Privacy Policy

Last updated: 28 September 2026

This policy applies to the ePasal mobile apps and the website at epasalonline.com (together, "ePasal", "we", "us"). ePasal is operated by S.K. Online Platform Epasal Pvt. Ltd, Nepal. It covers our grocery, food, ride and parcel services and the ePasal Marketplace.

1. Information we collect

Information you give us

• Account: your name and mobile number. We verify your number with a one-time code sent by SMS. You may add a profile photo.
• Addresses and location: delivery addresses you save (with map coordinates), your current location when you allow it, and — for rides — pickup and drop-off points and your live location during the trip.
• Orders and activity: items ordered, amounts, delivery details, order status, coupons used, and ratings or reviews you write.
• Messages to us: anything you send to our support email or social pages.

Information created when you use ePasal

• Notifications: a device or browser token, if you allow notifications, so we can tell you about order updates and offers.
• Technical data: IP address and basic device and browser information appear in our hosting and security logs. The app stores your login, cart and preferences on your own device.

Payments

You choose how to pay (cash on delivery or an online wallet). We never see or store your card or wallet credentials. When you pay online, the payment provider tells us only whether the payment succeeded.

Partners: shops, restaurants, riders and marketplace sellers

If you register as a partner we also collect business and owner names, phone, address and location, PAN/VAT number, payout (bank) details if you provide them, and the documents you upload to verify your business or identity — for example business registration, citizenship or other ID, licence and vehicle papers. These documents are stored privately and used only to verify your application.

2. How we use your information

• To process, deliver and track your orders, rides and parcels.
• To connect you with the shop, restaurant, seller or rider fulfilling your request.
• To verify your account and keep ePasal safe, including preventing fraud and abuse.
• To send order updates and, if you allow notifications, offers you may like.
• To answer support requests, resolve disputes and improve our services.
• To meet legal, tax and accounting obligations.

We do not sell your personal information.

3. Who we share it with

Only what is needed, and only with:

• Shops, restaurants and riders fulfilling your order — your name, phone number and delivery address.
• Marketplace sellers — your name, phone number, delivery address and order items, so they can pack and ship your parcel. Sellers may pass these details to the courier they choose to deliver it.
• Payment providers (such as eSewa and Khalti) — only to process payments you start.
• Our service providers: Google (Firebase and Google Cloud) for secure data storage, sign-in, notifications and hosting; Google Maps for maps and address search; and an SMS provider that delivers your one-time code.
• Authorities where the law requires it, or to protect the rights and safety of our users and the public.

4. Where your data is stored

Your data is stored with Google Cloud/Firebase, primarily in Google's data centres in India, and may be processed in other countries where Google operates. We rely on Google's security safeguards for these services.

5. How long we keep it

We keep your account and order history while your account is active, so you can see past orders. When you delete your account we remove your profile, saved addresses, notification token and login (see section 6). We may keep limited records — such as past orders, which include the delivery details entered for that order, and reviews — where needed for accounting, tax, dispute resolution or fraud prevention, and then delete or anonymise them when they are no longer needed.

6. Your choices and rights

• Access and correction: view and edit your profile, addresses and order history in the app.
• Deletion: in the app, go to Profile → Delete my account. This permanently deletes your login, profile, saved addresses and notification token. You can also request deletion from outside the app — see Delete your account. To have retained records removed or anonymised as well, email us and we will review your request.
• Notifications: turn them off at any time in your phone or browser settings.
• Location: you can withdraw location permission in your device settings; you can still type an address by hand.
• Questions or complaints: email us at the address below.

7. Cookies and similar technologies

We use your browser's local storage to keep you signed in and to remember your cart and preferences. At the time of writing we do not use advertising or analytics trackers in our apps or website. Loading maps and fonts involves requests to Google's servers. If this changes we will update this policy.

8. Children

ePasal is not directed at children under 13 and we do not knowingly collect their information. If you believe a child has given us personal information, contact us and we will delete it.

9. Security

We use encrypted connections, access controls and private storage for sensitive documents. No system is completely secure, so please keep your phone and one-time codes to yourself.

10. Changes to this policy

We may update this policy from time to time. We will change the "last updated" date above and, for significant changes, tell you in the app.

11. Contact us