Privacy Policy

VyapaarMart ("we", "us") runs a marketplace that connects buyers with suppliers and local service providers. This policy explains what personal data we collect, why we collect it, who can see it, and the choices and rights you have. By creating an account or posting a requirement you consent to the processing described here. You can withdraw consent at any time by deleting your account.

1. What we collect

• Buyers: name, mobile number, email (if you sign up with email), a securely hashed password (if you use one), your city, the requirements you post, quotes you receive, sellers you save, reviews you write and the sellers whose number you view.
• Sellers: business name, contact person, mobile number, login email, a securely hashed password, address, area, city, categories, GSTIN (optional), website, business hours, payment modes, photos, products, prices and the quotes you send.
• Technical data: IP address (for rate limits, spam and fraud prevention), daily counts of profile and number views for each seller (not linked to visitors who are logged out), and the essential cookies listed below.
• Location: if you tap "Near me", your browser shares your position with the page. It is rounded to about 1 km before it leaves your device, used only to sort results by distance, and never stored. A business's map pin, if it sets one, is shown only to logged-in users as a Directions link. Visitors who are logged out see only the distance.
• Visit statistics: we may use Vercel Web Analytics to count page visits, the pages people open, the site that sent them, and their country and device type. It uses no cookies and doesn't identify you or follow you across other sites.
• Error reports: when a page fails to load, the page address (without any extra details) and the technical error are sent to our team so we can fix it.

2. Who can see what

• Anyone, without logging in: a seller's business name, logo, photos, area and city, categories, products, prices, ratings and reviews. Reviews show only the reviewer's first name and last initial.
• Only logged-in users: a seller's phone number, WhatsApp, full address and website. Buyer requirements are never shown to visitors who are logged out.
• Matching sellers: when you post a requirement, up to 5 matching sellers receive it with your name, mobile number and email so they can quote. Other sellers in that category may see the requirement on their Find buyers page with your name and number hidden. Up to 10 sellers in total can unlock your details, and only within 30 days. Closing a requirement stops new sellers from unlocking it.
• When you view a seller's number: that seller is told your name and mobile number so they can follow up with you.
• Our team: a small number of administrators can see account data to verify sellers, stop spam and handle complaints.

3. Why we use it

• To run the marketplace: send requirements to sellers, show quotes, profiles and reviews.
• To keep you logged in and your account secure, including one-time codes sent on WhatsApp.
• To send messages you need: enquiry and quote alerts, verification codes and password resets.
• To prevent spam, fake accounts, fraud and abuse, and to meet legal obligations.

We do not sell your personal data. We do not use advertising or tracking cookies, and we do not show your data to advertisers.

4. Cookies

We only use essential cookies, which the site cannot work without:

• vm_buyer_session: keeps a buyer logged in, for up to 30 days.
• vm_session: keeps a seller logged in, for up to 7 days.
• vm_admin: keeps an administrator logged in, for up to 12 hours.

All of them are HTTP-only and signed, so other scripts can't read them and they can't be forged.

5. Service providers

We share data only with providers that help us run the site, and only what they need:

• Hosting and database providers (Vercel and Neon), to run the site, store its data and count visits.
• OpenStreetMap, which provides the map images when a business sets its location.
• Meta (WhatsApp Business), to deliver login codes and alerts.
• Our email provider, to send account emails.

We may also share data with authorities when the law requires it.

6. How long we keep it

• Accounts are kept until you delete them.
• Requirements and leads are kept for up to 2 years so both sides can follow up and disputes can be resolved.
• Login codes and password reset links expire within an hour and are deleted afterwards.

7. Your rights

• Access and correction: see and edit most of your data in your account. Ask us for anything else.
• Deletion: buyers can delete their account from the My requirements page. This removes your account, reviews and saved sellers, and removes your name and number from your past requirements. Sellers can email us to delete their listing.
• Withdraw consent at any time by deleting your account.
• Nominate someone to exercise these rights if you are unable to, by writing to us.

Email vyapaarmart2026@gmail.com and we will reply within 30 days. If you are not satisfied, you can complain to the Data Protection Board of India.

8. Security

• All connections use HTTPS encryption.
• Passwords are stored as bcrypt hashes. Login codes and reset links are stored as hashes and expire quickly.
• Changing your password logs you out on every other device.
• Logins, codes, posts, uploads, number views and buyer unlocks are limited to stop guessing and scraping.
• Uploaded photos are re-processed on our servers, which removes hidden data such as location tags.
• Only a few administrators can access personal data, and only for the purposes above.

If we learn of a breach that affects your personal data, we will tell you and the Data Protection Board of India as the law requires. Read more on our Safety and security page.

9. Children

VyapaarMart is for adults. You must be 18 or older to create an account.

10. Changes

If we change this policy we will update the date above, and tell account holders by email or on the site when the change is significant.

11. Grievance officer

For privacy questions or complaints, contact our grievance officer at vyapaarmart2026@gmail.com.