Privacy Policy

When an optical shop signs up we collect the account owner’s name, email, mobile number, and shop details (shop name, address, GSTIN, state). Billing is processed by Cashfree Payments — we never see or store your card, UPI, or net-banking credentials; we store only the subscription status, plan, and payment references Cashfree returns.

We also collect usage data needed to run the service: invoices created, feature usage, and device/browser information for security and support.

Shops use LensVerge to manage their own customers: names, mobile numbers, purchase history, and optical prescriptions (SPH/CYL/AXIS and related eye measurements). This data belongs to the shop — LensVerge processes it solely to provide the software and never sells it, mines it, or uses it for advertising.

Each shop’s data is isolated with row-level security — one shop can never see another shop’s data.

Application data is stored in managed cloud databases (Supabase/PostgreSQL) and files (frame photos, invoice PDFs, logos) in Cloudflare R2 object storage, both protected with encryption in transit and at rest. Our servers run on Vercel with the primary region in Mumbai, India.

We send service messages (signup welcome, trial reminders, payment confirmations, enquiry replies) to shop owners on WhatsApp via Meta’s WhatsApp Business Platform. Message delivery metadata is processed by Meta under their terms. You can opt out of these messages anytime by replying STOP or emailing us.

We use essential cookies for login sessions (Supabase Auth). We do not run third-party advertising or tracking cookies.

We retain shop data while the subscription (or trial) is active and for 90 days after cancellation so you can reactivate without loss. Invoice records may be retained longer where Indian tax law requires it.

To delete your account and all associated data, email hello@lensverge.com from your registered email with the subject “Delete my account”. We verify ownership, then permanently delete the shop’s account, customers, prescriptions, photos, and files within 30 days, except records we must keep under applicable law (e.g. GST invoices). We confirm by email when deletion is complete.

A shop’s customer may also request removal of their personal data — ask the shop directly, or contact us and we will coordinate with the shop.

You can access, correct, export, or delete your data at any time — most of it directly in the app (Settings), or by emailing us. We comply with the Digital Personal Data Protection Act, 2023 (India).

We’ll notify account owners by email or WhatsApp before material changes take effect. The “Last updated” date above always reflects the current version.