Privacy Policy

1. Who We Are

Nine Finds ("we", "us", or "our") is operated by NINEFINDS PRIVATE LIMITED and provides a hyperlocal business discovery platform available via our website and mobile application (collectively, the "Platform"). This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, and your rights over it.

By using the Platform you agree to the practices described in this policy. If you do not agree, please discontinue use of the Platform.

2. Information We Collect

2.1 Information You Provide

• Account details — display name, email address, and phone number when you register or update your profile.
• Profile content — profile picture and "About me" text.
• Listings — product title, description, category, condition, price, images, and the location associated with the listing.
• Messages — conversations you have with other users through the Platform's messaging feature.

2.2 Information Collected Automatically

• Location — approximate or precise geographic coordinates to show you nearby listings. We collect this only when you grant permission.
• Usage data — pages visited, features used, and timestamps of activity.
• Cookies & local storage — session tokens and preference data stored in your browser or device. See Section 6.

3. How We Use Your Information

• Provide the Platform — creating and managing your account, showing relevant listings, and enabling messaging between buyers and sellers.
• Location features — displaying listings near you and calculating distance to sellers.
• Trust & safety — verifying user identity, and detecting and preventing fraud or abuse.
• Notifications — sending you new-message alerts and important service updates.
• Legal obligations — complying with applicable Indian law, including the Information Technology Act 2000, the IT (SPDI) Rules 2011, the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021, and the Digital Personal Data Protection Act, 2023 as its provisions come into force.

4. How We Share Your Information

4.1 With Other Users

Your display name, profile picture, and listings are visible to other users. When you message another user, they can see your display name.

4.2 With Service Providers

We share data with the following third-party providers solely to operate the Platform:

• Supabase — cloud storage for listing images and profile pictures.
• Google Maps Platform — location name resolution and location search.
• Razorpay — payment processing for business subscriptions and onboarding fees. Razorpay receives the payment details needed to process your transaction; we do not store your card, UPI, or bank account details ourselves.
• Firebase Cloud Messaging (Google) — delivery of push notifications to your device.

These providers process data only as directed by us and are required to maintain appropriate security standards.

4.3 Legal Disclosures

We may disclose your information if required by law, court order, or government authority, or if necessary to protect the rights, property, or safety of Nine Finds, our users, or the public.

We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.

5. Data Storage, Retention & Security

5.1 Where Your Data Is Stored

Payment data processed by Razorpay is stored exclusively on servers located in India, in accordance with the Reserve Bank of India's data localisation requirements for payment system data. Other data may be stored and processed by our remaining service providers — Supabase, Google Maps Platform, and Firebase Cloud Messaging (see Section 4.2) — which may process data on servers located outside India as part of their standard infrastructure.

5.2 How Long We Keep It

We retain your account, profile, listing, and message data for as long as your account remains active. If you delete your account, we delete or anonymise your personal data within 90 days, except where we are required to retain it for longer to comply with legal, tax, or accounting obligations — for example, payment and transaction records, which we retain for the period required under applicable law. Aggregated or anonymised data that no longer identifies you may be retained beyond this for analytics.

5.3 Security

We take reasonable technical measures to protect your personal data from unauthorised access, loss, or misuse. No method of transmission over the internet is completely secure. You are responsible for keeping your account credentials confidential.

6. Cookies & Local Storage

We use the following client-side storage:

• Authentication cookies — a secure token that keeps you logged in between sessions.
• Preferences — your location, search radius, and app settings stored locally so the Platform loads faster.
• Blocked users list — IDs of users you have blocked, stored only on your device and never sent to our servers.

You can clear cookies and local storage at any time through your browser or device settings. Doing so will log you out and reset your preferences.

7. Push Notifications

We may send push notifications to alert you about new messages and Platform activity. You can withdraw consent at any time through your device or browser notification settings, or within the Nine Finds app settings.

8. Your Rights

You have the right to:

• Access — request a summary of the personal data we hold about you.
• Correction — request correction of inaccurate or incomplete data.
• Erasure — request deletion of your personal data, subject to any legal retention obligations we may have.
• Withdraw consent — withdraw consent you previously gave for a specific use of your data, such as location access or push notifications, at any time.

To exercise any of these rights, email us at adminninefinds@gmail.com with the subject line "Privacy Request". We will respond within 15 days.

9. Children's Privacy

Nine Finds is intended for users who are 18 years of age or older. We do not knowingly collect personal data from anyone under 18. If you believe a minor's data has been submitted without appropriate consent, please contact us at adminninefinds@gmail.com and we will promptly review and delete it.

10. Grievance Officer

In accordance with the Information Technology Act 2000 and the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021, you may raise concerns about the processing of your personal data with our Grievance Officer:

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes we will update the effective date at the top of this page and, where appropriate, notify you via an in-app announcement. Continued use of the Platform after changes are posted constitutes your acceptance of the revised policy.

12. Contact Us

For any questions or concerns about this Privacy Policy, contact us at: