Privacy Policy

1. Who We Are

SaudaNama (“we”, “our”, “the Platform”) is an online business trust and verification platform operating in India. We provide services including business listing, government record verification, Digital Trust Passport issuance, and B2B discovery. This Privacy Policy explains how we collect, use, store, and protect your information.

2. Information We Collect

• Account Information: Name, email address, mobile number, and password when you create an account.
• Business Information: Business name, legal name, GSTIN, CIN, Udyam number, address, and contact details submitted during business registration or verification.
• Verification Documents: Documents you upload as evidence (e.g. GST certificates, ownership documents, KYC documents). These are stored in encrypted private storage and are not publicly accessible.
• Usage Data: Pages visited, searches performed, and business profiles viewed — used to improve the platform.
• Payment Data: Payment order IDs and status from our payment gateway (Razorpay). We do not store raw card numbers or bank account details.
• Communication Data: Messages sent via enquiry forms, WhatsApp integrations, or support channels.

3. How We Use Your Information

• To verify businesses using government records (GST, MCA, Udyam).
• To issue and maintain Digital Trust Passports.
• To enable buyers to discover and evaluate verified businesses.
• To send verification status updates, notifications, and important platform communications.
• To prevent fraud, abuse, and unauthorized access.
• To comply with applicable Indian law.

4. Public vs. Private Information

Publicly visible: Business name, category, city, state, GSTIN (partially masked), verification status, Trust Score, and Digital Trust Passport — visible to all visitors.

Privately stored: Uploaded documents, full GSTIN/CIN data, owner identity documents, and raw verification API responses are stored privately and never exposed publicly.

5. Data Storage & Security

All data is stored in encrypted databases hosted in India (Supabase PostgreSQL, Mumbai region). Uploaded documents are stored in private Supabase Storage buckets with access-controlled signed URLs that expire after 15 minutes. We use TLS/HTTPS for all data in transit.

6. Third-Party Services

We use the following trusted third-party services:

• Supabase (database and storage — India region)
• Razorpay (payment processing)
• GST verification API providers (for government record cross-checks)
• MCA/Infyner API providers (for corporate record verification)

7. Your Rights

• Access: You may request a copy of your personal data.
• Correction: You may correct inaccurate data through your account settings or by contacting us.
• Erasure: You may request deletion of your account and personal data, subject to legal retention obligations.
• Portability: You may request your data in a portable format.

To exercise your rights, email us at privacy@saudanama.com.

8. Data Retention

We retain account and business data for as long as your account is active or as required by law. Verification documents are retained for audit purposes for a minimum of 3 years. You may request earlier deletion subject to applicable legal obligations.

9. Cookies

We use session cookies for authentication only. We do not use advertising trackers or third-party analytics cookies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email to registered users. Continued use of the Platform after changes constitutes your acceptance of the updated policy.

11. Contact

For privacy-related queries or requests, contact: privacy@saudanama.com