Privacy Policy

B2B India ("we", "us", or "our") is operated by Aaudumbar Agro Pvt. Ltd., a company registered in India. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.b2bindia.site and use our B2B marketplace services.

1. Information We Collect

1.1 Personal Information

When you register for an account or use our services, we may collect:

• Identity Data: Full name, company name, designation, and profile photograph.
• Contact Data: Email address, phone number, business address, and pin code.
• Verification Data: GST Identification Number (GSTIN), PAN, Aadhaar (for KYC purposes), and trade licence details.
• Financial Data: Bank account details, UPI ID, and payment transaction records processed through our escrow system.
• Authentication Data: Login credentials, Google account information (when using "Sign in with Google").

1.2 Automatically Collected Data

• Usage Data: Pages visited, features used, search queries, RFQs submitted, and order history.
• Device Data: IP address, browser type, operating system, device identifiers, and screen resolution.
• Cookies: Session cookies, authentication tokens, and analytics cookies (see our Cookie Policy).

2. How We Use Your Information

We use the information collected for the following purposes:

• Account Management: To create, maintain, and verify your buyer or supplier account.
• Transaction Processing: To facilitate orders, escrow payments, invoicing, and settlement between parties.
• GST Verification: To verify your GSTIN with government databases and ensure compliance.
• AI-Powered Services: To provide AI-driven pricing intelligence, product recommendations, and market insights.
• Communication: To send order updates, RFQ responses, quotations, invoices, and platform notifications.
• Security: To detect fraud, prevent unauthorized access, and protect the integrity of transactions.
• Legal Compliance: To comply with applicable Indian laws, including GST Act, IT Act, and Companies Act.
• Platform Improvement: To analyse usage patterns and improve our services, features, and user experience.

3. Data Sharing and Disclosure

We may share your information with:

• Trading Partners: Your business profile, product listings, and contact information are visible to other verified users on the platform to facilitate B2B trade.
• Payment Processors: Razorpay and our escrow partners process your payment data securely. We do not store full card or bank details on our servers.
• Government Authorities: We may disclose information when required by law, court order, or regulatory authority (including GST authorities and Income Tax Department).
• Service Providers: Third-party services including Supabase (authentication), Google Cloud (analytics), and Firebase (notifications) process data on our behalf under strict contractual obligations.

We do not sell your personal data to third parties.

4. Data Security

We implement appropriate technical and organisational measures to protect your data:

• All data is transmitted over TLS/SSL encrypted connections.
• Authentication is secured via Supabase with HTTP-only session cookies.
• Payment data is processed through PCI-DSS compliant payment gateways.
• Access to personal data is restricted to authorised personnel only.
• Regular security audits and vulnerability assessments are conducted.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Transaction records are retained for a minimum of 8 years as required under the GST Act and Income Tax Act. You may request deletion of your account data by contacting us, subject to legal retention requirements.

6. Your Rights

Under the Digital Personal Data Protection Act, 2023 (DPDP Act), you have the right to:

• Access and obtain a copy of your personal data.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data (subject to legal obligations).
• Withdraw consent for data processing at any time.
• Nominate another individual to exercise your data rights.
• Lodge a grievance with the Data Protection Board of India.

7. Third-Party Links

Our platform may contain links to third-party websites or services (e.g., supplier external websites, payment gateway pages). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies independently.

8. Children's Privacy

B2B India is a business-to-business platform intended for use by registered businesses and individuals aged 18 years or above. We do not knowingly collect personal data from children under 18.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. Continued use of the platform after changes constitutes your acceptance of the revised policy.

10. Grievance Officer

We will acknowledge your grievance within 24 hours and resolve it within 30 days from the date of receipt, as mandated under the Information Technology Act, 2000 and the DPDP Act, 2023.