Privacy Policy
Privacy Policy
Version 1.0 · Effective 2026-10-10
("A2Z") respects your privacy. This policy explains what personal data we collect, why, who sees it, how long we keep it and what choices you have, under the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and related rules, to the extent they apply.
1. Data we collect
- Account: name, email address, mobile number (when mobile OTP is on), city, profile photo, username, business name (dealers).
- Verification (optional): identity document, selfie and OTP, collected only if you choose to get the Verified badge. Used only to verify you.
- Listings and chat: the content you post, photos, price, location, messages you send to other users.
- Location: city and approximate or GPS location detected from your device or IP address to show nearby listings. You can deny the device location permission.
- Usage and device: pages and listings viewed, searches, favourites, IP address, device model, app version, crash logs, push notification token.
- Payments: order details and payment status. Card, UPI and bank details are handled by the payment gateway and are not stored by A2Z.
- Dealer data: where a dealer's details were uploaded by A2Z with the dealer's written consent, we hold what the dealer gave us (name, mobile, email, business name, listings) and the consent reference.
2. Why we use it
To create and secure your account; to show, search and recommend listings; to let buyers and sellers contact each other; to detect fraud, spam and prohibited content (including automated checks of listings and chat); to process payments; to send service messages and, unless you switch it off, promotional emails and notifications; to improve the Platform; to comply with law and respond to legal requests; and to enforce our Terms.
3. Legal basis
Your consent (given when you open an account and for specific choices such as WhatsApp, location and notifications), performance of the service you asked for, compliance with legal obligations, and our legitimate need to keep the Platform safe. You can withdraw consent at any time (see section 8); that does not affect what was done before.
4. Who sees your data
- Other users: your name or username, city, listings, badge status, and, where you chose to show it, your phone number. Buyers must be logged in to see a seller's number. Your email address is never shown publicly.
- Service providers who work for us under contract: hosting, email and notification delivery, WhatsApp/SMS providers, payment gateway, analytics, image and content moderation. They may use the data only to provide services to A2Z.
- Authorities: government, courts, police or regulators when required by law, or to prevent fraud or harm.
- Business transfer: if A2Z is merged or sold, your data may move to the new owner, who must follow this policy. We do not sell your personal data.
5. Internal safety flags
To protect users, A2Z may internally mark accounts for review when it detects risky behaviour. These internal flags are used only by authorised staff and automated systems for safety and are not shown to other users.
6. Cookies and similar technology
We use cookies and local storage to keep you logged in, remember preferences and measure usage. You can block cookies in your browser; parts of the Platform may then not work.
7. Retention
We keep account data while your account is active. After deletion we keep only what is needed for legal, accounting, fraud-prevention and dispute purposes (for example payment records for the period the law requires, and consent records), then delete or anonymise it. Chat and listing data may be retained for a limited period for safety and legal reasons.
8. Your rights and choices
You can: see and correct your information in your account; ask for a copy; ask us to delete your account and data; withdraw consent; switch off promotional emails (unsubscribe link or Account → Notifications); switch off push notifications in your phone settings; opt out of WhatsApp; and nominate someone to act for you in case of death or incapacity, as provided by law. Write to . We will reply within the time the law allows.
9. Security
We use access control, encryption in transit, hashed one-time codes and monitoring. No system is perfectly secure; keep your device and OTP safe. If a personal data breach affects you, we will inform you and the authority as the law requires.
10. Children
A2Z is only for people aged 18 and above. We do not knowingly collect data of children. If you believe a child has an account, tell us and we will delete it.
11. Changes
We may update this policy; the version number changes and you will be asked to accept the new version.
12. Contact and grievances
Data Protection / Grievance Officer: · · ·