Privacy policy

What is collected

Account details you provide: name, email address, and optionally company, phone, city and GSTIN. GSTIN is collected because business supply in India is invoiced against it, and it is used for nothing else.

Activity generated by using the platform: searches and their result counts, products viewed and saved, comparisons, quotation requests and the messages on them.

Technical data needed to operate the service: a visitor identifier cookie, and the client address of privileged actions — stored only as a salted hash, never in the clear.

What is not collected

No third-party advertising or analytics trackers are embedded. No behavioural profile is built for advertising, and no personal data is sold or rented to anybody.

Passwords are not stored. What is stored is a bcrypt hash from which the password cannot be recovered, including by us.

Why searches are recorded

Search records exist to find the gaps: a query that returned nothing is either a product the catalogue lacks or vocabulary the parser did not recognise, and the two need different fixes.

Aggregate demand — what buyers in a category searched for and did not find — is shared with suppliers in that category. It never identifies the buyer, their company, or any individual search.

Your own history is visible on your dashboard and you can clear it at any time.

Who sees your data

A quotation request is visible to the supplier it is addressed to, including the contact and delivery details you entered, because a quotation cannot be produced without them.

Platform staff can see quotation records in order to operate the service. Every such access to an account or quotation record is written to an append-only audit trail.

Nothing else about your account is visible to other buyers or to suppliers you have not contacted.

Where a language model is involved

When AI assistance is enabled, the text of your query is sent to the model provider to be converted into a structured requirement, and computed results are sent to be rephrased.

Your account details, saved products and quotation history are not sent. The model is not trained on your data, and the deployment can be run with the model disabled entirely — the same products are returned, ranked identically.

Retention

Account and quotation records are kept while the account is open and for the period required for tax and contractual purposes afterwards.

Search and view events are retained for analysis and then aggregated. Audit entries are retained on a fixed schedule and cannot be edited or deleted through the application by anyone, including administrators.

Your rights

You can access and correct your details in account settings, clear your search history, remove saved products and searches, and end sessions on other devices at any time.

To request a copy of your data or its deletion, contact us. Deletion is subject to records we are required to retain — quotation history with tax implications, for instance.

Cookies

Two cookies are set, both strictly necessary and neither used for advertising: a session cookie once you sign in, and a visitor identifier so an anonymous shortlist survives navigation and can be carried into an account you create later.

Both are httpOnly and SameSite-restricted, so neither is readable by page scripts or sent on cross-site requests.