This Privacy Policy explains how eCATLOG ("we", "us", "our") collects, uses, and protects information when you use our digital catalog platform (the "Service"). This policy is published in accordance with the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023 ("DPDP Act") of India, and, where applicable to users outside India, the General Data Protection Regulation ("GDPR").
"Personal Data" means any data about an identified or identifiable living individual — for example, a name, phone number, or email address that can be used, alone or with other information, to identify a person.
We do not sell your personal data or your customers' data to third parties.
Data is stored on secure cloud infrastructure (database hosting and Cloudinary for images). Passwords are hashed using industry-standard encryption (bcrypt) and are never stored in plain text. While we take reasonable technical and organizational measures to protect your data, no system is 100% secure, and we cannot guarantee absolute security.
We may share data with trusted third-party service providers strictly to operate the Service (e.g., cloud hosting, image storage, transactional email delivery). These providers are contractually obligated to protect your data and use it only for the purpose we specify. We may also disclose information if required by law, court order, or to protect our legal rights.
When customers place orders or enquiries through your catalog, their name and phone number are shared with you (the catalog owner) to fulfill the order. You are responsible for handling this data in compliance with applicable privacy laws and for not misusing it for unsolicited marketing.
We use minimal cookies/local storage to keep you logged in and remember your preferences. We do not use third-party advertising trackers.
We retain your account and catalog data for as long as your account is active. If you request account deletion, we will delete or anonymize your personal data within a reasonable period, except where retention is required for legal or accounting purposes.
The Service is intended for business use by individuals 18 years or older. We do not knowingly collect data from children.
We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notice. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.
If you believe your personal data has been misused, or you wish to report content that violates this policy or applicable law, contact our Grievance Officer: