Privacy policy

Last updated: 15 August 2026

1. Who is responsible for your information

OxiClear Private Limited (“OxiClear”, “we”, “us” or “our”) operates oxiclear.com and is responsible for the personal information described in this Privacy Policy. Shopify hosts the online store and processes information for us; Shopify is not the seller of OxiClear products.

2. Scope

This policy applies when you visit our website, use an OxiClear account, place or manage an order, use the delivery PIN, Air Check or Atlas website-chat features, contact us, submit a return request, submit a distributor, corporate or export enquiry, subscribe to marketing or otherwise interact with OxiClear online. A linked third-party service may have its own privacy policy.

3. Information we collect

  • Identity and contact information: name, email address, phone number, billing and delivery address.
  • Order and transaction information: products, quantities, order value, discounts, tax, delivery method, payment status, transaction reference, invoices, returns, refunds and communications. Complete card details are normally collected directly by the payment provider and are not available to OxiClear.
  • Account information: sign-in identifiers, saved addresses, preferences and order history. Shopify may use secure passwordless or other account authentication.
  • Support and returns information: messages, complaint details, call or contact records and photographs you choose to provide for a damaged, defective or incorrect-item claim.
  • Website-chat information: the question or message text you submit, conversation and response history, information you voluntarily include, a short-lived opaque chat-session token, and normal request metadata processed for security, abuse prevention and rate limiting. A routine anonymous question does not require your name, email address or phone number.
  • Business enquiry information: your name, email, phone, business name, channel, region or city, country, estimated order quantity, distribution-network description and message when you submit a distributor, corporate or export enquiry.
  • Device and usage information: IP address and other request metadata processed by Shopify, Vercel and other service providers; browser and device type; approximate region; language; pages viewed; searches; referring page; cart and checkout activity; marketing attribution; cookie identifiers; and interaction events, subject to applicable consent controls.
  • Delivery-estimator input: the current PIN checker processes the 6-digit PIN you enter locally in your browser. OxiClear does not receive or store the entered PIN through this feature.
  • Air Check location and search information: an approximate first-visit location derived from Vercel request metadata; optional precise-device coordinates and browser-reported accuracy requested only after you choose Use precise location; Google Places search characters and a selected place; and the Google Place ID and display label for up to three places you choose to save on that device. OxiClear does not remotely store your favourites list.
  • Air Check analytics: after Shopify analytics consent is allowed, a random first-party browser ID, random event ID, one of three permitted event types and a short-lived signed location token may be sent for aggregate measurement. The three event types are the first successful Air Check result on a page, a completed Google place selection and a newly saved favourite.
  • Marketing preferences: email, SMS, WhatsApp, push-notification and advertising choices where offered.

4. How we collect information

We collect information directly from you, automatically through the website and cookies, and from service providers involved in checkout, payment, fraud prevention, fulfilment, delivery, hosting, Air Check, analytics, artificial-intelligence-assisted customer support, advertising, communications and customer support.

5. Why we use information

  • To provide the website, account, cart and checkout.
  • To confirm prepaid orders, fulfil purchases, select a courier, send tracking, deliver parcels, process returns and issue refunds.
  • To provide customer service, website-chat answers, human handoff, complaint tracking, fraud prevention, security and misuse detection, and to maintain an auditable support history.
  • To assess and respond to distributor, corporate and export enquiries, carry out proportionate business due diligence and follow up about a potential partnership.
  • To calculate serviceability or an indicative delivery window from a PIN code.
  • To provide approximate, selected-place or customer-requested precise Air Check results, including current air quality, history, forecast and supported-region pollen information.
  • To measure website performance and aggregate Air Check use, subject to applicable consent controls.
  • To send product news, offers or reminders where you have requested them or applicable law otherwise permits, and to honour opt-outs.
  • To comply with tax, accounting, consumer, product-safety, legal and regulatory obligations, and to establish or defend legal claims.

We process information to provide services you request, with consent where required, and as otherwise permitted or required by applicable law. Where consent is the basis, you may withdraw it as described below.

6. Services and organisations that receive information

We share only the information reasonably needed for the relevant purpose with:

  • Shopify, which hosts the store, checkout, customer accounts and related commerce services. See Shopify’s Privacy Policy.
  • Payment providers and banks made available at checkout, for payment processing, refunds, fraud screening and chargebacks.
  • Shiprocket and the courier assigned to an order, for serviceability, shipping labels, tracking, delivery, return pickup and customer notifications.
  • Communications and engagement services, including connected email, WhatsApp and customer-support services where enabled, for transactional messages, support and consented marketing.
  • OpenAI, which processes the limited website-chat or customer-support content and approved OxiClear knowledge context needed to classify a request or compose a grounded response where Atlas assistance is enabled. OpenAI provides this processing to OxiClear through its business API services. See OpenAI’s Privacy Policy.
  • Google services, including Google Analytics, Google Tag Manager and Google Ads, and Meta services, including Meta Pixel or Conversions API, for analytics, attribution and advertising subject to applicable consent controls.
  • Vercel, which hosts and protects OxiClear-controlled website services, including Air Check and Atlas website chat, and processes normal request metadata.
  • Google Maps Platform, including Google Places, Geocoding, Air Quality and, where supported, Pollen services. Google processes place searches, selected places, approximate or precise location inputs and related technical request information under the Google Privacy Policy.
  • OxiHQ and Supabase, which store audited customer-support conversations and the approved aggregate Air Check analytics and short-lived protective hashes described below. The Air Check analytics records do not include a raw event log or a browser-to-city join.
  • hCaptcha, which helps protect forms from spam and automated abuse.
  • Technology, hosting, security, professional, accounting, legal and customer-support providers that act for OxiClear under appropriate obligations.
  • Government, law-enforcement, courts, regulators or other parties where disclosure is required by law, needed to protect legal rights or necessary for a corporate transaction.

We do not sell customer lists or payment details. Advertising providers may receive online identifiers and interaction events to measure or personalise ads, subject to the choices and consent controls required by applicable law. Air Check first-party analytics is not used for advertising, customer profiling or sale and is not linked to a customer, account or order.

7. Cookies and similar technologies

Shopify and our service providers use cookies, pixels and similar technologies to keep the store and cart working, secure checkout and accounts, remember preferences, measure performance, understand marketing and provide relevant advertising.

You can manage non-essential tracking through any privacy banner or preference control displayed on the site and through your browser settings. Blocking necessary cookies may prevent cart, account or checkout functions from working. You can also use the opt-out tools supplied by Google, Meta and other advertising providers.

8. Marketing choices

You can unsubscribe from marketing email using the link in the message, opt out of SMS or WhatsApp using the instructions in the message, change available browser or push-notification permissions, or contact hi@oxiclear.com. Transactional messages about an order, return, security matter or legal notice may still be sent where necessary.

9. Air Check and delivery-PIN privacy

The current PIN checker processes the PIN locally in your browser and does not send or store the entered PIN through this feature. Do not enter other personal information into that field.

Air Check uses an OxiClear-controlled service hosted by Vercel. The first reading may use Vercel request metadata to estimate a general location without opening a device-location prompt. If you choose Use precise location, your browser requests device permission and sends the resulting coordinates and reported accuracy for that result. If you search for a place, Google Places processes the search and selected place; Google Geocoding, Air Quality and supported-region Pollen services process the location needed to return the requested information. Vercel and Google may independently process IP address, location and request metadata under their own terms and privacy practices.

You may save up to three customer-selected places without an account. Only the selected Google Place ID and display label are kept locally on that device; raw coordinates are not saved as a favourite and OxiClear does not remotely store the favourites list.

Consent-gated Air Check analytics

OxiClear creates a random first-party browser ID and sends an Air Check analytics event only after Shopify analytics consent is allowed. Withdrawing analytics consent removes that browser ID and cancels pending tracker requests without disabling Air Check.

OxiClear analytics records only the first successful result on a page, a completed Google place selection and a newly saved favourite. It reports monthly distinct usage as anonymous browsers, not exact people. Theme-editor and preview activity is excluded, and tracker failure does not affect Air Check.

OxiClear Air Check analytics does not collect or store typed search text, raw IP address, coordinates, browser accuracy, street address, Google Place ID, customer, account or order identifiers, email, phone, user agent or a remote copy of the favourites list. The protected service transiently processes request metadata for validation, abuse protection and a rotating daily security hash. It converts the random browser ID to a rotating monthly hash and forwards only sanitized information to OxiHQ. Browser counts and aggregate city-action totals are stored separately so no stored key joins a browser to a city. A city ranking is shown only after at least five completed selections or saves.

10. Atlas website-chat privacy

Atlas website chat sends the text you submit to an OxiClear-controlled service. A short-lived opaque token keeps the browser session connected; Shopify, Supabase, OpenAI and OxiHQ credentials remain server-side. Accepted messages and replies are stored in OxiHQ’s audited support CRM so OxiClear can answer the question, hand it to an authorised staff member when needed and continue the same conversation.

For low-risk factual questions, OxiClear may use the OpenAI API to classify the request and compose an answer from approved OxiClear knowledge. Other requests may be routed to a person. Routine anonymous questions do not require a name, email address or phone number, but information you voluntarily include in a message will be processed as part of that support conversation.

Do not submit payment-card numbers, passwords, one-time codes, government identity documents or unnecessary sensitive or health information through website chat.

11. Retention

We keep personal information only for as long as reasonably necessary for the purposes described above. Order, invoice, tax, payment and refund records are kept for the periods required by accounting, tax and consumer law. Account information is kept while the account is active and for a reasonable period afterwards. Support, website-chat, complaint and return records are kept long enough to resolve the matter, maintain the support audit trail and manage security and legal obligations. Business-enquiry records are kept while we assess or maintain the potential relationship and for a reasonable period afterwards for due diligence and follow-up. Marketing information is kept until you opt out or it is no longer needed.

For OxiClear Air Check analytics, event-deduplication hashes expire after 48 hours, daily request-rate-limit hashes within 24 hours, temporary monthly browser hashes no later than seven days after the month closes, and aggregate daily or monthly metrics after 730 days. The Air Check result response itself is not stored by OxiClear as a response cache. Vercel, Google and other providers may apply their own retention practices under their terms.

When information is no longer required, we delete, anonymise or securely restrict it unless law requires further retention.

12. International processing

Shopify and other service providers may process information in India and in other countries where they or their subprocessors operate. Where sensitive personal data is transferred outside India, we require the recipient to provide the level of protection required by applicable Indian law and transfer it only where permitted.

13. Security

We use reasonable administrative, technical and organisational safeguards appropriate to the information and the services we operate, including established commerce and payment providers, access controls and limited-purpose storage. No internet transmission or storage system is completely secure. Contact us promptly if you believe your account or information has been compromised.

14. Your choices and rights

Subject to applicable law and verification, you may ask to access a summary of your personal information, correct inaccurate or incomplete information, delete information that is no longer required, withdraw consent, object or opt out of certain marketing or advertising uses, or raise a grievance.

To make a request, email hi@oxiclear.com from the address associated with your order or account and describe the request. We may ask for information reasonably necessary to verify identity and protect your account. Withdrawing consent does not make earlier lawful processing invalid and may prevent us from providing a feature that needs the information.

15. Children

OxiClear sells products that an adult may buy for a child, but the website, account and checkout are intended for adults who can enter into a contract. We do not knowingly ask a child to create an account or provide personal information directly. If you believe a child submitted personal information without appropriate authority, contact us so we can review and take appropriate action.

16. Changes to this policy

We may update this policy when our practices, service providers, products or legal obligations change. The latest version and date will be posted here. Material changes will be highlighted or notified where required by law.

17. Contact and privacy grievances

OxiClear Private Limited
Samrala Road, Machhiwara, Punjab 141115, India
GSTIN: 03AACCO8384R1ZP
Website: www.oxiclear.com
Email: hi@oxiclear.com
Phone: +91 98777 69146

Privacy and Grievance Officer: Gagandeep Singh, Grievance Officer
Email: hi@oxiclear.com
Phone: +91 98777 69146

The Grievance Officer will acknowledge receipt of a consumer complaint within 48 hours and redress it within one month from receipt, as required by applicable law. We will provide a reference number so you can track the complaint. Privacy requests will be handled within the period required by applicable law.