Overview & Scope
OUDR Nepal ("we", "our", "us") operates the e-commerce store at https://www.oudrnepal.com and connected customer services, including our official Meta Instagram business presence (@oudrnepal).
This policy applies to all visitors, registered users, and customers communicating with us through our website or social channels. By browsing our catalog, placing perfume orders, or interacting with our Instagram customer support, you acknowledge and agree to the data collection and usage practices described herein.
Information We Collect
To provide personalized olfactory recommendations and fulfill delivery orders across Nepal, we collect the following categories of information:
Personal & Contact Details
Full name, phone number (used for delivery courier contact), email address, and delivery destination (address, city/district in Nepal).
Order & Purchase Data
Perfume oils selected, bottle sizes (e.g., 6ml, 12ml), quantities, total transaction amount, promo codes applied, and shipping notes.
Payment Verification
Payment method selected (Cash on Delivery, Bank Transfer, or Digital Wallets like eSewa/Fonepay) and payment receipt screenshots when bank pre-payment is opted.
Social & Direct Messaging Data
Instagram username, user scoped ID (PSID/IGSID), and inquiry message transcripts sent to our official Instagram inbox (@oudrnepal).
Meta & Instagram Messaging Integration
OUDR Nepal integrates official Meta Graph APIs and Webhook endpoints (instagram_business_manage_messages, instagram_business_basic) to facilitate direct conversational commerce.
Our Commitments Regarding Instagram Data:
- Zero Unsolicited Marketing: We never use Instagram Direct Messaging APIs to blast unsolicited spam or marketing campaigns. We only process messages in direct response to customer-initiated inquiries.
- Specific Purpose: Incoming direct messages are strictly used to help customers explore fragrance accords, check stock availability, provide shipping estimates, and record delivery details for orders.
- Scoped Identity: We receive only Meta-provided Scoped User IDs and your public Instagram username to maintain conversation continuity. We never access your private profile photos, friends/follower lists, or credentials.
- Human Escalation: Customers can request to speak with a human fragrance consultant at any time by typing "human" or "agent", after which automated replies cease and our team handles the chat.
AI & Automated Order Assistance
To deliver instant replies around the clock, our backend integrates secure AI tool-calling services (Spring AI & OpenAI enterprise endpoints).
How AI is Used: When you describe scent preferences (e.g., "I need a long-lasting woody oud for winter evenings"), our AI engine queries our internal product database to match olfactory notes, calculate courier shipping costs, and prepare an order quotation.
Privacy Protection: Your personal information is processed strictly within isolated runtime sessions. We do not sell your conversational data, and your inquiries are never used by foundational model providers to train public models.
Data Sharing & Third Parties
We do not sell, rent, or trade your personal information. We share minimal data exclusively with essential service partners necessary for fulfilling your order:
- Domestic Courier Partners: Your recipient name, delivery address, and phone number are shared with trusted logistics partners across Nepal solely to dispatch and deliver your parcel.
- Cloud Infrastructure Providers: Secure application hosting and database servers running on Railway and Vercel under SOC2-compliant data centers.
- Meta Platforms, Inc.: Communication metadata routed through official Meta Graph API infrastructure to transmit customer messages.
- Legal Compliance: When required by governing laws of Nepal or law enforcement directives to prevent fraud or unauthorized transactions.
Retention & Security Measures
We implement industry-standard technical and organizational security controls to protect your data against unauthorized access, alteration, or disclosure:
- Encryption in Transit: 256-bit TLS (HTTPS) encryption for all web and API traffic.
- Role-Based Access: Administrative dashboards require JWT-based multi-factor administrative authentication with strict privilege separation.
- Retention Windows: Customer order records are retained to maintain warranty, exchange, and tax compliance records in Nepal. Ephemeral chat transcripts are purged periodically once an inquiry is resolved.
User Data Deletion Instructions
How to Request Deletion of Your Data
In compliance with Meta Platform Terms and global privacy standards, you have the right to request the complete deletion of all personal data, conversation histories, and records associated with your account or Instagram interactions.
Email Our Data Protection Team
Send an email to oudrnepal@gmail.com with the subject line "User Data Deletion Request".
Include your full name, phone number, and/or Instagram username (@yourhandle). We will verify your identity and permanently delete all your conversational and profile data within 48 hours.
Direct Message on Instagram
Send a direct message to our official account @oudrnepal containing the phrase:
Our system will flag your user ID for deletion and our administrative team will confirm execution directly in the chat.
Remove via Facebook / Meta Settings
You can remove our app directly from your Facebook/Instagram profile settings:
- Go to your Facebook/Instagram Settings & Privacy.
- Navigate to Apps and Websites.
- Find OUDR Nepal and click Remove.
- Click "View Removed Apps and Websites" and click Send Request next to OUDR Nepal to automatically trigger our automated deletion callback.
https://oudr-backend-production.up.railway.app/api/public/instagram/webhook/data-deletion, which instantly generates a verifiable confirmation tracking code upon receipt of signed deletion requests. Your Rights & Choices
Under applicable data privacy regulations, you are entitled to:
- Right of Access: Request a copy of the personal information we hold about you.
- Right to Rectification: Request correction of inaccurate contact or shipping information.
- Right to Erasure: Request permanent deletion of your data as outlined in Section 7.
- Opt-Out of Marketing: Unsubscribe from newsletter emails or promotional announcements at any time via the one-click unsubscribe link in any dispatch.
Contact & Grievance Officer
If you have questions, feedback, or concerns regarding this Privacy Policy or our data handling practices, please contact our Data Governance desk: