Privacy notice
Pilot version 1. Plain-language text; the counsel-approved version replaces it before launch.
What we collect
- Account: email or phone, pen name, language.
- Identity (journalists): name on PAN, the last 4 characters of PAN and a one-way hash of it, date-of-birth check result (not stored), bank account for payouts, DigiLocker consent reference.
- Business (buyers): organisation details, GSTIN, signatory, ownership and affiliation disclosures.
- Activity: listings, offers, messages, files, ratings, and an audit log of actions.
- We never collect Aadhaar numbers, GPS or precise location, or your sources' data.
Why
- To run accounts, deals, escrow, payouts and invoices.
- To meet legal duties: tax, intermediary rules, lawful orders, record keeping.
- To keep the platform safe: fraud signals, reports and enforcement.
Who sees what
- Buyers see teasers; details only after the confidentiality step; contacts only after escrow is funded.
- Your legal name is shown only on contracts, to the other party.
- Our payment, identity and email providers process data for us under contract and may not use it for anything else, including AI training.
How long we keep it
- Expired or withdrawn listing details: 90 days (the hash and dates are kept as proof).
- Delivery files: 90 days after release.
- Contracts, invoices, payouts and identity outcomes: as long as tax and company law require (8 years).
- Teaser view logs: 12 months. System logs: 180 days.
Your rights
You can download your data, correct it, hide your account at once, or ask us to delete it (completed within 72 hours, keeping only what the law requires). Use Settings, or write to the grievance officer.