← BazaarBox by DMacht

BazaarBox · Policies & Customer Support

Privacy Policy

Effective 8 October 2026. This English version is the current policy text.

This Privacy Policy explains how personal data is handled when you use BazaarBox at bazaarbox.app or its installable web experience.

1. Who is responsible

BazaarBox is operated in India by Deepumon Pillai, carrying on business as DMacht, at:

GHULE WASTI MANJARI BUDRUK, PUNE PIN 412307 MAHARASHTRA, INDIA

Privacy, support, and grievance contact: hello@renewtech.solutions

ReNewTech Solutions collaborates in building BazaarBox and provides the support mailbox. It is not identified by this Policy as the BazaarBox operator or data controller.

2. Information BazaarBox handles

Depending on how you use BazaarBox, we may handle:

  • Account information: user identifier, email address, authentication status, account timestamps, and verification state provided by our authentication service;
  • Profile information: display name, avatar, public profile details, account age, and listing history;
  • Listing information: title, description, category, price, condition, photos, public locality, city, state, PIN code, listing and moderation status, and timestamps;
  • Private listing location: seller coordinates used for proximity search, protected from public listing responses;
  • Browsing location: a coarse resolved locality, city, state, PIN code, or an explicit All India selection used to search nearby inventory;
  • Messages and marketplace activity: conversations, messages, favourites, blocks, reports, moderation records, and related timestamps;
  • Feedback and support: comments, correction suggestions, support correspondence, the selected interface language, relevant route, and information you choose to provide;
  • Technical information: request logs, browser or device information, security signals, cookies or local preferences, and diagnostic information needed to operate and protect the service; and
  • Payment records, where you purchase a paid BazaarBox service: provider order, payment and event identifiers; amount; currency; status; entitlement; refund; and reconciliation records received from or exchanged with the payment provider used at checkout. BazaarBox should not receive or store your full card, UPI PIN, OTP, or other secret payment credential.

3. Location information

Browser GPS is optional. If you choose Use my location, the browser provides coordinates long enough for BazaarBox to resolve a coarse public browsing location and perform a nearby search. The current design keeps raw buyer-device coordinates ephemeral: they are not placed in public URLs, rendered to other users, or intentionally persisted as a buyer-location record.

You may instead select a location or enter a PIN code. The chosen safe browsing location may be stored as a browser preference so it survives navigation or a later visit.

A seller may provide listing coordinates for proximity search. Exact seller coordinates are private and must not be returned through public listing interfaces. Public views show coarse locality information and, where available, an approximate distance.

India Post locality and PIN records are used as reference data. Location names are not guarantees of an exact address, boundary, or current postal designation.

4. How information is used

We use information to:

  • create and secure accounts;
  • create, moderate, publish, search, and manage listings;
  • support nearby discovery without publicly exposing exact seller coordinates;
  • provide messaging, favourites, blocking, reporting, feedback, and profile functions;
  • investigate fraud, abuse, safety incidents, and policy violations;
  • respond to support, privacy, refund, and grievance requests;
  • maintain, debug, measure, and protect BazaarBox;
  • comply with law and enforce applicable policies; and
  • where applicable, verify listing-fee payments, grant entitlements, prevent duplicate fulfilment, reconcile transactions, and process refunds.

We do not use buyer GPS to infer a replacement location based on available inventory.

5. Public and private information

Active, approved listings may be public and may appear in search engines or social previews. Public listing information may include the title, description, price, condition, photos, seller display name, coarse locality, city, state, approximate distance, and publication information.

Your email address, authentication records, exact seller coordinates, buyer GPS coordinates, private messages, favourites, blocks, reports, moderation-only information, and sensitive support details are not intended to be public.

Do not place phone numbers, email addresses, external messaging handles, home addresses, or other private contact details in public listing fields.

6. Service providers and disclosures

We use service providers to run BazaarBox, including:

  • Supabase for authentication, database, and object storage;
  • Vercel for application hosting and delivery;
  • ReNewTech Solutions for the support mailbox and as a build collaborator; and
  • the payment provider made available at checkout, where you purchase a paid service, for payment processing and related transaction status.

These providers may process information under their own contracts and privacy terms. We may also disclose information when reasonably necessary to comply with law, respond to a valid legal process, protect users or the public, investigate fraud or abuse, enforce our policies, or complete an authorised business restructuring.

We do not sell the underlying advertised item, provide escrow, or process the item purchase price between buyer and seller.

7. Cookies and local preferences

BazaarBox uses cookies or browser storage needed for authentication, security, language selection, install experience, and safe browsing-location preferences. The locale preference is currently stored using the bazaarbox_locale cookie.

8. Retention

We retain information for as long as reasonably needed to provide the service, keep the marketplace safe, resolve disputes, prevent abuse, satisfy accounting or legal obligations, and enforce agreements. Different records may require different periods. Deleted or closed-account information may remain in protected backups or legally required records for a limited period.

9. Security

We use technical and organisational safeguards appropriate to the service, including access controls and database policies intended to separate public, user-owned, moderator, and private data. No internet service can guarantee absolute security.

Never share your password, OTP, PIN, or sensitive banking credentials with another user. Contact us promptly if you suspect unauthorised account activity.

10. Your choices and requests

You may update information through available profile and listing controls. You may deny browser location access and use manual location selection instead. You may request help with access, correction, deletion, or another privacy concern by emailing hello@renewtech.solutions.

We may need to verify your identity before acting on a request. Some information may be retained where required or permitted by law, or where necessary for security, fraud prevention, dispute resolution, or the rights of others.

11. Children

BazaarBox is not designed to enable children to enter unsafe transactions or meetings.

12. Local transactions and off-platform communication

For your safety, keep conversations on BazaarBox when possible. If you move a conversation or transaction outside BazaarBox, we may not have the messages or information needed to investigate a problem. This does not remove legal rights you may have.

Buyers and sellers arrange local meetings and complete the item transaction directly. BazaarBox does not provide shipping, delivery, escrow, or buyer-to-seller item-payment processing.

13. Changes

We may update this Policy prospectively as BazaarBox changes or legal requirements develop. We will update the effective date and provide notice of material changes where required.

14. Contact and grievances

Email privacy questions or grievances to hello@renewtech.solutions or write to the operator at the address in section 1. Provide enough information to understand and respond to the request, but do not send passwords, OTPs, PINs, or full payment credentials.