What we do

• Authenticated profile and order APIs require a session token.
• Checkout totals are recalculated before order placement.
• Razorpay signature verification is enforced for live online payments.

What you should do

• Use the same phone number consistently for tracking and account access.
• Do not share order IDs publicly.
• Contact support if you notice any unexpected account or order activity.