Privacy Policy

1. Data we collect

We collect account data (name, contact, role), profile and listing data, transaction and payment metadata, content you create, device/usage data, and, for verified users, KYC documents.

2. Why we use it

• Provide and secure the Platform
• Process bookings, payments and settlements
• Verify identity and prevent fraud
• Personalise discovery and recommendations
• Communicate service and (with consent) marketing messages
• Comply with legal and tax obligations

3. Lawful bases

We rely on contract performance, legitimate interests, legal obligation, and consent (which you can withdraw). Each consent is recorded with timestamp, IP, device and the accepted version.

4. Sharing

We share data with counterparties to a transaction (e.g. a vendor you book), payment partners, verification and infrastructure providers under contract, and authorities where legally required. We do not sell personal data.

5. International transfers & residency

Where data crosses borders we use appropriate safeguards. You may set your data residency region in Privacy & Data Rights.

6. Your rights

Depending on your jurisdiction (DPDP, GDPR, CCPA) you can access, export, correct, delete, and object to or restrict processing, and opt out of “sale/share”. Exercise these from your Privacy & Data Rights dashboard.

7. Retention & security

We keep data only as long as needed (see the Data Retention Policy) and protect it per the Security Policy.

This document forms part of the UtsavOS platform policies. It is provided for transparency and does not constitute legal advice. Where a translated version conflicts with the English version, the English version prevails.

Contact

Questions about this document can be sent to our legal team. Grievances should go to the Grievance Officer for a tracked response.

• Legal: legal@utsavos.dev
• Privacy / Data Protection Officer: privacy@utsavos.dev
• Grievance Officer: grievance@utsavos.dev
• Trust & Safety: trust@utsavos.dev