Privacy policy

This policy explains how GROWTHSAGE MARKETING PRIVATE LIMITED handles personal data when you use Growthsage. It is written for the Digital Personal Data Protection Act, 2023, and for the information duties that apply to an Indian e-commerce marketplace. We are the data fiduciary for account, order, and site data. A seller is separately responsible for personal data a buyer sends them inside a brief where the seller decides how to use it for the gig.

Account data: name, email, mobile number, password hash, and role. Buyer billing data: business name, address, state, and GSTIN if you add one. Seller profile data: display name, bio, and the services you publish. Order data: the gig, package, price, tax, messages, files you upload, delivery, and review. Technical data: the session cookies described in the cookie policy, and security logs such as failed sign-in attempts. We do not ask you to store a card number on Growthsage.

We use this data to create and secure your account, show gigs, take payment, calculate tax, deliver invoices, let the buyer and seller message each other on an order, pay sellers, prevent fraud, and respond to support and legal requests. We do not sell personal data. We do not use it for third-party advertising.

A seller sees the brief and messages for their own orders. A buyer sees the seller’s public profile and the messages on their order. Payment gateways receive the amount and the details they need to take payment. Email delivery and file storage providers process data only so we can run the service. We share data with authorities when the law requires it. Staff see account and order data only to operate, support, or secure the marketplace.

We keep account and order records for as long as the account is open and afterwards for the period we need for tax, invoices, disputes, and fraud prevention. Invoices and payment records are kept for the period Indian tax law requires. You may ask us to delete an account. We will delete or anonymise what we are not required to retain.

You may ask for a copy of your personal data, a correction, or erasure, and you may withdraw consent where the processing was based on consent. Email growsage@proton.me with the address on your account. We may need to confirm that the request comes from you. If you are unhappy with our response, you may contact the grievance contact on the grievance page and, where the law provides it, the Data Protection Board of India.

Passwords are stored as hashes. Session tokens are held in cookies that scripts on the page cannot read. No method of transmission or storage is perfect. Please use a unique password and tell us if you believe your account has been accessed without permission.