Privacy policy

Account. Your email address and name, received from Google when you sign in with Google, or entered by you when you register with email. We do not see or store your Google password.

Business. When you register a business: its legal name, trading name, state and GSTIN. The PAN is derived from the GSTIN. Manufacturers may also upload a GST registration certificate and a pickup address with a contact name and phone number.

Trade. Listings, enquiries and the messages in them, requirements you post, quotes, orders, invoices, delivery addresses and reviews.

Technical. Server logs with your IP address, browser and the pages requested, kept for security and debugging. We do not use advertising trackers.

To run the marketplace: to show your listings to buyers, to deliver an enquiry to the manufacturer it was sent to, to raise a GST invoice on an order, and to release payment to a manufacturer once delivery is confirmed.

To verify manufacturers. A GSTIN is checked for validity and against the registered state, and a certificate, where uploaded, is compared with the details entered. This is why listings carry a verification mark.

To contact you about your own activity: a new enquiry, a reply, a change to an order or to your verification. We do not send marketing email.

The other party to a trade. When you enquire or order, the manufacturer sees your business name, your name, your email address and the contents of the enquiry. When you sell, the buyer sees your business name, trading name, state and the details on your listing. A GSTIN and legal name appear on the GST invoice both parties receive.

The public. A verified manufacturer's trading name, state, listings, ratings and reviews are public pages. Documents, addresses and contact details are never public.

Service providers. Identity is handled by Supabase and, for Google sign-in, Google. Email is delivered by a transactional email provider. Payments, when enabled, are processed by a payment gateway regulated by the Reserve Bank of India, which handles card and bank details; we never see them. Each provider processes data only to provide its service to us.

The law. We disclose information when required by a court order or a government authority acting under Indian law.

We do not sell personal information.

Application data is stored on servers we operate. Identity data is held by Supabase. We keep a backup of the database daily.

Trade records — orders, invoices and the messages that led to them — are kept for eight years after the transaction, as Indian tax and company law require. Account and business details are kept while your account exists and for one year after it is closed, unless a trade record requires longer. Server logs are kept for ninety days.

You can see and correct your account and business details from your own settings. You can ask for a copy of the personal information we hold, ask us to correct it, or ask us to delete your account, by writing to [email protected]. Deletion cannot remove information that forms part of a trade record another party is entitled to keep, such as an invoice.

Sign-in with Google can be withdrawn at any time from your Google account's security settings; your SellerHubs account then needs an email sign-in to be used.

All traffic is encrypted in transit. Verification documents are stored privately and are readable only by the business that uploaded them and by platform staff reviewing them. Access to the administrative console requires a separate identity check in addition to a staff account.

We set only the cookies needed to keep you signed in and to remember which business you are acting for. There are no advertising or analytics cookies.

If this policy changes, the date at the top changes and material changes are announced to signed-in users. Questions, requests and complaints go to the grievance officer named on the contact page, or to [email protected].