Security Policy

Effective: Oct 13, 2026 • Version 1.0 • Audience: All Apps (User & Delivery)

1. Data Encryption Standards

B-SuperMart employs enterprise-grade 256-bit SSL/TLS encryption for all data transmitted between our client applications (mobile apps and web panels) and backend infrastructure. Internal database storage is hardened with strict firewall rules and regular security updates.

2. Payment Card Security (PCI-DSS Compliance)

We do not store your sensitive financial information, such as complete card numbers, CVVs, or Net Banking credentials on our servers. All digital transactions are processed through RBI-approved, PCI-DSS Level 1 compliant payment gateways that use tokenization.

3. Account Protection and Two-Factor Authentication

To protect your account against unauthorized access, sensitive actions (such as account sign-in, mobile number changes, and account deletion) require multi-step verification including One-Time Passwords (OTP) and encrypted email verification links.

4. Vulnerability Disclosure & Responsible Reporting

We welcome security researchers and ethical hackers to identify and report vulnerabilities responsibly. If you discover a security flaw or vulnerability within B-SuperMart software, please report it immediately to security@bsupermart.com. We will acknowledge receipt within 24 hours and investigate promptly.