Privacy Policy

1. Information we collect

Account information: your name, email address, and role (buyer, supplier, or both) when you sign up. We don't use passwords — sign-in is via a one-time email link or Google OAuth, so we never store a password for your account.

Business information: for suppliers, your GSTIN and company details submitted for GST verification, plus listing content (products, pricing, MOQs, specs) you publish.

Transaction content: RFQs, quotes, messages between buyers and suppliers, orders, reviews, and the enquiry history tied to your account.

Payment information: if you upgrade to a paid plan, payment is processed by Razorpay. We store the payment amount, plan, and status of the transaction — we never see or store your card, UPI, or bank details, which go directly to Razorpay.

Usage data: pages viewed, searches run, and similar analytics events, used to improve search relevance and measure which categories and listings get traction.

2. How we use your information

To operate the marketplace: matching buyers with suppliers, delivering RFQs and messages, processing plan upgrades, and generating documents you request (invoices, RFQ summaries, dashboard reports).

To verify suppliers: your submitted GSTIN is checked against government records as part of the Verified Supplier badge process.

To send transactional email: enquiry notifications, RFQ updates, order stage changes, and account-related messages. You can turn off non-critical notification emails (new enquiries, messages, quotes) from Settings — this doesn't affect emails tied to a real account or payment event, like receipts or verification status.

To improve the platform: aggregated, non-identifying usage patterns help us decide what to build next.

3. Who we share information with

Other users, as intended: a buyer's enquiry or RFQ is shared with the supplier(s) it's addressed to, and vice versa. Public listing and profile information (company name, verified status, response score, reviews) is visible to any visitor.

Service providers we rely on to run IndiaUnbox: Supabase (database and authentication), Razorpay (payment processing), Resend (transactional email delivery), and Google (OAuth sign-in and, if you use it, the on-page translator). Each only receives the data needed to perform its function.

We do not sell your personal information to third parties.

4. Data retention

We keep account and transaction data for as long as your account is active, since order history, reviews, and messages are part of the record both buyers and suppliers rely on. If you close your account, contact support and we'll remove personal information that isn't legally or contractually required to be retained (e.g. completed transaction records).

5. Your rights

You can review and update your name and photo any time from Settings, and turn email notifications on or off there as well.

To request a copy of your data, ask us to correct inaccurate information, or request deletion of your account, email us at support@indiaunbox.com — we'll respond within a reasonable time and confirm once it's done.

6. Cookies

We use essential cookies to keep you signed in and to remember basic preferences. We don't use third-party advertising trackers.

7. Changes to this policy

If we make a material change to how we handle your data, we'll update this page and, where appropriate, notify you directly.

8. Grievance officer

Any concerns about how your personal data is handled can be raised with our team at support@indiaunbox.com or by post at Modi-Nagar (Delhi NCR), Uttar Pradesh - 201204, India. We aim to acknowledge grievances within a reasonable time and resolve them promptly.