Privacy Policy

• Account data: name, email address, mobile number, password (stored only as a salted hash), profile photo if you add one.
• Business and KYC data: business name, GSTIN, PAN, address, bank account for payouts, and identity or address documents where verification is required. Aadhaar is used only for verification through the permitted route and is not stored in full.
• Order data: items, quantities, delivery addresses, billing details, invoices, messages with sellers, enquiries, disputes and the evidence you upload.
• Payment data: payment status, reference IDs and masked instrument details from our payment partner. Full card numbers, CVV and UPI PINs never reach our servers.
• Device and usage data: IP address, device model, operating system, app version, language, pages and screens viewed, search terms, crash and performance logs.
• Location: the delivery address and PIN code you enter. We do not track your precise location in the background.
• Communications: your support requests and our replies.

• To create and secure your account, verify identity and prevent fraud, money laundering and abuse (legal obligation and legitimate use).
• To process orders: take payment, hold and release escrow, arrange delivery, issue GST invoices, handle refunds and disputes, and pay sellers.
• To show you relevant stock, saved items, recent searches and recommendations.
• To send service messages by SMS, email and notification (OTPs, order updates, receipts, security alerts). Marketing messages are sent only if you opt in, and you can opt out at any time.
• To operate, debug, secure and improve the Platform.
• To comply with tax, accounting, consumer-protection and law-enforcement requirements.

We process your data with your consent, which you give when you sign up or tick a consent box, and for certain legitimate uses permitted by the DPDP Act, such as performing the order you placed, complying with law, and responding to a medical or security emergency. You may withdraw consent for any purpose that depends on it; withdrawal does not affect processing already done, and we may then be unable to provide the related service.

We do not sell your personal data. We share it only as needed:

• Sellers and buyers: the name, delivery address, mobile number and GSTIN needed to fulfil, invoice and support an order.
• Logistics partners and inspection agents: pickup and delivery details.
• Payment partners and banks: to collect payments, refunds and payouts.
• KYC, GST and bank-verification providers: to verify the details you give.
• Service providers who host our systems, send SMS and email, provide analytics and crash reporting, and provide customer support. They process data only on our instructions.
• Authorities: where required by law, court order or to protect rights and safety.
• A successor, in a merger or sale of our business, subject to this policy.

We keep data only as long as needed for the purpose it was collected, and as the law requires. Account data is kept while your account is active. Order, invoice and tax records are kept for at least the period required by tax and company law (generally 8 years). KYC records are kept for the period required by anti-money-laundering rules after the relationship ends. Logs are kept for a limited period. After that we delete or anonymise the data.

We use encryption in transit, encryption of sensitive fields at rest, role-based access, audit logging and regular reviews. No system is perfectly secure. If a personal data breach occurs we will notify the Data Protection Board of India and affected users as the law requires.

Under the DPDP Act you may:

• ask for a summary of the personal data we process and the parties we share it with;
• ask us to correct inaccurate or incomplete data and to complete or update it;
• ask us to erase your data (we may keep what the law requires us to keep);
• withdraw consent;
• nominate another person to exercise your rights if you die or become incapacitated;
• have your grievance heard, and approach the Data Protection Board of India if we do not resolve it.

To exercise a right, write to [email protected] from your registered email or mobile number. We will verify who you are and respond within 30 days. You can also edit most details in the app under Account > Your profile.

The Platform is for business and adult use and is not directed to anyone under 18. We do not knowingly collect data from children. If you believe a child has given us data, tell us and we will delete it.

The website uses cookies and local storage to keep you signed in, remember your cart and preferences, and measure usage. The app stores your cart, saved items, recent searches and theme choice on your device. See the Cookie Policy for details and how to control them.

Our primary servers are in India. Some service providers (for example email or analytics) may process data outside India, in countries not restricted by the Government of India, under contracts that require them to protect it.

We may update this policy. The date at the top shows the latest version; for material changes we will tell you in the app or by email.

BIDUA INDUSTRIES PVT LTD, Suite 209, C-104, Sector 65, Noida, Uttar Pradesh 201301, India. Email: [email protected]. See the Grievance Redressal page for our officer details and timelines.