Your orders, addresses, and payment screenshots are stored in Supabase (PostgreSQL) with encryption at rest and TLS in transit.
The database is instructed: a customer can only see their own orders; a seller only sees orders assigned to them; a delivery agent only sees their jobs. Admin access is a separate role check — not a public switch.
Email security@aurotap.in with steps to reproduce. Please do not include customer PII.