Privacy policy

This policy explains which personal data SmartMarket AI (“we”) collects, what we use it for, who we share it with and what rights you have, under the Digital Personal Data Protection Act, 2023. By creating an account you confirm that you have read and agree to this policy.

1. Data we collect

• Account: email, display name, password (stored only as a one-way hash we cannot read) and your phone number if you add it to your profile.
• Listings: title, description, price, condition, specs, city/district and the photos you upload. Listings and sellers' display names are public.
• Messages: what buyers and sellers write to each other, visible only to the two people in the conversation.
• Searches: the queries you type, how they were parsed, and your account if you are logged in.
• Technical data: IP address, browser and device type, pages viewed, time of visit and page performance metrics.

2. How we use it

• To create and protect your account and let you post listings, message and search.
• For AI search, matching listings, translating foreign listings, market price checks and buyer inspection checklists.
• To prevent spam, fraud and abuse (for example, limiting logins, sign-ups and searches per IP address).
• To find and fix bugs, and to measure and improve speed and quality.
• To show ads and measure how they perform (see section 5).

The AI models (query parsing, semantic search, translation) run on our own servers. Your messages, listings and searches are not sent to outside AI providers.

Exception: photo search. When our own model cannot tell which product a photo shows, that photo (resized, without location data) is sent to Google Gemini. On the free tier Google may use it to improve its products. We do not store the photo.

3. Sharing with third parties

We do not sell personal data. It is shared only with the providers we need to run the service:

• Hosting and authentication: database, account and listing photo storage; confirmation and password reset emails.
• Network and security: delivering and protecting connections to the site (HTTPS, attack protection).
• Analytics and advertising: visit statistics, showing ads and measuring their performance.
• Error monitoring: technical error reports, without your email, cookies or anything you typed.
• Search and price checks: receive search keywords (without your identity) to find listings on other marketplaces and check prices.
• Photo search: Google Gemini receives a photo only when our own model cannot recognise the product (see section 2).

We may also disclose data when a competent authority requires it by law.

4. International transfers

Some providers in section 3 have servers outside India, so your data may be stored or processed abroad. We transfer only the data each service needs and follow the legal requirements for cross-border transfers.

5. Cookies and advertising

• Essential cookies: the login cookie (sb-access-token) and session data in your browser. Without them you cannot log in.
• Analytics and advertising cookies: third-party analytics and advertising providers use cookies to count visits, show ads (which may be personalized) and measure their performance. You can turn off personalized ads in each provider's ad settings.
• You can delete or block cookies in your browser settings; some features may then stop working.

6. How long we keep data

• Account, listings and messages: until you delete them or ask us to delete your account.
• Search logs and the IP addresses stored with them: at most 90 days.
• IP-based abuse-prevention data: a few minutes to an hour.
• Error reports and statistics: for the retention period of the provider concerned.

7. Your rights

Depending on the Digital Personal Data Protection Act, 2023, you may have the right to be informed, to give or withdraw consent, and to access, correct, delete, restrict, obtain a copy of or object to the processing of your personal data, as well as to complain and seek compensation. You can change your display name and phone number on your profile page. For any other request, including deleting your account, email [email protected] from the address you registered with; we reply within the time required by law. Withdrawing consent does not affect processing carried out before.

8. Security

Connections are encrypted (HTTPS), passwords are one-way hashed, database access is limited per user and internal services are not exposed to the internet. No system is completely secure; if a data breach occurs, we will notify you and the authorities as required by law.

9. Children

The service is for people aged 18 and over. People under 18 may use it only with the consent of a parent or guardian.

10. Changes to this policy

When this policy changes, we will post a notice on the site, or email you if the change is significant.

11. Contact

Mọi câu hỏi, yêu cầu hoặc kiếu nại về SmartMarket AI vui lòng gửi email tới  [email protected]