Privacy Policy

1. Personal Data We Collect

1.1 Account and identity data

• Mobile number — collected at signup, used as your primary account identifier and for OTP login.
• Name — collected at signup, displayed on your profile, listings, and to counterparties you message.
• Email address (optional) — collected at signup or via Google Sign-In, used for account recovery and notifications.
• Google account profile (name, email, profile photo) — only if you choose to sign in with Google.
• Organisation details (business name, and any registration information you choose to provide) — collected at organisation account creation, displayed on listings.
• Government-issued ID and a live selfie/video capture — collected during identity verification (KYC), processed by our verification partner Didit, required before you can publish a listing or place a bid.

1.2 Location data

• Approximate location (city/area) — used to show listings and suppliers near you.
• Precise location — collected only when you actively tap "use my current location" on a map, or when tagging a listing's location.

We request the minimum location permission needed for the action you are performing. You can decline location access; some map-based features will then be unavailable, but the rest of the Platform still works.

1.3 Content you create

• Listing details, prices, descriptions and photos.
• Requirements you post (RFQs) and the quotes you send or receive.
• Chat messages you exchange with other users, including any media you attach.
• Community posts, comments, and reactions.

1.4 Technical and usage data

• Device identifiers and push-notification tokens.
• App version, and crash/diagnostic logs.
• IP address and approximate network location, for security and fraud prevention.
• Login times and API request logs.

1.5 Data we do not collect

We do not collect microphone/audio data, and we do not request any device permission that a live feature does not use.

2. How We Use Your Data

• To create and operate your account, and authenticate you via OTP or Google Sign-In.
• To verify your identity and organisation before allowing you to publish listings or bid, for trust and safety.
• To show you relevant listings, suppliers, and requirements, including by approximate or precise location.
• To let you message other users, post to the community feed, and exchange quotes.
• To send transactional notifications — OTPs, chat/RFQ alerts, account updates — by SMS, WhatsApp, push notification, or email.
• To detect and prevent fraud, abuse, and violations of our Terms of Use and Community Guidelines.
• To respond to support requests and grievances.
• To comply with legal, regulatory, and law-enforcement obligations.

We do not use your personal data for automated decision-making that produces legal or similarly significant effects on you, and we do not sell your personal data.

3. Who We Share Data With

We share personal data only with the service providers who help us run the Platform, each acting under our instructions and only for the purpose stated below. We do not permit any of them to use your data for their own independent purposes.

• MSG91 (SMS/WhatsApp gateway) — receives your mobile number and the OTP message content, to deliver login codes.
• Google LLC (Google Sign-In) — receives your Google profile (name, email, photo), if you choose this sign-in method.
• Google Maps Platform — receives the location shown when a map is rendered, for geocoding and map display.
• Didit (identity verification provider) — receives your government ID document, a live selfie/video, and related biographic data, to verify your identity (KYC).
• Firebase (Google) — receives a device push-notification token, to deliver push notifications.
• Our email delivery provider (SMTP) — receives your email address and the content of transactional emails.

Other users of the Platform can see the information you choose to make public: your listings, profile name, organisation name (if provided), community posts, and anything you send them in chat. A counterparty matched to a requirement you post may receive your contact details for the purpose of following up on that requirement.

We may also disclose personal data where required by law, to a court or regulator, or to protect the rights, property, or safety of Cable Connect, our users, or the public. We do not use any third-party AI or machine-learning service to process your government ID, chat messages, or other personal content beyond what is described in this section.

4. Where Your Data Is Stored

Your account, listing, chat, and community data — plus uploaded photos and documents — is stored on a Vultr server located in India, operated by or on behalf of the Company. Some service providers listed in §3 (Google, Didit, Firebase) may process or store data outside India as part of their global infrastructure; where this happens, we require that provider to apply data protection safeguards consistent with this Policy and applicable law.

5. How Long We Keep Your Data

We retain personal data only as long as necessary for the purpose it was collected, or as required by law. This table is kept identical to the one shown on your in-app Data & Privacy dashboard:

• Profile data (name, contact details, account info) — 3 years after account deletion.
• Location data (address/listing coordinates) — for as long as the associated listing or address remains active. Addresses and listings belong to an organisation rather than to you personally, so they are not deleted when an individual member's account is deleted (see Section 6.1).
• Usage data (monthly usage allowances, e.g. job postings, sample requests) — 3 years after account deletion.
• KYC documents (government ID, verification records) — 7 years for legal and compliance purposes while your account is active; deleted as soon as an account-deletion request is fulfilled.
• Contact details shared with a matched counterparty for a requirement you posted — until you revoke consent, or 3 years after account deletion.
• Chat messages — retained while your account is active, and for a limited period after deletion for safety/moderation purposes.

These periods describe data held against your personal account. If an account-deletion request is fulfilled, what happens to each category is set out in Section 6.1 below, and that is what applies — for example, your KYC records are deleted at that point rather than held for the remainder of the 7 years. Data that belongs to an organisation rather than to you personally is not covered by these periods and is not affected by the deletion of an individual member's account.

6. Your Rights

Under the DPDP Act, 2023, you have the right to access a summary of the personal data we hold about you; correct inaccurate or incomplete personal data; withdraw consent for a specific purpose, where processing is based on consent; request erasure of your personal data, including deleting your account; nominate another individual to exercise these rights on your behalf in the event of your death or incapacity; and lodge a grievance with our Grievance Officer, and subsequently with the Data Protection Board of India if unresolved.

How to exercise these rights

• In the app: go to Account → Data & Privacy to view your data categories or request deletion.
• On the web, without the app installed: visit cableconnect.in/delete-me to request deletion of your account and data.
• By writing to our Grievance Officer: see the contact details published at cableconnect.in/grievance-officer.

Deleting your account anonymises your public profile and removes the community content you posted from view. It does not remove or close an organisation you own or belong to: the organisation record, its registration details and tax IDs, its addresses, and its listings are left as they are — see Section 6.1. Some data (see §5) is retained for a limited period afterward for legal, fraud-prevention, or safety reasons, as disclosed above.

6.1 What deletion actually does

• Erased outright: your sign-in credentials and login sessions, device tokens, notification history and preferences, saved items such as your wishlist and price alerts, identity-verification (KYC) records, and the media files you uploaded — except any file still in use by a listing that is live, which is kept so that listing is not left blank.
• Anonymised: your profile — your name and mobile number are replaced with placeholder values, and your email address, username and photo are removed altogether. The account is closed.
• Left untouched: the organisation record of any organisation you own or belong to. Its registration details and tax IDs (GSTIN/CIN/PAN), its addresses, and its listings are not altered, closed, or hidden by your deletion, and stay publicly visible. Your membership of that organisation is removed, but the organisation itself is not: every listing on the Platform belongs to the organisation that published it, not to an individual member. Two things you contributed personally are still handled as described elsewhere in this list and are not covered by this entry — image files you uploaded, so an organisation logo, certificate or portfolio image that you uploaded is erased with the rest of your media unless a listing that is live still uses it; and the community posts and comments you wrote, including any published in an organisation's name.
• Closed and hidden, not erased: the community posts and comments you wrote — including any you published in an organisation's name — and any repost of one of your posts, are marked removed and disappear from public view, but the underlying records are kept so they don't break other users' history that references them.
• Anonymised in shared conversations: a chat you had with another user stays visible to that person, but every message you sent has its text replaced with a generic notice, and your identity in that thread shows as a deleted user.
• Not affected by deletion: invoices, dispute-case records, and our compliance audit log are retained for as long as required for legal, financial, or dispute-resolution purposes.

7. Your Consent

Where our processing of your personal data relies on your consent — for example, KYC verification, or sharing your contact details with a matched counterparty — we ask for that consent at the point of collection, in clear language, and record it against your account. You can review and withdraw consent for a specific purpose inside the app; withdrawing consent may disable the related feature (for example, withdrawing KYC consent means you can no longer publish new listings).

8. Security

We apply reasonable technical and organisational safeguards to protect your personal data, including encryption of data in transit (HTTPS/TLS), access controls limiting who at the Company can view sensitive data such as KYC documents, and monitoring for unauthorised access. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Grievance Officer

In accordance with the DPDP Act, 2023 and the Information Technology (Intermediary Guidelines) Rules, we have appointed a Grievance Officer. Current contact details are published at all times, and never repeated here, at cableconnect.in/grievance-officer and inside the app under Account → Grievance Officer — kept there rather than in this document so they are never out of date.

10. Cookies and Similar Technologies

Our website may use strictly necessary cookies to keep you signed in and to remember basic preferences. We do not use third-party advertising cookies. You can control cookies through your browser settings.

11. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices or legal requirements. If we make material changes, we will notify you in the app or by email before the change takes effect, and update the effective date above.

12. Governing Law and Jurisdiction

This Policy is governed by the laws of India. Any disputes arising out of or relating to this Policy will be subject to the exclusive jurisdiction of the courts at Noida, Uttar Pradesh, India.

13. Contact Us

For any questions about this Policy that are not a formal grievance, write to us at cablejunctionnf@gmail.com.