Privacy policy

Draft — version 0.2, published 5 September 2026 (previously version 0.1, 31 August 2026). This document will be completed with legal review before launch; what it says about your data already holds.

We collect the minimum needed to run a brokered marketplace, aligned with India’s Digital Personal Data Protection Act. Nothing is collected without a use listed below, your data is never sold, and there is no third-party advertising on the platform.

What we store and why

Account data

Your name, work email, mobile number, a hash of your password (never the password itself), your role, and the consent you gave at registration with its version and time. Used to operate your account, verify that you are reachable, and secure sign-in. We also keep a record of your active sessions — when each was created and last used, from which network address and browser — so you can see and revoke them in settings.

Company and compliance data

Company legal name, GSTIN and CIN, plant addresses, contact persons, and compliance documents such as the consent to operate, factory licence and fire NOC. Used to verify manufacturers before their listings go live. For manufacturers this data is never public: listings show an alias, capabilities and district only, and identity is disclosed solely through an agreed, recorded introduction.

Enquiry and work-order records

Enquiries, requirements, broker correspondence, signed agreements and acknowledgements, introductions, and work-order progress updates. Used to mediate deals, keep both sides informed, and build each manufacturer’s public track record from work actually completed on the platform.

Audit logs

A record of identity- and money-adjacent actions — who did what and when, including verification decisions, identity reveals, password changes and deletion requests, with the network address and browser used. Kept for security and as evidence of what was agreed and disclosed.

What is public

Anonymised listings: unit operations, equipment specifications, capacities, materials of construction, certification badges, verification level, state and district, and track record derived from completed work orders. Company names, contact details, exact addresses, registration numbers and compliance documents are not public — before an introduction, or after it, except to the introduced counterparty.

Deletion

Request deletion from your settings at any time. Your account is deactivated immediately, every session is signed out, and after a 30-day window your personal data is anonymised for good. Signing in again within that window cancels the deletion. Records of completed deals and the audit trail are retained, because the agreements between the introduced parties depend on them.

Consent and your choices

You gave consent at registration, and we store which version of this policy you agreed to. You can correct your details in settings, request deletion as described above, and when notification preferences arrive, choose which non-transactional messages you receive.

Contact

Questions about your data can be raised through the broker desk once you have an account, or by writing to us at the address published on this site.