Business, the Business can view the profile information of the Customer, such as the Customer’s name and profile photo, together with the information exchanged between them through the Services, including messages, orders, bills and khata records. A Customer can view the information that a Business makes available through the Services, including its name, location and UPI ID. Each Business is independently responsible for its own use of the Personal Data of its Customers.

9.2 With service providers

We share Personal Data with the following service providers, who process it on our behalf and only for the purpose of providing their services to us:

  • Google (Firebase): user authentication, database services and delivery of push notifications;
  • Google Maps Platform: location and place information;
  • DigitalOcean: hosting, databases and storage of media files;
  • MSG91: delivery of one-time passwords by SMS;
  • Meta (WhatsApp Business Platform): delivery of WhatsApp invitations; and
  • Anthropic: artificial intelligence services, as described in Section 8.

9.3 For legal reasons

We may disclose Personal Data to government agencies, law enforcement agencies, courts or other authorities where we are required to do so under applicable law, or where we believe in good faith that such disclosure is necessary to comply with a legal obligation, to protect the rights, property or safety of Evolve Incorporation, our users or the public, or to detect, prevent or address fraud or security issues.

9.4 Business transfers

In the event of a sale, transfer, merger, reorganisation or other change in the ownership of the Services or of Evolve Incorporation, Personal Data may be transferred to the successor entity, which will be bound by the terms of this Privacy Policy in respect of such Personal Data.

9.5 With your consent

We may share Personal Data with any other person where you instruct or consent to our doing so.

10. Payments

Payments made by a Customer to a Business through UPI take place directly between the Customer and the Business, through a UPI application selected by the Customer. Evolve Incorporation does not collect, store or process bank account details, card details or UPI PINs. Your use of any UPI application is governed by the terms and privacy policy of its provider.

11. Storage and Transfer Outside India

11.1 Personal Data processed through the Services is stored on servers located in the United States of America, including in Google’s us-central1 region and DigitalOcean’s New York region. Our service providers may also process Personal Data in other jurisdictions in the course of providing their services to us.

11.2 We transfer Personal Data outside India in accordance with the DPDP Act, including any restrictions notified by the Central Government in respect of such transfers.

12. Retention and Deletion

12.1 We retain Personal Data for as long as your account remains active and for as long as is necessary to fulfil the purposes described in this Privacy Policy.

12.2 You may delete your account from within the Localite mobile application. Upon such deletion, your account will be deactivated immediately and your Personal Data will be deleted within 90 (ninety) days, subject to Section 12.3.

12.3 Notwithstanding Section 12.2:

  1. records of orders, bills and khata transactions between a Customer and a Business form part of the records of that Business, and may continue to be retained by that Business, and by us on its behalf, after the account of the Customer is deleted;
  2. we may retain Personal Data where required or permitted under applicable law, including for the resolution of disputes, the prevention of fraud and the enforcement of our agreements; and
  3. end-to-end encrypted messages that have already been delivered remain available on the devices of the other participants in the relevant chat.

12.4 Transaction records are retained for as long as is necessary to provide the Services to the relevant Business, to resolve disputes and to comply with applicable law.

13. Security

13.1 We implement reasonable security practices and procedures to protect Personal Data against unauthorised access, alteration, disclosure and destruction, including end-to-end encryption of chat messages and restrictions on access to Personal Data. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

13.2 In the event of a personal data breach, we will notify the affected persons and the Data Protection Board of India as required under the DPDP Act.

13.3 You are responsible for maintaining the security of your device and for keeping the one-time passwords sent to you confidential.

14. Your Rights

14.1 Subject to the DPDP Act, you have the right to:

  1. obtain a summary of the Personal Data being processed by us and of the processing activities undertaken in respect of it, and the identities of the persons with whom it has been shared;
  2. request the correction, completion, updating or erasure of your Personal Data;
  3. withdraw your consent, as described in Section 7.2;
  4. have your grievances redressed; and
  5. nominate another individual to exercise your rights in the event of your death or incapacity.

14.2 You may update your profile information and delete your account from within the Services. To exercise any other right, please write to us at the address set out in Section 17. We may require you to verify your identity before we act on your request.

14.3 If you are not satisfied with our response to your grievance, you may file a complaint with the Data Protection Board of India in accordance with the DPDP Act.

15. Third-Party Services

The Services interoperate with, and the Website links to, services operated by third parties, including WhatsApp, UPI applications, Google Maps and social media platforms. Such services are governed by their own terms and privacy policies, and Evolve Incorporation is not responsible for their privacy practices. Features of the Services that use Google Maps Platform are also subject to the Google Privacy Policy.

16. Changes to This Privacy Policy

We may amend this Privacy Policy from time to time. The amended Privacy Policy will be published on this page with a revised “Last updated” date and, where the changes are material, we will notify you through the Services or the Website. Your continued use of the Services after the amended Privacy Policy takes effect constitutes your acknowledgement of the amended Privacy Policy.

17. Contact Us

For any questions, requests or grievances regarding this Privacy Policy or the processing of your Personal Data, please write to:

Evolve Incorporation
B-709, Empire Business Hub,
Science City Road, Sola,
Ahmedabad, Gujarat, India