Privacy Policy

We collect the following categories of personal data when you register and use our platform:

• Identity data: Full name, company name, job title
• Contact data: Email address, phone number, city and state
• Business data: GST number, FSSAI number, product listings, catalogue information, pricing
• Transaction data: RFQs submitted or received, quotes, order enquiries
• Technical data: IP address, browser type, device information, pages visited, session duration
• Communication data: Messages sent through the platform, support enquiries, WhatsApp interactions

We do not collect payment card details directly. Payment processing is handled by third-party gateways subject to their own privacy policies.

• To create and manage your account on the platform
• To match buyers with relevant suppliers based on category, city, and procurement needs
• To send transactional emails — account verification, product approval/rejection, RFQ alerts, plan updates
• To administer subscription plans and billing
• To improve platform features and user experience through aggregated analytics
• To respond to support queries and complaints
• To comply with applicable laws and regulatory requirements

We will not use your data for unsolicited advertising without your consent.

We do not sell your personal data to third parties. We share data only in the following limited circumstances:

• Supabase (Supabase Inc., USA): Our database and authentication provider. Data is stored on servers in Singapore. Supabase is subject to a Data Processing Agreement and Standard Contractual Clauses for cross-border transfers under applicable data protection law.
• Brevo (Sendinblue SAS, France): Our transactional email provider. Your email address is shared to deliver platform notifications including account verification, product updates, and RFQ alerts.
• Razorpay Software Pvt. Ltd. (India): Our payment gateway provider. Your payment transaction data is processed by Razorpay under their PCI-DSS compliant infrastructure. We do not store card details. Razorpay's Privacy Policy applies to payment data.
• Other users on the platform: Your company name, city, product listings, and contact details (if verified) are visible to registered buyers or suppliers as part of normal marketplace operation.
• Legal authorities: If required by a court order, government authority, or applicable law in India.

As a data principal under the DPDP Act, you have the following rights:

• Right to access: Request a summary of your personal data we hold
• Right to correction: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your account and associated personal data
• Right to grievance redressal: Lodge a complaint with our Grievance Officer

To exercise any of these rights, email us at legal@hospiverse.in. We will acknowledge your request within 48 hours and respond within 15 working days as required under applicable law.

We use session cookies essential for authentication and platform functionality. We do not use advertising or cross-site tracking cookies. You can disable cookies in your browser settings, but this may affect platform functionality.

Behavioural Analytics: With your consent, we use an analytics system that collects anonymised data including page views, scroll depth (how far down a page you scroll), click interactions (classified by intent), time spent on pages, and session information. This data is linked to an anonymous session ID — not your name or email — and is used solely to improve platform performance and user experience. No personal data is sold or shared with advertisers.

You can withdraw consent at any time by clearing your browser cookies and selecting “Essential Only” in our cookie banner. Withdrawing consent will stop further behavioural data collection immediately.

We retain your personal data for as long as your account is active. Upon account deletion, we retain data for a period of 2 years for legal and compliance purposes, after which it is permanently deleted. Aggregated, anonymised analytics data may be retained indefinitely.

We implement industry-standard security measures including encrypted data transmission (HTTPS/TLS), row-level security on our database, and access controls. However, no method of transmission over the internet is 100% secure. We will notify affected users in the event of a data breach as required by applicable law.

Our platform is intended for business users aged 18 and above. We do not knowingly collect data from minors. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

In accordance with the Information Technology Act, 2000, the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the Digital Personal Data Protection Act, 2023, the details of the Grievance Officer are as follows:

Grievances will be acknowledged within 24 hours of receipt and resolved within 15 working days as required under Rule 3(2) of the IT (Intermediary Guidelines) Rules, 2021.

Your personal data may be transferred to and processed in countries outside India (including Singapore, where our database infrastructure is hosted, and France, where our email provider operates). Such transfers are made only to processors that provide adequate data protection safeguards equivalent to those required under Indian law. By using the platform, you consent to such transfers as described in this Policy.

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on the platform. Continued use of the platform after changes constitutes acceptance of the updated policy.