Privacy Policy

On this pre-launch website:

• Contact form: name, email, phone (optional), and your message — used solely to respond to you.
• Lead forms (seller / partnership / investor): the details you submit through our registration forms — used to evaluate and process your application and contact you about it.
• Technical data: anonymised usage analytics (pages viewed, approximate region, device class). We do not run advertising trackers.

During seller onboarding we additionally collect identity and business verification data required by law for marketplace sellers: PAN, GSTIN (where applicable), business registration documents, and bank account details verified through a regulated penny-drop service.

• To respond to inquiries and process registrations.
• To verify seller identity, business status and bank ownership, as required for marketplace operation and tax compliance.
• To send transactional messages (acknowledgements, onboarding updates) by email, SMS or WhatsApp.
• To meet legal obligations: GST, TCS/TDS reporting, and lawful requests from authorities.
• To improve the website using aggregate, non-identifying analytics.

• We never sell or rent personal data to anyone.
• We never share customer contact details with sellers — on the marketplace, customer phone numbers and emails are masked and all communication is routed through the platform.
• We never use your data for third-party advertising.

Only service providers necessary to operate the platform, each bound to use data solely for the service they provide to us:

• Email delivery (Resend) for acknowledgements and notifications.
• Identity and bank verification providers (e.g. Surepass, Cashfree) during seller onboarding.
• Payment processing partners (RBI-regulated payment gateways) and professional courier networks, once the marketplace is live.
• Government authorities where the law requires it.

Data is stored on access-controlled infrastructure, encrypted in transit. Sensitive identifiers are stored only to the extent required (for example, only the last four digits of Aadhaar are retained after verification). Access within the company is role-based and logged. Verification documents are retained for the period required by tax and company law, then deleted.

You may request access to, correction of, or deletion of your personal data, and withdraw consent for non-essential processing, by writing to support@odishavastram.com. We respond within 30 days. Deletion is subject to records we are legally required to retain (for example, tax records).

Data-related complaints go to our Grievance Officer, Swayam Prakash Panda, at grievance@odishavastram.com. We acknowledge within 48 hours and aim to resolve within 30 days, in line with our Grievance Redressal Policy.

We will update this policy as the marketplace launches and as law evolves. Material changes are announced on this page with a revised date; continued use after the effective date constitutes acceptance.