Privacy Policy

• Account details — name, email address, phone number and a password (stored only as a secure hash).
• Google sign-in — if you choose “Continue with Google”, we receive your name, email address and profile picture from Google. We request no other Google data.
• Requirements and enquiries — the product, quantity, location, buying timeline, purpose and any message you submit.
• Location — the city or pincode you choose, your browser location if you allow it, or an approximate city derived from your IP address.
• Seller information — business name, contact person, address, GSTIN, products, photos and plan/billing details.
• Orders — items, delivery address and payment status for purchases made on seller websites. Card and UPI details are handled by the payment gateway, not stored by us.
• Technical data — IP address (stored hashed for abuse prevention), device and browser type, pages visited, and security cookies.

• To create and secure your account, including sending one-time verification codes.
• To route your requirement to the seller you contacted (a “Direct Lead”) and to other relevant verified sellers (“Market Leads”) — only with your consent, given on the requirement form.
• To process orders, payments and shipping on seller websites.
• To show results for your city and improve search and recommendations.
• To prevent spam, fraud and abuse, and to meet legal obligations.
• To send service messages (OTP, lead alerts, order updates). We do not sell your data.

• Sellers — when you submit a requirement or enquiry, your details are shared with the seller(s) it is routed to. Your phone number stays masked to a seller until they accept the lead.
• Service providers who process data for us under contract: Cloudflare (hosting security and bot protection), Resend (email delivery), Cloudinary (images), Razorpay (payments), Shiprocket (shipping), Google (sign-in) and our hosting provider.
• Authorities — when required by law or to protect users and the platform.

We use essential cookies to keep you signed in, remember your city and protect forms from bots. We do not use advertising cookies.

We keep account data while your account is active. Leads and orders are kept for as long as needed for the seller relationship and for tax and legal record-keeping (generally up to 8 years for invoices). Security logs are kept for a limited period. When data is no longer needed we delete or anonymise it.

You can access, correct or delete your personal data, withdraw consent, and nominate another person to exercise these rights. Most details can be edited in your account; for anything else, email us at rahulmauryalive@gmail.com. Withdrawing consent does not affect leads already delivered to sellers.

Data is encrypted in transit (HTTPS), passwords and one-time codes are hashed, and access is restricted to people who need it. No system is perfectly secure; if a breach affects you we will notify you and the authorities as the law requires.

Bzaro is a business platform and is not intended for anyone under 18.

For questions or complaints about your data, contact our Grievance Officer at rahulmauryalive@gmail.com. We respond within 30 days. See also our Terms of Service.

We may update this policy. The date at the top shows the latest version; significant changes will be announced on the site.