AdhesiveZone ("we", "us", "our") operates the website and app at adhesivezone.com (the "Service"). This Privacy Policy explains what personal data we collect from visitors, customers, dealers, masons, and contractors ("you", "User"), why we collect it, how we use and protect it, and the rights available to you under Indian law — in particular the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Information Technology Act, 2000 along with the rules made under it. By using the Service, you consent to the practices described in this policy.
1. Information we collect
Account information via Google Sign-In: if you choose "Continue with Google", we receive your name, email address, and profile picture from Google, limited strictly to what is needed to create and authenticate your account. We do not request or receive access to your Gmail, Google Drive, Google Contacts, or any other Google service data. This information is used only to identify you within AdhesiveZone and is never used for advertising or sold to any third party.
Account information via Email OTP: if you sign in with a one-time code, we collect and store your email address to send and verify that code.
Phone number: collected when you submit a dealer or professional listing, so customers and our team can verify and contact you.
Location data: if you allow GPS access, we use your coordinates only to sort and display nearby listings in real time. We do not store a history of your movements or track your location when the app is closed.
Listing details: business or individual name, city, area, specialties, products, stock, and any photos you submit as a dealer, mason, or contractor.
Inquiry data: when you tap Call or WhatsApp on a listing, we log the date, time, and which listing/product was contacted, so the dealer or professional can see their own inquiry history in their Dashboard.
Technical data: IP address, browser type, and device information, collected automatically for security, fraud prevention, and to keep the Service working correctly.
Cookies and local storage: we use browser local storage to keep you signed in between visits and to remember your language preference (Hindi/English). We do not use third-party advertising or tracking cookies.
2. How we use your Google Account information
When you sign in with Google, AdhesiveZone uses the "Sign in with Google" (OpenID Connect) flow solely to authenticate you and create your AdhesiveZone profile. Specifically:
Your name and profile picture are used to personalise your account and, if you list a business, may appear on your public listing.
Your email address is used for account identification, sign-in, and important service notifications (e.g. listing verification status).
We do not use Google user data to serve ads, and we do not sell, rent, or transfer Google user data to third parties for their own marketing purposes.
You can revoke AdhesiveZone's access to your Google account at any time from your Google Account settings (myaccount.google.com → Security → Third-party apps with account access).
3. Legal basis and how we use your information
Under the DPDP Act, we process your personal data as a "Data Fiduciary" on the basis of your consent (given when you sign up or submit a listing) and, where applicable, to perform our contract with you (providing the directory service you requested). We use your information to:
Show you relevant nearby dealers, masons, and contractors
Verify, publish, and manage business listings
Let dealers and professionals see and respond to customer inquiries via their Dashboard
Respond to enquiries sent via Contact, WhatsApp, or the callback request form
Detect, prevent, and address fraud, abuse, or technical issues
Comply with applicable Indian law
4. How we share your information
We do not sell your personal data. We share information only in the following limited circumstances:
With other users, as intended by the Service: a dealer/professional's listing details (name, city, phone, WhatsApp, products) are shown publicly so customers can contact them — this is the core function of the directory and is disclosed at signup.
Service providers (Data Processors): we use Supabase (authentication, database, and file storage) to operate the Service. Supabase processes data on our instructions under its own privacy policy and security practices.
Legal requirements: we may disclose information if required by law, court order, or a valid request from Indian government or law enforcement authorities.
Business transfers: if AdhesiveZone is involved in a merger, acquisition, or sale of assets, user information may be transferred, subject to this policy's protections continuing to apply.
5. Data storage and security
Your data is stored on Supabase's cloud infrastructure with encryption in transit (HTTPS/TLS) and row-level access controls that restrict each account to its own data. While we take reasonable security measures consistent with the IT (Reasonable Security Practices and Procedures) Rules, 2011, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
6. Data retention
We retain your account and listing data for as long as your account remains active. If you delete your account or ask us to remove your data, we will delete or anonymise it within 30 days, except where we are required to retain certain records for legal, accounting, or fraud-prevention purposes.
7. Your rights under the DPDP Act, 2023
As a Data Principal, you have the right to:
Access a summary of the personal data we hold about you
Request correction or updating of inaccurate or incomplete data
Request erasure of your personal data, where it is no longer necessary for the purpose it was collected
Withdraw consent at any time (this may limit or end your ability to use parts of the Service, such as a business listing)
Nominate another individual to exercise these rights on your behalf in the event of death or incapacity
Register a grievance with us (see Section 11) and, if unresolved, with the Data Protection Board of India
8. Cookies and local storage
We use essential browser storage (not third-party tracking cookies) to keep your session active and remember preferences like language. You can clear this at any time through your browser settings, though doing so will sign you out.
9. Children's privacy
The Service is intended for users who are 18 years of age or older, or the age of majority in their jurisdiction. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us using the details in Section 11 and we will delete it.
10. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above, and, where required by law, we will provide additional notice.
11. Grievance Officer / Contact us
In accordance with the Information Technology Act, 2000, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the DPDP Act, 2023, the contact details of the Grievance Officer are:
Response time: we acknowledge grievances within 24 hours and aim to resolve them within 15 days, as required under applicable Indian rules.
This policy is provided as a detailed template reflecting India's DPDP Act, 2023 and IT Rules, and is drafted to support Google OAuth verification requirements. It is not a substitute for legal advice — please have a lawyer review it before relying on it, and update the Grievance Officer's registered address once finalised.