Privacy & DPDP Policy

IndiaSoloExchange is a B2B procurement and delivery platform operated by the Haritasa Group, based in Kolkata, India. For data-protection queries, contact hello@indiasoloexchange.com.

We collect only what we need to operate the platform:

• Account & identity data: name, email, phone number, company name, and — for verification — GST and KYC details.

• Business data: projects, RFQs, quotes, purchase orders, and delivery records you create or participate in.

• Technical data: limited, privacy-preserving analytics (we use a cookieless analytics provider) to understand site usage.

We process your data to: verify your identity and eligibility; match partners and vendors; facilitate RFQs, awards, purchase orders, and verified delivery; process and protect payments; send transactional notifications (in-app, email, SMS); and comply with legal obligations.

Under Section 6 of the DPDP Act, your consent is free, specific, informed, unconditional, and unambiguous, given through clear affirmative action, and limited to the personal data necessary for the stated purpose. We ask for consent at the point of collection (registration, enlistment, contact) with clear, unbundled notices.

You have the right to: access your personal data; correct or update it; withdraw consent at any time (as easily as you gave it); request erasure where applicable; and nominate another individual to exercise your rights in the event of death or incapacity. To exercise any right, contact us at the address above.

We share data only as needed to run the platform — for example, a vendor sees a buyer's RFQ details when invited to quote. We use trusted service providers (e.g., SMS/OTP delivery, payment infrastructure) who process data on our behalf under appropriate safeguards. We do not sell your personal data.

We use encryption in transit and at rest, role-based access controls, and audit logging. No system is perfectly secure, but we work continually to protect your data. See our Trust & Security page for more.

We retain personal data only as long as necessary for the purposes described here or as required by law, after which it is deleted or anonymised.

If you have a concern about how your data is handled, contact our grievance officer at hello@indiasoloexchange.com. We will respond in accordance with the DPDP Act and its Rules.

We may update this policy as the platform and the law evolve. Material changes will be notified on this page with a revised "last updated" date.