Privacy policy

Kheti Bazar is run by Kheti Bazar. For your personal data we are the "Data Fiduciary": we decide why and how it is used.

Kheti Bazar lets people post farm produce to sell or buy and farm machines to rent, and contact each other by phone or WhatsApp. We are not a party to the deals people make.

Your account:

• Your mobile number: to log you in with a one-time password (OTP) and to identify your account.
• Your name and profile photo, if you add them: shown on your posts so buyers and sellers know who they are talking to.
• Your language: to show Kheti Bazar in it.

Your place:

• Your village or town and its point on the map: to show posts and machines near you and how far they are. The app asks for your location only while you use it, never in the background.
• For a post, its place. Others see only the village, district and a distance rounded to about 1 km, never the exact point or the address.

Your posts:

• What you post: the crop or machine, title, description, photos, quantities, prices, rent rates and booked days, and the dates. These are public: anyone can see them.
• A contact person, if you add one (their name, mobile, WhatsApp number and relation to you). Add someone only with their permission.

Contact between people:

• Logged-in users see the phone and WhatsApp number of a post. People who are not logged in do not.
• When someone taps Call or WhatsApp on your post, we record it. You see who called you, with their number, in My posts. When you open a post while logged in, its owner sees your name and village (never your number).
• Offers you make, posts you save, people you block and posts you report.

Payments and wallet:

• For a paid plan or ad: the amount, what it was for, the payment status, and the references from Razorpay, our payment provider. We do not keep your UPI, card or bank details: Razorpay handles them. We pass your name and mobile to Razorpay to fill in its checkout.
• Your wallet: points added, used, refunded and earned as rewards.

Ads you place (self-serve ads):

• Your business name, category, place, phone and WhatsApp numbers, website, photos or video and the ad text. A live ad shows these to everyone.

Your phone and the app:

• The token Google's Firebase gives your phone, with its platform and app version: to send you notifications (for example, when your post is approved).
• Crash reports from the Android app (phone model, Android and app version), through Google Firebase Crashlytics, to fix problems. They do not carry your name or number.

Records we must keep:

• Each time you agree to this policy: the version, the date and time, and the internet address (IP) it came from.
• Requests to delete your account, and refunds owed to you.

On the website, in your browser:

• Necessary storage, always on: your login, language, place and your cookie choices.
• Only if you say yes in "Cookie settings": measuring how the site is used.

• Camera and photos: only for the photos you add to a post, an ad or your profile.
• Microphone: only when you tap the microphone to speak instead of typing. Your phone's own speech service turns it into text.
• Location: only while you use the app, to find your village. You can type your village instead.
• Contacts: only the one number you pick when adding a contact person. We do not read your contact list.
• Notifications: to tell you about your posts, payments and wallet.

You can refuse or switch off any of these in your phone's settings. Kheti Bazar still works, without that feature.

We use your personal data with your consent, which you give by agreeing to this policy when you make your account, and for the purposes listed above. We also use it without asking again where the law allows it (DPDP Act, section 7), for example:

• for a purpose you gave it to us for yourself, such as your number on a post you made;
• to obey a law, a court order or a lawful request from the government;
• in an emergency that threatens someone’s life or health.

Other users see what this policy says is public. We share data only with these service providers, who handle it for us and only for this:

• Meta (WhatsApp): sends your login OTP to your WhatsApp.
• Razorpay: takes payments.
• Amazon Web Services: stores our data and photos.
• Google: Google Maps finds places from what you type; Firebase sends notifications and crash reports; AdMob shows ads in the app.

Some of them may process data outside India. This is allowed except to countries the Government of India restricts. We also give data to the police, courts or government when the law requires it.

Kheti Bazar shows ads from businesses that advertise with us and, in the app, from Google.

• In the app, Google may use your phone’s advertising ID to choose ads. You can reset it or turn off personalised ads in your phone’s settings (Settings > Google > Ads).
• On the website, only our own ads show. They use no cookies and are not chosen for you.

• While your account is open, we keep your data so Kheti Bazar works for you.
• Your login code (OTP) works for 5 minutes. A number that never finishes logging in is removed after 24 hours.
• When you delete your account, your posts are hidden at once. After 30 days (you can come back before then) we erase or anonymise your name, number, photo, place, posts’ contact details and photos, offers, saved posts, blocks, reports, calls and views, and notifications.
• We keep payment and wallet records, refunds and the records of your consent for as long as tax, accounting and other laws require, without your name or number where we can. We keep a one-way code made from your number so the same number cannot claim a reward twice.
• We keep logs of how our systems were used for at least one year, as the DPDP Rules require, to find and stop misuse.

Under the DPDP Act you can:

• ask what personal data we have about you, what we do with it and who we shared it with;
• correct, complete or update it: you can change your name, photo and place yourself in Profile;
• have it erased: delete your account in the app (Profile > Delete account) or ask us;
• withdraw your consent at any time, as easily as you gave it, by deleting your account or writing to us. Withdrawing it means we stop using your data for Kheti Bazar, so you can no longer use your account; it does not undo what was done before. On the website you can change your cookie choices any time in "Cookie settings";
• name a person to use these rights for you if you die or cannot use them yourself;
• complain to us, and if you are not happy with our answer, to the Data Protection Board of India.

Write to the Grievance Officer (section 12). We may ask you to show that the account is yours, from your registered number, before we act.

Your duties under the Act: do not give false details or pretend to be someone else, and do not make false or frivolous complaints.

Kheti Bazar is for people aged 18 and over. We do not knowingly keep personal data of anyone younger. If we learn that we have, we delete it.

Data travels encrypted. Photos are kept private and shown through links that expire. Login codes are stored only in a scrambled form. Only staff who need it can see your data, and their actions are recorded.

If your personal data is ever exposed in a breach, we will tell you and the Data Protection Board of India without delay, as the DPDP Rules require, with what happened and what you can do.

When we change this policy we update the date below and tell you in the app. For an important change we ask you to agree again before you continue.

For questions about your data, to use your rights, or to complain, write to:

• Grievance Officer

We answer as soon as we can and within 90 days at most, as the DPDP Rules require. You can also reach us through Help & support below.