Security Policy

All payments on MantoshShop are processed exclusively through Razorpay — India's most trusted and RBI-regulated payment gateway.

• ✅We never see or store your card number, CVV, or net banking credentials
• ✅Razorpay is PCI-DSS Level 1 certified (highest standard)
• ✅All payment pages use HTTPS with valid SSL certificates
• ✅3D Secure (Verified by Visa / Mastercard SecureCode) supported
• ✅UPI transactions verified through NPCI's secure infrastructure

MantoshShop employs multi-layer fraud detection to protect both buyers and sellers:

• 🤖Automated systems flag suspicious order patterns and unusual account activity
• 📍Device fingerprinting to detect account takeover attempts
• 🌐IP-based geolocation anomaly detection
• 📱OTP verification for high-value transactions and new device logins
• ⏰Rate limiting on login attempts to prevent brute-force attacks

Protect your MantoshShop account by following these guidelines:

• 🔑Use a strong, unique password — minimum 8 characters with numbers and symbols
• 🚫Never share your OTP, password, or account details with anyone
• 📧Use a secure, private email address for registration
• 💻Always log out after using MantoshShop on shared/public devices
• 🔗Only access MantoshShop via official URLs — beware of phishing sites
• 📱Keep your registered phone number active for OTP delivery
• 🔒Check for the padlock icon (HTTPS) in your browser before entering any data

We take security vulnerabilities seriously and appreciate responsible disclosure from the security community.

• 🐛Bug Bounty: Report genuine security vulnerabilities to security@mantoshshop.com
• 🚨Account Compromised? Email support@mantoshshop.com immediately for account lock
• 💳Unauthorized Transaction? Contact us within 24 hours for investigation
• 📞Phishing/Fraud Attempt? Report via support and to cybercrime.gov.in

MantoshShop operates in compliance with the following Indian regulations and standards:

• ⚖️Information Technology Act, 2000 — Section 43A (Data Protection)
• ⚖️Digital Personal Data Protection Act (DPDP), 2023
• ⚖️Consumer Protection (E-Commerce) Rules, 2020
• ⚖️RBI Guidelines for online payment security
• ⚖️IT (Reasonable Security Practices) Rules, 2011