B
Platform
How It Works How Selling Works How Reselling Works Supplier Onboarding Storefront Builder Payouts & Escrow
Resources
Blog Guides & Playbooks Success Stories
Company
Careers Contact Us
Track Order Sign In
Start Selling Launch Your Store
Terms of Service Privacy Policy Returns & Refund Policy Seller Agreement Merchant Agreement

Privacy Policy

Effective

This Privacy Policy explains how BadaBiz ("we," "us," "our") collects, uses, shares, and protects personal data when you use our platform — as a Customer, Seller, Merchant, or visitor to our website. We process personal data in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and other applicable Indian law.

1. What We Collect

  • Customers: name, phone number, delivery address, order history, and payment confirmation details (we do not store your card/UPI details ourselves — these are handled directly by our payment gateway partner).
  • Sellers & Merchants: business name, GSTIN, PAN, bank account details for payouts, KYC documents, and platform activity.
  • Everyone: device and browser information, IP address, and usage data collected automatically for security and fraud-prevention purposes.

2. How We Use Your Data

  • To create and manage your account and verify your identity (KYC/GSTIN checks).
  • To process orders, generate invoices, calculate applicable tax, and coordinate delivery.
  • To communicate order updates, account notifications, and — where you have not opted out — service updates.
  • To detect and prevent fraud, and to maintain the accuracy of our financial ledger.
  • To comply with our legal obligations, including tax and consumer-protection record-keeping requirements.

3. Blind Fulfilment & Who Sees Your Data

A Customer's full contact details are shared with the Seller fulfilling their order only to the extent needed to pack and dispatch it — never with any other Merchant or Seller. A Seller's identity is never shared with the Customer, and no Merchant is shown another Merchant's customers or orders. This separation is enforced at the platform level, not only as a policy statement.

4. Sharing With Third Parties

We share personal data only where necessary to operate the Platform:

  • Payment processing — with our payment gateway partner, to collect and confirm payment.
  • Logistics — with courier partners, to the extent needed to deliver your order.
  • Communications — with our SMS/WhatsApp/email providers, to send order and account notifications.
  • Legal compliance — with tax authorities and law enforcement, where legally required.

We do not sell personal data to third parties for their own marketing purposes.

5. Data Retention

Order, invoice, and financial ledger records are retained for the period required under applicable GST and financial record-keeping law, regardless of whether an account remains active. Personal-identifier fields on an account (name, address, contact details) are handled differently — see the section below on your rights.

6. Your Rights Under the DPDP Act

You may request access to, or correction of, the personal data we hold about you at any time from within your account.

If you request that your account be closed or your data erased, we will anonymise your personal-identifier fields — replacing your name, address, and contact details with a redacted placeholder — rather than deleting the underlying order and financial records outright. This is not a workaround: transactional and tax records are legally required to survive, in a form that no longer identifies you personally, which is exactly what anonymisation achieves. Your account will show as unavailable and cannot be logged into again.

Customers: see our Account Deletion page for exactly how to request this from the app, and what happens afterwards.

To make a data access, correction, or erasure request, use the request form available from your account or contact our Grievance Officer, published in the site footer along with the statutory response timeline.

7. Cookies

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Platform is used, so we can improve it. You can control cookies through your browser settings; disabling them may affect parts of the Platform's functionality.

8. Data Security

We use industry-standard safeguards to protect personal data, including encrypted connections, access controls limiting who can see what data, and regular security review of the systems that store it. No online system can be guaranteed 100% secure, but we treat this as an ongoing responsibility, not a one-time setup.

9. Children's Privacy

The Platform is not directed at children under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us so we can remove it.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. Material changes will be notified to registered accounts before taking effect.

11. Contact & Grievance Officer

For any privacy-related question, request, or complaint, contact our named Grievance Officer — contact details and our statutory acknowledgment/resolution timeline are published in the site footer.