Privacy Policy
How we collect, use, and protect your personal information on the Indust platform.
- Home
- »
- Privacy Policy
Your Privacy Matters
Indust (Muthuraj EXIM), operating as Indust.in, is committed to protecting the privacy of our users. This policy explains how we handle your personal information when you use our platform.
Data Protection
Compliant with DPDP Act 2023, IT Act 2000, and GDPR where applicable.
Secure Transactions
Encryption, access controls, and regular audits protect your data.
No Data Selling
We never sell your personal information to third parties.
30-Day Response
We respond to all data rights requests within 30 days.
Information We Collect
We collect information to provide, improve, and secure our services. We limit collection to what is necessary for legitimate business purposes.
1.1 Personal Information
Personal information is data that identifies or relates to you as an individual. We collect:
- Registration Data: When you sign up as a supplier or customer, we collect your name, email address, phone number, company name, address, and business details (e.g., GSTIN for Indian users).
- Requirement Posting Data: Project descriptions, quantities, categories, sub-categories, supplier locations, and any uploaded documents or images.
- Communication Data: Messages, responses, and interactions between users (e.g., supplier quotes, deal negotiations).
- Payment Data: Billing details, such as bank account information or payment instrument details, processed through secure third-party gateways.
- Profile Data: Company capabilities, verification documents (e.g., for suppliers), and preferences.
1.2 Sensitive Personal Data
Under the IT Rules, sensitive personal data includes financial information (e.g., bank details, credit card numbers) and authentication data (e.g., passwords). We collect this only with your explicit consent and for specific purposes like processing subscriptions or deals.
1.3 Non-Personal Information
- Usage Data: IP address, browser type, device information, pages visited, time and date of access, and referral sources.
- Cookies and Tracking Technologies: We use cookies for session management, analytics, and personalization. See Section 7 for details.
We do not collect sensitive personal data such as health, biometric, or political information unless explicitly provided for verification purposes (e.g., business licenses).
How We Collect Information
- Directly from You: During registration, posting requirements, responding to requests, or subscribing to plans.
- Automatically: Through cookies, logs, and analytics tools (e.g., Google Analytics).
- From Third Parties: Verification services for suppliers, payment processors, or integrated tools. We may also receive data from public sources to enhance matching.
How We Use Your Information
We use your information for the following purposes, in compliance with the DPDP Act and IT Rules:
- Provide and manage the Platform: Register users, match suppliers with requirements, facilitate connections, and track orders.
- Process transactions: Handle subscriptions (e.g., 1-month, 3-month plans), payments, and deals.
- Communicate: Send notifications, updates, and responses via email or in-app messages.
- Improve services: Analyze usage data to enhance features, supplier discovery, and business growth tools.
- Ensure security: Verify users, prevent fraud, and comply with legal obligations.
- For marketing: With consent, send promotional emails about features or industry updates. You can opt out anytime.
- For legal compliance: Respond to lawful requests or enforce our Terms of Service.
We process data based on:
Sharing and Disclosure of Information
We do not sell your personal information. We share it only as necessary:
- With Service Providers: Third parties like payment gateways (e.g., Razorpay), email services, cloud storage, and analytics tools (e.g., Google). These providers are bound by data protection agreements.
- With Suppliers/Customers: Limited sharing for matching (e.g., requirements to suppliers, profiles for connections). Verified suppliers see anonymized data until consent for full disclosure.
- For Business Transfers: In mergers, acquisitions, or asset sales, data may be transferred with notice.
- Legal Requirements: To comply with laws, court orders, or government requests (e.g., under the IT Act).
- Aggregated Data: Anonymized statistics for research or marketing, without identifying individuals.
Cross-border transfers (e.g., to servers outside India) occur only with adequate safeguards, such as standard contractual clauses, and in compliance with the DPDP Act.
Data Security
We implement reasonable security practices under the IT Rules, including encryption, access controls, firewalls, and regular audits. However, no system is 100% secure, and we cannot guarantee absolute security. We notify affected users and authorities of breaches as required by law.
Data Retention
We retain personal information only as long as necessary:
- For active accounts: As long as your account is in use.
- For transactions: 7 years post-deal closure for legal/compliance purposes.
- Inactive data: Deleted after 2 years of inactivity, unless required by law.
You can request deletion at any time (see Section 8).
Cookies and Tracking Technologies
The Platform uses cookies for functionality, analytics, and advertising. Types include:
- Essential: For login and navigation.
- Analytics: To track usage (e.g., Google Analytics).
- Marketing: For personalized ads (with consent).
You can manage cookies via browser settings. Disabling them may limit functionality. Our Cookie Policy provides details.
Your Rights and Choices
Under the DPDP Act and IT Rules, you have rights regarding your data:
📂 Access
Request a copy of your personal data held by us.
✏️ Correction
Update or correct any inaccurate information.
🗑️ Erasure
Request deletion of your data, subject to legal retention requirements.
🚫 Restriction
Limit or object to certain processing activities.
📤 Portability
Receive your data in a structured, portable format.
↩️ Withdraw Consent
Revoke consent for any consent-based processing at any time.
To exercise rights, email contact@indust.in. We respond within 30 days. For grievances, contact our Grievance Officer at the same email. We appoint a Data Protection Officer if required.
Children under 18: The Platform is not for children. We do not knowingly collect their data.
Third-Party Links and Services
The Platform may link to third-party sites (e.g., payment processors). We are not responsible for their privacy practices. Review their policies before sharing any personal information.
Changes to This Privacy Policy
We may update this policy to reflect changes in practices or laws. Significant changes will be notified via email or Platform notice. Continued use of the Platform after such notice constitutes your acceptance of the updated policy.
Contact Us
For questions or concerns regarding this Privacy Policy, please reach out to us:
- Email: contact@indust.in
- Address: No.5/151, Vivekanandha Nagar, Second Cross Street, Tambaram, Chengalpattu, Tamil Nadu – 600131
This policy is governed by Indian law.
Have a Privacy Question?
Our team is ready to help you understand how your data is handled and assist with any requests.
