DPDPA 2023 Compliant
This policy complies with India's Digital Personal Data Protection Act, 2023 (DPDPA) and the Information Technology Act, 2000. We are committed to protecting your personal data.
Quick Summary
- ✅ We collect only data needed to operate the Platform
- ✅ We never sell your personal data to third parties
- ✅ Passwords are encrypted — we cannot see them
- ✅ You can request data deletion at any time
- ✅ We respond to grievances within 30 days
1. Introduction
Statemart Technologies Pvt. Ltd. ("we", "us", "our") operates Statemart.ai ("Platform"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit or use our Platform. This policy complies with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDPA).
2. Information We Collect
We collect the following categories of information: **Account Information:** Name, email address, phone number, business name, GSTIN, address, and password (hashed). **Business Information:** Business category, products/services listed, product descriptions, images, and pricing. **Usage Data:** Pages visited, features used, time spent, IP address, browser type, device type, and referring URLs. **Communication Data:** Messages exchanged through the Platform, inquiry submissions, and support tickets. **Payment Information:** Subscription plan details. We do not store full card details — payments are processed by third-party payment gateways. **Voluntary Information:** Profile photos, banners, business descriptions, and any other content you choose to add.
3. How We Use Your Information
We use your information to: • Operate, maintain, and improve the Platform • Create and manage your seller or buyer account • Match buyers with relevant sellers based on category and location • Send OTPs, password resets, and account notifications • Process subscription payments and send invoices • Analyze Platform usage to improve features and performance • Send promotional emails (with your consent, which you can withdraw at any time) • Prevent fraud, abuse, and violations of our Terms of Service • Comply with legal obligations under Indian law
4. How We Share Your Information
We share your information only in the following circumstances: **With Buyers:** Seller's business name, category, city, phone (if opted in), and product listings are visible to buyers as part of normal Platform operation. **Service Providers:** We share data with trusted third parties (cloud hosting, analytics, payment processors, email services) who process data on our behalf under strict confidentiality. **Legal Requirements:** We may disclose information if required by Indian law, court order, or government authority. **Business Transfers:** In the event of a merger, acquisition, or sale of assets, user data may be transferred. You will be notified. We do not sell your personal data to third parties for their marketing purposes.
5. Cookies & Tracking
We use cookies and similar technologies to: • Keep you logged in • Remember your preferences • Analyze traffic patterns • Improve Platform performance You can control cookies through your browser settings. Disabling cookies may affect Platform functionality. We use Google Analytics (with data anonymization) for usage analytics.
6. Data Retention
We retain your personal data for as long as your account is active or as needed to provide services. After account deletion: • Basic account records are retained for 3 years for tax and legal compliance • Product listings and inquiry records are retained for 1 year • Logs are retained for 90 days You may request deletion of your data by emailing privacy@statemart.ai. Certain data may be retained as required by law.
7. Data Security
We implement industry-standard security measures including: • AES-256 encryption for data at rest • TLS/SSL encryption for data in transit • Bcrypt hashing for all passwords • JWT-based authentication with refresh token rotation • Regular security audits and penetration testing • Role-based access controls for internal staff No method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
8. Your Rights Under DPDPA 2023
Under India's Digital Personal Data Protection Act, 2023, you have the right to: • Access your personal data held by us • Correct inaccurate or incomplete data • Erase your personal data (subject to legal retention requirements) • Withdraw consent for data processing • Nominate a representative for data-related decisions • File a grievance with our Data Protection Officer To exercise these rights, email privacy@statemart.ai with subject "DPDPA Request". We respond within 30 days.
9. Children's Privacy
The Platform is not directed to individuals under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that a minor has provided personal data without parental consent, we will delete that data immediately.
10. Third-Party Links
The Platform may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party sites you visit.
11. International Data Transfers
Your data is stored on servers located in India. If data is transferred internationally for processing (e.g., analytics services), such transfers are made with appropriate safeguards in compliance with Indian law.
12. Changes to This Policy
We may update this Privacy Policy periodically. Changes will be posted on this page with an updated date. For material changes, we will notify registered users via email. Continued use of the Platform after changes constitutes acceptance of the revised policy.
13. Grievance Officer
As required under the Information Technology Act and DPDPA, we have appointed a Grievance Officer: Data Protection Officer Statemrt Technologies Pvt. Ltd. 📧 privacy@statemart.ai 📧 support@statemart.ai 📍 Mumbai, Maharashtra, India We will acknowledge grievances within 48 hours and resolve them within 30 days.
© 2026 Statemart Technologies Pvt. Ltd. All rights reserved.