Privacy Policy

This Privacy Policy explains how Meesho Scan ("we", "us", or "our") collects, uses, stores, and protects information when you use our barcode scanning tool, which includes the Chrome browser extension, the mobile web application (PWA), and the relay server.

By using Meesho Scan, you agree to the terms described in this policy.

1. Information We Collect

Account Information

When you create an account, we collect:

• Email address — used as your unique account identifier.
• Password — stored as a one-way bcrypt hash. We never store or have access to your plain-text password.

Scan Data

When you scan a barcode through the mobile app, we temporarily store:

• The AWB / barcode value scanned.
• The timestamp of the scan.
• The delivery status of the scan (whether it was successfully relayed to the extension).

This data is stored only on your own server (the VPS you control). We do not operate a shared backend and do not have access to your scan data.

Connection Data

The server logs basic connection metadata such as IP address and connection timestamps for debugging purposes. These logs are not retained long-term and are not shared with third parties.

Local Storage

The mobile app and Chrome extension store the following data locally on your device:

• Authentication token (JWT) — to keep you signed in.
• Scan history — for display in the app/extension. Stored only on your device.

2. How We Use Your Information

• To authenticate your identity and maintain your session.
• To relay barcode scan data between your phone and your Chrome browser in real time.
• To display your scan history within the app and extension.
• To detect and prevent unauthorised access.

We do not use your information for advertising, profiling, or any commercial purpose beyond providing the Meesho Scan service.

3. Data Storage and Security

All data — including your account information and scan logs — is stored on the server you deploy and control. We have no access to that server or its data.

• Passwords are hashed using bcrypt with a work factor of 10.
• Sessions are authenticated using signed JWT tokens with a 30-day expiry.
• Only one active session is allowed per account at a time on each client type (mobile and extension).
• All WebSocket connections use the same authentication token.

You are responsible for securing your own server (firewall, HTTPS, SSH hardening, etc.).

4. Data Sharing

We do not sell, rent, or share your personal data with any third party. Meesho Scan does not include any third-party analytics, advertising SDKs, or tracking scripts.

We may disclose information if required by law or to protect our legal rights.

5. Data Retention

Scan logs are retained in the database on your server until you manually clear them. Account data is retained until you delete your account or manually remove it from the database.

The mobile app and extension store scan history locally; you can clear it at any time from the respective "Clear History" button within the app.

6. Your Rights

Since your data lives on your own server, you have full control:

• Access — inspect the database files directly on your server.
• Delete — remove your account or scan records from the database at any time.
• Export — the data is stored in plain NEDB format and is fully portable.

7. Cookies

Meesho Scan does not use cookies. Authentication state is maintained via localStorage in the browser.

8. Children's Privacy

Meesho Scan is intended for use by adults (18+) operating Meesho supplier businesses. We do not knowingly collect data from anyone under the age of 18.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of Meesho Scan after changes constitutes acceptance of the updated policy.

10. Contact

If you have any questions about this Privacy Policy, please contact us at: support@techseventeen.com