LEGAL

Privacy Policy

Last updated:

This is a draft template describing the data ChemClean Mart's platform actually collects today. It has not been reviewed by a lawyer - please have it checked before relying on it for a live business handling real user data.

1. Information we collect

Sellers: name, email, password (stored as a secure hash, never in plain text), company name, phone number, business address and pincode, city, state, and GST number.
Buyers submitting an enquiry: name, email, phone number, and the enquiry message itself.
Feedback form: mobile number, email, and your message.
We do not collect payment information, since no payments are processed on this platform.

2. How we use this information

To create and manage your account, verify seller businesses (including GST verification), route buyer enquiries to the relevant seller(s), send OTP codes for registration/login/password reset, and respond to feedback submitted through the platform.

3. Who we share it with

Buyer enquiry details (name, email, phone, message) are shared with the seller(s) relevant to that enquiry, since that's the direct purpose of submitting one. We do not sell your data to third parties. We use the following third-party infrastructure providers to run the platform: a cloud database provider (Neon, for PostgreSQL hosting), a cloud caching provider (Upstash, for Redis), and an email provider (Gmail SMTP) for sending OTP codes - each only processes data as needed to provide their respective service to us.

4. Data security

Passwords are stored using bcrypt hashing, never in plain text. Login sessions use signed tokens (JWT) rather than storing credentials in cookies. We take reasonable technical measures to protect your data, but no online platform can guarantee absolute security.

5. Your choices

You can update your seller profile information after logging in. To request deletion of your account or data, contact us through the Feedback / Contact Us page.

6. Cookies and local storage

We use browser local storage to keep you logged in between visits (storing your session token, not your password). We do not use third-party advertising or tracking cookies.

7. Children's privacy

This platform is intended for business use and is not directed at children. We do not knowingly collect information from anyone under 18.

8. Changes to this policy

We may update this policy from time to time; continued use of the platform after a change means you accept the updated policy.

9. Contact

Questions about this policy, or requests regarding your data, can be sent through our Feedback / Contact Us page.