Privacy Policy

1. PERSONAL DATA COLLECTED

We may collect and process the following categories of personal data:

• Identifiers: Name, email address, phone number.
• Business information: Company name, designation, company size, location.
• Transactional information: Verification requests, purchase history, interactions with vendors.
• Technical data: IP address, device identifiers, browser information, usage metadata.
• Any documents voluntarily submitted for verification or assurance.

2. PURPOSES OF DATA COLLECTION

We collect and process personal data for the following lawful purposes:

• Evaluating software requirements and providing recommendations.
• Conducting vendor assessments and generating verification reports.
• Administering buyer assurance or refund programs.
• Communicating via email, SMS, WhatsApp, or phone.
• Performing analytics, fraud detection, and service improvement.
• Complying with legal obligations or responding to lawful requests.

3. LEGAL BASIS UNDER DPDP ACT

Processing of personal data is carried out on the basis of:

• Explicit consent,
• Performance of service,
• Legitimate business interest, and
• Compliance with applicable laws.

You may withdraw consent at any time, subject to the consequences of such withdrawal.

4. DATA STORAGE AND SECURITY

We implement commercially reasonable security measures including:

• Encryption and pseudonymization;
• Firewalls and access control;
• Regular vulnerability assessments;
• Restricted employee access.

Despite robust practices, no system is entirely immune to breaches.

5. DATA SHARING

We may share personal data with:

• SaaS vendors (subject to your authorization);
• Payment, refund, or assurance partners;
• Technology and cloud service providers;
• Regulatory or legal authorities when required.

We do not sell personal data under any circumstances.

6. RETENTION OF DATA

Personal data shall be retained only for:

• As long as required to fulfil the purpose of collection; or
• As mandated by applicable law;

Upon request, data shall be deleted or anonymized in accordance with the DPDP Act.

7. RIGHTS OF DATA PRINCIPALS

You are entitled to the following rights:

• Right to access your data;
• Right to correction and updating;
• Right to withdraw consent;
• Right to erasure (subject to legal hold requirements);
• Right to lodge a grievance.

Requests may be submitted to the Grievance Officer listed below.

8. COOKIES AND TRACKING TECHNOLOGIES

We use cookies, tags, pixels, and other technologies for:

• Analytics and performance monitoring;
• Personalization;
• Session management;
• Marketing and retargeting.

You may disable cookies through your browser settings.

9. GRIEVANCE OFFICER

In accordance with the DPDP Act, the designated Grievance Officer is: