Privacy Policy
Last updated: March 15, 2026
📋 1. Information We Collect
When you register, we collect your name, mobile phone number, and optionally your email address. Phone number verification is handled through Firebase Authentication (Google). Your password, if set, is stored in encrypted (bcrypt-hashed) form.
When you post an ad or listing, we collect contact phone numbers, WhatsApp number, location details (city, state, pincode, and optionally GPS coordinates), product description, price, quantity, and images.
We automatically collect your IP address, browser and device type, pages visited, HTTP referrer, and session activity. For logged-in users, we track your last active page and last login time.
Search terms you enter on the platform are stored along with your session ID, device type, and IP address to help us improve search relevance and understand market demand.
When you interact with an ad (e.g., viewing contact details, clicking a WhatsApp or call button), we log the action, your user ID (if logged in), session ID, IP address, and user agent.
When you submit feedback through our feedback form, we collect your name, email, phone, message, and IP address.
Subscription payments are processed by Razorpay. We do not store your card or bank account details. We only store Razorpay's payment reference IDs (Order ID, Payment ID) and the payment amount for your subscription records.
🎯 2. How We Use Your Information
- ✓ To create and manage your account and provide platform services
- ✓ To display your listings to buyers and sellers
- ✓ To send OTP verification codes via Firebase/SMS during login
- ✓ To process subscription payments via Razorpay
- ✓ To personalise your experience with location-relevant content
- ✓ To analyse platform usage and improve features
- ✓ To send important notifications about your ads or account (in-app)
- ✓ To detect and prevent fraud or misuse
- ✓ To comply with legal obligations
📍 3. Location Data
We collect location information in two ways: (1) IP-based geolocation — your IP address is sent to the third-party service ip-api.com to identify your approximate city and region; (2) GPS / browser geolocation — if you grant permission, your GPS coordinates are stored locally in your browser (localStorage) to show you nearby listings. This data is not transmitted to our servers unless you attach a location to a listing.
🔗 4. Third-Party Services
Used for phone number OTP login. Your phone number is sent to Firebase to generate and verify OTPs. Google's privacy policy applies to data processed by Firebase.
Used for subscription payment processing. Payment method details are handled directly by Razorpay under their PCI-DSS compliance. Razorpay's privacy policy governs your payment data.
Used for IP-to-location lookup. Your IP address is sent to this service to determine your approximate city and region. Results are cached for 24 hours.
Used for reverse geocoding when you attach a map location to a listing. GPS coordinates are sent to Nominatim to produce a human-readable address label.
If you access our linked e-commerce store, your name, email, phone, and a secure token are transmitted to the Magento platform to log you in automatically (Single Sign-On).
🍪 5. Cookies & Browser Storage
An HTTP-only session cookie is set when you visit the site to maintain your login state. It expires after 4 hours of inactivity.
A standard security cookie used to protect forms from cross-site request forgery attacks.
If you allow browser location access, your GPS coordinates and location label are stored in your browser's localStorage to show nearby listings. This data stays on your device.
Temporary browser storage is used to track minor UI state such as whether you have dismissed a popup, within a single browser session.
🗂️ 6. Data Retention
We retain your personal data for as long as your account is active or as needed to provide our services. If you delete your account (available in Settings > Delete Account), your personal data is permanently removed from our systems. Anonymised or aggregated analytics data may be retained indefinitely.
⚖️ 7. Your Rights
- • Access — you can view and update your profile information via Settings.
- • Correction — you can update your name and email from your account settings.
- • Deletion — you can permanently delete your account and all associated data via Settings > Delete Account.
- • Withdrawal of consent — you may revoke browser location permission at any time from your browser settings.
- • Data portability — to request a copy of your data, contact us at cardamomlivetrade@gmail.com.
🔒 8. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encrypted passwords, HMAC-verified webhooks, and HTTPS. However, no internet transmission is completely secure and we cannot guarantee absolute security.
👦 9. Children's Privacy
Our platform is intended for adults engaged in agricultural trade. We do not knowingly collect personal information from children under the age of 18. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.
📝 10. Changes to This Policy
We may update this Privacy Policy from time to time. We will indicate the date of the latest revision at the top of this page. Continued use of the platform after changes constitutes acceptance of the updated policy.
📬 Contact Us
If you have questions or concerns about this Privacy Policy or how your data is handled, please contact us: