Privacy Policy

Last updated: July 14, 2026

At InfraQuip, we take your privacy seriously. This policy explains how we collect, use, disclose, and safeguard your information when you use our platform. We comply with the Digital Personal Data Protection (DPDP) Act, 2023 of India.

1. Information We Collect

Account Information: When you register, we collect your name, email address, phone number, and role (Vendor or Customer).

Profile Information: Vendors may provide company name, GSTIN, PAN, business description, and profile photo. Customers may provide company name and designation.

Listing Information: Equipment details, photos, pricing, location data, and specifications that vendors choose to publish.

Usage Data: Pages visited, search queries, enquiries sent, and interactions with listings.

2. How We Use Your Information

To provide, maintain, and improve our marketplace platform.

To process transactions and send transactional emails.

To enforce platform rules, prevent fraud, and ensure compliance with applicable laws.

To communicate with you about your account, listings, enquiries, and subscription status.

To comply with legal obligations and respond to lawful requests from authorities.

3. Data Sharing & Disclosure

Vendors & Customers: Information you provide in listings or enquiries is visible to the relevant counterparties as necessary for platform operations.

Service Providers: We share data with trusted third-party services (Supabase, Resend, Razorpay, Upstash) for hosting, email, payments, and caching. These providers are contractually bound to protect your data.

Legal Requirements: We may disclose information if required by law or in good faith belief that such action is necessary to comply with legal obligations.

We never sell your personal data to third parties.

4. Data Security

We implement industry-standard security measures including encryption at rest (AES-256), TLS 1.2+ for all data in transit, Row-Level Security (RLS) on all database tables, and signed URLs for media access. Payment data is handled entirely by Razorpay's PCI-DSS certified infrastructure — we never store payment card details on our servers.

5. Your Rights

Access: You can request a copy of the personal data we hold about you.

Correction: You can update your profile information at any time from your dashboard settings.

Deletion: You can request account deletion. We will delete all PII within 30 days of your request, subject to legal retention requirements.

Withdraw Consent: You may withdraw consent for data processing at any time by contacting us.

6. Contact Us

For privacy-related inquiries or to exercise your rights, please email us at support@infraquip.com.