Privacy Policy

10. Privacy Policy

This Privacy Policy forms part of the Indobazaar Agreement. See our Terms of Service for the full platform agreement.

10.1 Information We Collect

When you use Indobazaar, we may collect the following types of information:

• Personal identification information: name, email address, phone number, and business details provided during registration or listing submission.
• Usage data: browsing history, search queries, device information, IP address, and interaction logs on the Platform.
• Content data: listings, images, videos, links, and other content uploaded by Sellers.
• Communications data: in-platform chat messages and conversation metadata between Buyers and Sellers.

10.2 How We Use Your Information

The information collected is used for the following purposes:

• To facilitate connections between Sellers and Buyers.
• To review, verify, and manage listings on the Platform.
• To communicate with users regarding their accounts, listings, or platform updates.
• To improve the Platform's features, performance, and user experience.
• To enforce our Terms of Service and take action against violations.
• To enable authorized Platform Administrators and staff to access chat logs and conversation data for safety, moderation, fraud prevention, and legal compliance.
• To comply with legal obligations and respond to lawful requests by authorities.

10.3 Sharing of Information

Indobazaar will not sell, rent, or trade your personal information to third parties for marketing purposes. However, we may share your information in the following circumstances:

• With Buyers: Seller contact details shared on the Platform are visible to Buyers for the purpose of facilitating communication. Sellers consent to this by listing on the Platform.
• With service providers: We may share data with trusted third-party service providers who assist in operating the Platform, subject to strict confidentiality agreements.
• With authorized Platform staff: Authorized administrators and staff may access chat messages and conversation logs stored in our systems for safety, moderation, and legal compliance, as disclosed in these Terms and this Privacy Policy.
• Legal compliance: We may disclose information if required by law, court order, or governmental authority.

10.4 Data Security

Indobazaar implements technical and organizational measures designed to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Security practices currently used on the Platform include:

• Encrypted transport: The website and mobile apps communicate with our servers over HTTPS/TLS so data in transit is encrypted.
• Account authentication: Access to protected account features uses token-based API authentication (Laravel Sanctum). Passwords are stored using industry-standard one-way hashing (bcrypt) and are never stored in plain text.
• Session and web protections: Web sessions use CSRF protection. After sensitive login steps (such as phone verification), sessions are regenerated to reduce session fixation risk.
• Access control: Role-based permissions separate customers, entrepreneurs, and administrators. Listings, chats, and account actions are restricted so users can only access data they are authorized to see (for example, chat is limited to conversation participants).
• Email and phone verification: Where enabled, email verification uses signed, time-limited links with rate limiting. Phone verification may use one-time codes to help confirm account ownership.
• Payment verification: In-app purchases and payment webhooks are verified server-side (including Apple receipt/transaction checks and HMAC signature validation for payment provider callbacks) before entitlements or ticket confirmations are granted. Ticket QR/secret values are protected using cryptographic hashing.
• Upload controls: Image and media uploads are validated for type and size limits to reduce malicious file risk.
• Content and abuse controls: Automated content filtering, user reporting, blocking, and human moderation are used to reduce spam, abuse, and prohibited content. Rate limiting is applied to selected sensitive endpoints (such as email verification and ticket booking).
• Admin safeguards: Administrative areas require authenticated admin roles. Authorized staff may review chat and listing data for safety and legal compliance as described in this Policy.

Important limitations: In-platform chat is not end-to-end encrypted. Authorized Platform administrators and staff may access chat messages for moderation, fraud prevention, and legal compliance. Do not share passwords, one-time codes (OTPs), bank PINs, or full payment card details in chat.

No method of transmission or storage is 100% secure. While we take reasonable steps to protect your information, we cannot guarantee absolute security. You are responsible for keeping your password confidential and for activity under your account.

10.5 Cookies

The Platform may use cookies and similar tracking technologies to enhance user experience, analyze Platform usage, and personalize content. By using the Platform, you consent to the use of cookies in accordance with this Privacy Policy. You may manage cookie settings through your browser settings at any time.

10.6 Data Retention

We retain your personal data for as long as your account remains active or as required to provide services, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated data by contacting us directly.

10.7 Your Rights

As a user of Indobazaar, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data, subject to legal obligations.
• Withdraw consent to data processing where consent is the legal basis.

To exercise any of these rights, please contact us using the details below.

View Terms of Service