Privacy policy

This policy explains what personal data Odzy (legal entity name to be added) (“Odzy”, “we”) collects, why, and the choices you have, in line with India’s Digital Personal Data Protection Act, 2023.

What we collect

• Account data: email address, mobile number (not verified), name and district (optional), language, and a password stored only as a salted hash (we cannot read it). If you use Google or Facebook we receive your name and email address from them, never your password there.
• Security data: a cookie that remembers browsers you confirmed by email code, sign-in times, device type and IP address for fraud prevention.
• Content you provide: ads, photos (location data in photos is removed), messages you send through the Platform, reports.
• Usage and device data: pages viewed, approximate IP address, browser type, security logs.

Why we use it

• To sign you in, show your ads and let buyers and sellers contact each other.
• To keep the Platform safe: prevent fraud and spam, review reports, enforce our terms.
• To send service notifications (new messages, ad status, saved-search alerts).
• To improve the Platform and meet legal obligations.

Who sees your data

• Your name and ad details are public on your ads. Your mobile number is shown only to logged-in users who choose to view it on your active ad, marked as not verified. Your email address is never shown to other users.
• Service providers who help us run the Platform process data on our instructions: hosting, image storage, and Amazon Web Services (Amazon SES) which delivers our emails.
• Authorities, when we are legally required to share information.
• We do not sell your personal data.

How long we keep it

Account data while your account is active. Ads are removed from public view when they expire, are sold or deleted. Messages and security logs are kept for a limited period needed for safety and legal compliance, then deleted or anonymised.

Your rights

• Access and portability: in Profile → Your data you can download everything we hold about you as a file.
• Correction: change your name and district in Profile; edit or delete any of your ads at any time.
• Erasure: in the same place you can delete your account. After you confirm with a code emailed to you, we immediately delete your profile, ads, photos, saved items, notifications and the content of your chat messages, and sign you out everywhere. We keep only what safety and the law require: reports you filed and moderation records, stored without your name or number, and the other person's side of past chats (your messages in them are replaced by “message deleted”). Photo files are deleted from storage right away; encrypted database backups may hold older copies for a short period until they rotate out.
• Withdrawing consent, questions or complaints: write to support@odzy.in or our Grievance Officer. Withdrawing consent may mean some features stop working.

Security

We use encryption in transit, salted password hashing, hashed one-time codes, optional two-factor authentication for staff, access controls and monitoring. No system is perfectly secure; tell us at once if you suspect misuse of your account.

Children

The Platform is for people aged 18 and over.

Contact

Questions or complaints about your data: Grievance Officer, [Grievance Officer name to be added], grievance@odzy.in.