Privacy Policy

1. Introduction

BitForge Technologies Pvt. Ltd. ("BitForge," "we," "us," or "our") operates a digital marketplace platform. This Privacy Policy applies to all users of our website, applications, and services (collectively, the "Platform").

By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to our collection, use, and disclosure of your information as described herein.

If you do not agree with this Privacy Policy, please do not access or use the Platform.

2. Information We Collect

We collect various types of information in connection with your use of the Platform:

2.1 Information You Provide

When you create an account, make a purchase, or communicate with us, you may provide:

• Account Information: Name, email address, username, password, and profile information;
• Contact Information: Phone number, mailing address, and other contact details;
• Payment Information: Credit card details, bank account information, UPI IDs, and billing address (processed securely through third-party payment processors);
• Seller Information: Business name, tax identification numbers (GST, PAN), payout preferences, and identity verification documents;
• Communications: Messages, support tickets, reviews, and other communications with us or other users;
• Content: Product listings, descriptions, images, files, and other content you upload to the Platform.

2.2 Information Collected Automatically

When you use the Platform, we automatically collect certain information:

• Device Information: IP address, browser type, operating system, device identifiers, and mobile network information;
• Usage Data: Pages viewed, time spent on pages, links clicked, search queries, and interaction with features;
• Location Information: Approximate geographic location based on your IP address;
• Cookies and Similar Technologies: We use cookies, web beacons, and similar technologies to track activity and store information (see Section 5).

2.3 Information from Third Parties

We may receive information about you from third-party sources:

• OAuth Providers: If you sign in using Google or other OAuth services, we receive your name, email, and profile information;
• Payment Processors: Transaction details, payment status, and fraud detection information from Razorpay and other payment providers;
• Analytics Services: Aggregated usage statistics and demographic information from analytics providers;
• Verification Services: Identity verification, KYC data, and background checks for Sellers.

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Provide and Improve Services

• Process transactions and deliver digital products;
• Create and manage your account;
• Facilitate communication between Buyers and Sellers;
• Provide customer support and respond to inquiries;
• Improve, personalize, and optimize the Platform experience;
• Develop new features and services.

3.2 Safety and Security

• Detect, prevent, and address fraud, abuse, and security issues;
• Verify identity and conduct KYC checks for Sellers;
• Monitor and analyze suspicious activity;
• Enforce our Terms & Conditions and other policies;
• Resolve disputes and investigate complaints.

3.3 Communications

• Send transactional emails (order confirmations, receipts, account notifications);
• Send service updates, security alerts, and administrative messages;
• Respond to your questions and provide support;
• Send marketing communications (with your consent, where required);
• Conduct surveys and collect feedback.

3.4 Legal Compliance

• Comply with applicable laws, regulations, and legal processes;
• Respond to lawful requests from law enforcement and government authorities;
• Maintain records for tax, accounting, and regulatory purposes;
• Protect our rights, property, and safety, and those of our users;
• Enforce our agreements and resolve disputes.

3.5 Analytics and Research

• Analyze usage patterns and trends;
• Conduct market research and competitive analysis;
• Generate aggregated, anonymized statistics;
• Improve our algorithms and recommendation systems.

4. How We Share Your Information

We may share your information in the following circumstances:

4.1 With Other Users

Certain information is visible to other users:

• Sellers can see Buyer names and contact information for purchased orders;
• Public profiles, including username, bio, and listed products;
• Reviews and ratings you post on the Platform;
• Communications through our messaging system.

4.2 With Service Providers

We share information with third-party service providers who perform services on our behalf:

• Payment Processors: Razorpay, Stripe, and other payment gateways to process transactions;
• Cloud Hosting: AWS, Google Cloud, or similar providers for infrastructure;
• Email Services: SendGrid, Mailgun, or similar for transactional and marketing emails;
• Analytics: Google Analytics, Mixpanel, or similar for usage analysis;
• Customer Support: Help desk and support ticketing platforms;
• Identity Verification: KYC and fraud detection services for Seller verification.

These service providers are contractually obligated to use your information only for the purposes we specify and to maintain appropriate security measures.

4.3 For Legal Reasons

We may disclose your information if required by law or in good faith belief that such action is necessary to:

• Comply with legal obligations, court orders, or government requests;
• Enforce our Terms & Conditions and other agreements;
• Protect the rights, property, or safety of BitForge, our users, or the public;
• Investigate fraud, security issues, or technical problems;
• Defend against legal claims.

4.4 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred to the successor entity. We will notify you of any such change and any choices you may have regarding your information.

4.5 With Your Consent

We may share your information with third parties when you give us explicit consent to do so.

4.6 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you for research, marketing, analytics, or other purposes.

5. Cookies and Tracking Technologies

5.1 What Are Cookies?

Cookies are small text files placed on your device by websites you visit. We use cookies and similar technologies (web beacons, pixels, local storage) to enhance your experience and collect information about how you use the Platform.

5.2 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function (authentication, security, load balancing);
• Functional Cookies: Remember your preferences, settings, and choices;
• Performance Cookies: Collect anonymous usage data to help us improve the Platform;
• Analytics Cookies: Help us understand how users interact with the Platform (Google Analytics, etc.);
• Advertising Cookies: Deliver relevant ads and measure campaign effectiveness (with your consent).

5.3 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can:

• Block or delete cookies through your browser settings;
• Opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on;
• Manage cookie preferences through your account settings on the Platform.

Please note that disabling certain cookies may limit your ability to use some features of the Platform.

6. Data Retention

We retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention periods vary depending on the type of information:

• Account Information: Retained while your account is active and for a reasonable period thereafter;
• Transaction Records: Retained for at least 7 years for tax and accounting purposes;
• Communications: Retained for as long as necessary to provide support and resolve disputes;
• Analytics Data: May be retained indefinitely in aggregated, anonymized form;
• Legal Hold: Information subject to legal proceedings is retained until the matter is resolved.

When we no longer need your information, we will securely delete or anonymize it in accordance with our data retention policies.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

Our security measures include:

• Encryption of data in transit using SSL/TLS;
• Encryption of sensitive data at rest;
• Regular security audits and vulnerability assessments;
• Access controls and authentication mechanisms;
• Employee training on data protection and security best practices;
• Secure development practices and code reviews;
• Monitoring and logging of system activity;
• Incident response procedures.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your account credentials.

If you believe your account has been compromised, please contact us immediately at security@bittforge.in.

8. Your Privacy Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information:

8.1 Rights Under Indian Law

Under the Digital Personal Data Protection Act, 2023 (DPDP Act), Indian users have the right to:

• Access: Request confirmation of whether we process your personal data and obtain a copy;
• Correction: Request correction of inaccurate or incomplete personal data;
• Erasure: Request deletion of your personal data (subject to legal retention requirements);
• Grievance Redressal: Lodge complaints with our Grievance Officer;
• Nominate: Nominate another individual to exercise your rights in case of death or incapacity.

8.2 Additional Rights (GDPR and Other Jurisdictions)

If you are located in the European Economic Area, UK, or other jurisdictions with similar privacy laws, you may also have:

• Right to Restriction: Request that we limit how we use your data;
• Right to Portability: Receive your data in a structured, machine-readable format;
• Right to Object: Object to our processing of your data for certain purposes;
• Right to Withdraw Consent: Withdraw consent at any time (where processing is based on consent);
• Right to Lodge a Complaint: File a complaint with your local data protection authority.

8.3 Exercising Your Rights

To exercise any of these rights, please contact us at privacy@bittforge.in. We will respond to your request within 30 days (or as required by applicable law).

We may need to verify your identity before processing your request. In some cases, we may be unable to fulfill your request due to legal obligations or legitimate business interests.

8.4 Marketing Communications

You can opt out of marketing emails by:

• Clicking the "unsubscribe" link in any marketing email;
• Adjusting your email preferences in your account settings;
• Contacting us at support@bittforge.in.

Please note that you cannot opt out of transactional or service-related communications (order confirmations, account notifications, security alerts).

9. Children's Privacy

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us at privacy@bittforge.in. We will take steps to delete such information from our systems.

By using the Platform, you represent and warrant that you are at least 18 years old.

10. International Data Transfers

BitForge is based in India. If you are accessing the Platform from outside India, please be aware that your information may be transferred to, stored, and processed in India or other countries where our service providers operate.

These countries may have data protection laws that differ from those in your jurisdiction. By using the Platform, you consent to the transfer of your information to India and other countries.

When we transfer personal data internationally, we implement appropriate safeguards such as:

• Standard contractual clauses approved by regulatory authorities;
• Data processing agreements with service providers;
• Compliance with applicable data transfer frameworks;
• Technical and organizational security measures.

11. Third-Party Services and Links

The Platform may contain links to third-party websites, services, or applications that are not owned or controlled by BitForge. This Privacy Policy does not apply to such third-party services.

We are not responsible for the privacy practices of third-party services. We encourage you to review the privacy policies of any third-party service before providing them with your information.

Third-party services we integrate with include:

• Payment Processors: Razorpay, Stripe (subject to their privacy policies);
• OAuth Providers: Google (for sign-in);
• Cloud Services: AWS, Google Cloud;
• Analytics: Google Analytics;
• Email Services: SendGrid.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy;
• Post the revised policy on the Platform;
• Send you an email notification (for material changes);
• Display a prominent notice on the Platform.

Material changes will take effect 30 days after posting or notification. Your continued use of the Platform after the effective date constitutes acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: