Privacy Policy

Account information: Name, email address, phone number, business name, GST number, and role (buyer/seller) provided during registration.

Transaction data: Order details, payment references, invoices, and shipping addresses.

Usage data: Pages visited, search queries, device type, IP address, and browser information collected automatically.

Communications: Messages sent through our platform, support tickets, and contact form submissions.

• To create and manage your account.
• To process orders and facilitate transactions between buyers and sellers.
• To send transactional notifications (order confirmations, shipping updates).
• To improve our platform, products, and services.
• To comply with legal obligations under Indian law.
• To prevent fraud, enforce our Terms, and protect Platform security.

We do not sell your personal data. We may share information with:

• Counterparty: Buyers receive seller contact details and vice versa to fulfil orders.
• Payment processors: Razorpay processes payments; your payment data is governed by their privacy policy.
• Service providers: Cloud hosting, email delivery, analytics tools operating under confidentiality agreements.
• Legal authorities: When required by law, court order, or to protect our legal rights.

We retain your data for as long as your account is active or as needed to provide services. Transaction records are retained for 7 years as required by Indian tax laws. You may request deletion of your account data subject to legal retention requirements.

We use cookies and similar technologies to maintain sessions, remember preferences, and analyse usage. You can control cookie settings through your browser, though disabling cookies may affect Platform functionality.

We use industry-standard encryption (TLS/HTTPS), access controls, and regular security audits to protect your data. However, no transmission over the internet is 100% secure, and we cannot guarantee absolute security.

We process personal data in accordance with the Digital Personal Data Protection Act, 2023. As a Data Principal, you have the right to:

• Access a summary of the personal data we hold about you and how it is processed.
• Correct inaccurate or incomplete information.
• Request erasure of your data (subject to legal retention obligations).
• Withdraw consent at any time; processing based on that consent will stop, without affecting prior lawful processing.
• Nominate another individual to exercise these rights on your behalf in case of death or incapacity.
• Escalate unresolved grievances to the Data Protection Board of India.

To exercise these rights, email us at support@factorypic.com. We respond within the timelines prescribed under the Act. In the event of a personal data breach affecting you, we will notify you and the Data Protection Board as required by law.

Our Platform may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to review their policies.

We may update this Privacy Policy periodically. We will notify you of significant changes via email or a prominent notice on the Platform. Continued use after changes constitutes acceptance.

For privacy-related queries or grievances, contact our Grievance Officer at grievance@factorypic.com or visit our Contact page. Grievances are acknowledged within 48 hours and resolved within one month.