Privacy & Data Protection

1. Scope of this Policy

This Policy applies to personal data processed through BulkVyapar's public website, buyer and seller accounts, onboarding, inquiries, seller verification, paid platform services, support, security systems and legal-document download system.

It does not govern an independent buyer's or seller's own privacy practices after data is lawfully received by that party, nor does it replace the privacy policies of third-party services used independently by a user.

2. Personal Data We May Collect

The personal data we collect depends on how you use BulkVyapar. We seek to collect information reasonably connected with the service requested, account security, platform operation, legal compliance and fraud prevention.

• Account data: name, email address, mobile number and account identifiers.
• Authentication and security data: password hash, OTP or password-reset related records, login/session information, security events and similar account-protection information.
• Seller and business data: owner or representative name, company name, GSTIN, business type, address, city, state, pincode and business contact information submitted during onboarding.
• Listing data: product names, descriptions, prices, MOQ, delivery information, business descriptions, images, logos and other information submitted for a marketplace listing.
• Buyer inquiry data: buyer name, mobile number, email address where provided, requested quantity, message, urgency and other requirement information submitted to contact a seller.
• Payment records for BulkVyapar services: Razorpay order/payment identifiers, amount, payment status and related transaction metadata needed to verify and account for the payment.
• Technical and security data: IP address, browser/user-agent information, timestamps, sessions, rate-limit and security logs and other technical information reasonably used to protect the platform.
• Support and grievance data: messages, complaint details, evidence and correspondence you choose to provide.
• Legal-document download data: submitted name and mobile number, client IP, browser information, document/version, download reference, timestamp, PDF integrity hash and related audit record.

3. Information We Do Not Require Access To

Providing an email address to BulkVyapar does not give BulkVyapar access to your Gmail mailbox, Google Contacts, Google Drive or other private Google-account content.

BulkVyapar presently uses its own account-registration process rather than requiring Google Sign-In for ordinary account creation. We do not ask for your Gmail password.

Ordinary buyers submitting marketplace inquiries are not currently required to upload identity documents merely to send an inquiry.

4. Why We Process Personal Data

We process personal data for purposes connected with the service requested by the user and the safe operation of the platform.

• Creating and administering buyer or seller accounts.
• Authenticating users and supporting password reset or OTP-based recovery where enabled.
• Creating, reviewing, publishing and managing seller/business/product listings.
• Performing limited seller GST verification and marketplace listing review.
• Routing a buyer inquiry to the seller the buyer chooses to contact.
• Sending inquiry, account, security, support and service notifications.
• Processing and verifying payments made to BulkVyapar for BulkVyapar services.
• Providing customer support, grievance handling and policy enforcement.
• Preventing abuse, fake inquiries, fraud, unauthorised access and security incidents.
• Generating and auditing timestamped legal-document PDF downloads.
• Meeting accounting, legal, regulatory, dispute-resolution and evidentiary requirements where applicable.
• Sending optional promotional or marketing communications where permitted and subject to applicable preferences or consent.

5. Buyer Inquiry Data and Sharing with Sellers

When a buyer deliberately submits an inquiry to a particular seller or business, BulkVyapar may share the information reasonably needed for that seller to respond. This may include the buyer's name, mobile number, email address where provided, quantity, message and requirement details.

This sharing is part of the marketplace service requested by the buyer. It is not a sale of buyer data by BulkVyapar.

The seller receiving the inquiry is responsible for using the buyer's information lawfully. BulkVyapar's Terms prohibit unlawful resale, public disclosure, spam, harassment or other misuse of buyer inquiry data.

6. Seller Information and Public Visibility

Seller information submitted for account administration is not automatically public merely because BulkVyapar possesses it.

On the main BulkVyapar marketplace, seller account mobile numbers and email addresses are not presently made public by default solely because they were provided for login, verification or platform communication.

Where a seller uses a separate website, microsite or plan that permits public contact information, the seller may choose which permitted contact details it wants displayed. Information intentionally selected for public display may be visible to visitors and may be indexed or cached by search engines or other internet services.

7. GST Information and Seller Verification

BulkVyapar may collect a seller's GSTIN and related business details for seller onboarding and limited manual verification before a listing is made live.

BulkVyapar may manually check whether the GST registration appears active and whether GST-related business, legal or trade-name information reasonably corresponds with information submitted by the seller, using the relevant Government GST search facility or another appropriate official or public source.

This GST review does not ordinarily involve a physical visit to the seller's office, factory, warehouse, shop or registered address. The scope and limitations of verification are explained in the Terms & Conditions and Seller Verification Policy.

8. Account Authentication, Passwords and OTP

BulkVyapar uses account credentials and security mechanisms to authenticate users and protect access. Platform passwords are handled through password-hashing mechanisms rather than being intentionally stored as readable plain-text passwords.

Where password recovery or account verification uses OTP or similar messages, the registered email address or mobile number may be used to deliver the security communication.

Users should keep credentials confidential and promptly report suspected unauthorised access.

9. Payments and Razorpay

BulkVyapar currently uses Razorpay for applicable payments made to BulkVyapar for membership or other platform services.

BulkVyapar may receive or retain transaction records such as Razorpay order/payment IDs, amount, currency, status and related metadata needed to verify the payment, activate services, maintain accounts, investigate disputes or meet legal/accounting requirements.

Full card credentials, banking passwords and UPI PINs are not requested by BulkVyapar for storage. Sensitive payment credentials are handled within the applicable payment ecosystem or gateway according to its own systems and policies.

Razorpay processing is for BulkVyapar's own services and does not mean BulkVyapar processes or guarantees independent payments between buyers and sellers.

10. Hosting and Service Providers

BulkVyapar currently uses third-party infrastructure and service providers to operate the platform. This includes GoDaddy shared hosting/infrastructure for the website and Razorpay for applicable payment processing.

We may also use email, SMS/OTP, security, backup, analytics or other technology providers where reasonably required for platform operation.

Service providers may process information on our behalf or independently where applicable. We seek to share only information reasonably required for the relevant service and to use providers in a manner consistent with applicable law.

BulkVyapar does not claim that all personal data is stored exclusively in India unless the relevant hosting or processing location has been specifically confirmed.

11. Service Messages and Marketing Communications

We may use your registered email address or mobile number to send essential communications such as account, OTP/password-recovery, security, inquiry, membership, support and important policy or service notices.

BulkVyapar may also send promotional or marketing communications where permitted by applicable law and the user's communication preference or consent.

Where an opt-out or unsubscribe option is provided for marketing communications, opting out of marketing does not disable essential security, account, inquiry or service messages required to provide the requested platform service.

12. Cookies, Sessions and Technical Data

BulkVyapar may use essential cookies, session identifiers and similar technologies required for login state, security, CSRF protection, preferences, fraud prevention and core website operation.

Technical information such as IP address, browser details, request time and security events may be processed for rate limiting, abuse prevention, troubleshooting and platform security.

If BulkVyapar later introduces materially different advertising or behavioural-tracking technologies, the applicable notice and consent approach will be reviewed and updated as required.

13. Timestamped Legal PDF Downloads

BulkVyapar offers downloadable legal-policy PDFs. Before a PDF is generated, the requester may be required to provide a name, valid mobile number, captcha response and affirmative download-record consent.

For delivery, security and audit evidence, BulkVyapar records the submitted name and mobile number, document key and version, exact download time, client IP address, browser/user-agent information, unique reference code, saved PDF path and a SHA-256 integrity hash of the generated PDF.

The mobile number displayed inside the downloaded PDF is masked. A private server copy of the generated PDF may be retained for document-integrity and audit evidence.

14. When We May Share Personal Data

BulkVyapar does not sell or rent personal data to third parties as a business model.

• With the seller selected by a buyer when needed to respond to that buyer's inquiry.
• With hosting, payment, email/SMS, security and other service providers where reasonably required to operate the platform.
• With professional advisers, auditors or insurers where reasonably necessary and subject to appropriate obligations.
• With courts, regulators, law-enforcement or government authorities where disclosure is required or permitted by applicable law.
• In connection with a lawful corporate restructuring, merger, acquisition or transfer, subject to applicable legal requirements and appropriate protection.

15. Data Minimisation and Accuracy

BulkVyapar seeks to collect personal data that is reasonably connected with the stated service, platform security, compliance or another permitted purpose.

Users should provide accurate and current information and update material account or business information when it changes.

Where a field is optional, a user may choose whether to provide it unless the information later becomes necessary for a specific requested service or legal requirement.

16. Data Retention

BulkVyapar retains personal data for as long as reasonably necessary for the purpose for which it was collected, for an active account or service, or for another period required or permitted by applicable law.

Different categories may have different retention needs. Payment/accounting records, security logs, legal-document download audit records, grievance records, fraud-prevention information and dispute evidence may need to be retained after an account or listing is deleted where continued retention is reasonably required or legally permitted.

Information that is no longer reasonably required should be deleted, anonymised or otherwise handled in accordance with applicable law and BulkVyapar's retention practices.

17. Delete My Profile and Account Deletion

BulkVyapar provides a Delete My Profile/account-deletion option and may also accept a valid deletion request through the published privacy or grievance contact channel.

Deletion may terminate account access and may remove or deactivate marketplace listings associated with the account.

Deletion does not necessarily require immediate deletion of every record where retention remains necessary or permitted for payment/accounting obligations, security, fraud prevention, complaint handling, dispute evidence or another lawful purpose.

Information that was intentionally public may continue temporarily in independent search-engine caches, archives or third-party copies that BulkVyapar does not control.

18. Access, Correction, Updating and Erasure Requests

Users may contact BulkVyapar to request correction or updating of inaccurate account information and, where applicable, access to information about processing or erasure of personal data.

Rights available under Indian data-protection law may depend on the provisions in force, the nature of the request, identity verification and lawful reasons for continued processing or retention.

BulkVyapar may request reasonable information to verify that a privacy request is being made by the relevant person or an authorised representative before acting on it.

19. Consent and Withdrawal

Where processing is based on consent, BulkVyapar aims to provide information that allows the user to understand the relevant personal data and purpose before taking an affirmative action.

A user may withdraw an optional consent through the available mechanism or by contacting BulkVyapar where applicable. Withdrawal does not invalidate processing that lawfully occurred before withdrawal.

Withdrawal of optional marketing consent does not require BulkVyapar to stop essential account, security, inquiry or service processing that remains necessary for a requested service or is otherwise permitted by law.

20. Security Safeguards

BulkVyapar uses reasonable technical and organisational measures appropriate to its platform to protect personal data against unauthorised access, misuse, alteration, loss or disclosure.

Depending on the relevant system, safeguards may include HTTPS/encrypted transport, access controls, password hashing, session/security controls, CSRF protection, rate limiting, logging, restricted private storage, backups and security monitoring.

No website, hosting environment or electronic storage method can be guaranteed to be absolutely secure, and users should also follow appropriate account-security practices.

21. Personal Data Breach Handling

BulkVyapar may investigate suspected security incidents and take steps reasonably necessary to contain, remediate and document them.

Where a personal-data breach requires notification to affected individuals or a competent authority under applicable law, BulkVyapar will make the notification in the manner and timeframe required by the law then in force.

22. Data Location and Cross-Border Processing

Because BulkVyapar uses third-party technology and infrastructure providers, personal data may be processed or stored in locations used by those providers.

BulkVyapar does not promise that every item of personal data remains within India unless a specific service configuration has been verified to provide that result.

Where restrictions on transfers or processing locations apply under Indian law, BulkVyapar will seek to handle relevant processing in accordance with those requirements.

23. Users Under 18

BulkVyapar is intended for business users aged 18 years or above. We do not knowingly offer ordinary business-account services to children.

If BulkVyapar learns that personal data has been submitted by a child in circumstances where the platform should not process it, BulkVyapar may restrict the account and take appropriate steps in accordance with applicable law.

24. Third-Party Websites and Independent Parties

BulkVyapar listings or communications may contain links or references to seller websites, payment providers, government portals or other third-party services.

A third party's independent collection or use of personal data is governed by that party's own practices and applicable law. BulkVyapar is not responsible for a third party's independent privacy practices merely because a link or marketplace connection exists.

25. Public Information, Search Engines and Caching

Business and product information intentionally made public through BulkVyapar may be indexed by search engines, AI/search systems or other internet services according to their own crawling and indexing practices.

After public information is changed or removed from BulkVyapar, third-party caches or indexes may take additional time to update. BulkVyapar does not control independent copies created by third-party services.

26. Grievance and Privacy Contact

For privacy questions, correction or deletion requests, suspected misuse of personal data or another platform grievance, contact BulkVyapar's published Grievance Officer.

Grievance Officer: Nitesh Kumar Mishra. Email: grievance@bulkvyapar.in. Address: Bulkvyapar Network Pvt Ltd, E-12/2, Sector 1, Noida, Gautam Buddha Nagar, Uttar Pradesh - 201301, India.

Where applicable law provides an escalation or complaint mechanism after the platform grievance process, the affected person may use that mechanism subject to the requirements of the relevant law.

27. Changes to this Privacy Policy

BulkVyapar may update this Policy to reflect changes in platform features, service providers, security practices or applicable law.

The current version will show an effective date and last-updated date. Where required or reasonably appropriate, material changes may also be communicated through the website, account or registered contact information.

28. Contact Details

Bulkvyapar Network Pvt Ltd, E-12/2, Sector 1, Noida, Gautam Buddha Nagar, Uttar Pradesh - 201301, India.

Grievance Officer: Nitesh Kumar Mishra. Grievance and privacy/data-rights email: grievance@bulkvyapar.in.