Privacy Policy

1. Information We Collect

We collect information you provide directly, such as your name, email address, phone number, company name, GSTIN, and business address when you create an account. We also collect information automatically when you use the Platform, including your IP address, browser type, device information, pages visited, and interactions with the Platform. If you are a seller, we collect product listing data, pricing information, and business verification documents.

2. How We Use Your Information

We use your information to: (a) provide, maintain, and improve the Platform; (b) process transactions and facilitate communication between buyers and sellers; (c) verify your identity and business credentials; (d) send you transactional notifications, such as quote updates, order confirmations, and account alerts; (e) analyze usage patterns to improve user experience; (f) detect and prevent fraud, abuse, and security incidents; and (g) comply with legal obligations, including GST and tax reporting requirements.

3. Information Sharing

We do not sell your personal information. We may share your information with: (a) other Platform users as necessary to facilitate transactions (e.g., sharing seller contact details with a buyer who has placed an order); (b) service providers who assist us in operating the Platform, such as hosting, analytics, and payment processing partners; (c) law enforcement or regulatory authorities when required by law; and (d) professional advisors such as auditors, lawyers, or accountants. All third-party service providers are bound by data processing agreements.

4. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you services. Specific retention periods include: user account data is retained until you request deletion; chat messages are retained for 90 days then archived; search and activity logs are retained for 30-90 days then deleted; quote and order documents are retained for 7 years to comply with tax requirements; OTP codes expire after 5 minutes; and session data expires after 24 hours. After the retention period, data is either deleted or anonymized.

5. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data, subject to legal retention requirements.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing of your data for certain purposes, such as direct marketing.
• Right to Restrict Processing: Request that we limit how we use your data in certain circumstances.

To exercise any of these rights, contact us at support@sourcerightnow.com. We will respond within 30 days.

6. Data Security

We implement appropriate technical and organizational security measures to protect your data, including: encryption of data in transit (TLS) and at rest; password hashing using bcrypt; role-based access controls; regular security audits; and monitoring for suspicious activity. Phone numbers are masked in public APIs and visible only in active conversations. Email addresses are not exposed publicly. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

7. International Transfers

Your personal data is primarily stored on servers located in India (Mumbai region), in compliance with Indian data localization requirements. Some data may be processed by service providers located outside India for purposes such as CDN caching (read-only cached assets), disaster recovery (encrypted replicas), and analytics (anonymized data only). Where data is transferred outside India, we ensure appropriate safeguards are in place.

8. Children's Privacy

The Platform is intended for business use and is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected personal data from a child under 18, we will take steps to delete that information promptly. If you believe a minor has provided us with personal information, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Platform and updating the "Last updated" date. We encourage you to review this policy periodically.

10. Contact

For privacy-related inquiries, please contact our Data Protection team at support@sourcerightnow.com.