Privacy policy

Last updated: 5 October 2026 · Version 2.0

1. Who we are and what this policy covers

PashuBid (“PashuBid”, “we”, “us”) operates an online marketplace where verified sellers list livestock — cows, buffalo, goats and sheep — and buyers discover, bid on and purchase them with escrow-protected payments and documented handovers. This policy explains what personal data we collect, why we collect it, who we share it with, how long we keep it, and the rights you can exercise over it.

It applies to every visitor and user of the PashuBid website and mobile experience, whether you browse as a guest, create an account, list an animal, place a bid, or complete a purchase. It does not cover third-party services you reach from PashuBid (for example a bank’s payment page); those services have their own privacy notices.

2. Data we collect

2.1 Account data

• Identity and contact details — full name, email address, phone number, and a profile photo you choose to upload.
• Credentials — your password, stored only as a salted hash; we never store or see it in plain text. If you sign in with Google, we receive your Google account identifier, name and email.
• Profile settings — saved preferences such as your district, favourite species, and notification choices.

2.2 Identity verification (KYC) data

• Documents — government-issued identification (for example Aadhaar, PAN, driving licence or voter ID) that you upload to become a verified seller or buyer.
• Verification outcomes — whether verification passed, failed or is pending, and any reviewer notes required by law to justify a decision.
• Bank details — account name, account number and IFSC, collected only to pay sellers and process refunds.

2.3 Listing and auction data

• Listings — the details, photographs, health papers and asking price of animals you list, and the district where they are located.
• Bids — every bid you place, the amount, timestamp, the lot it targeted, and retracted or outbid history.
• Auction outcomes — lots won or sold, final hammer prices, and commission earned.

2.4 Payment and escrow data

• Transactions — deposits, escrow holds, releases, refunds, and payouts, each with amounts, timestamps and counterparty identifiers.
• Payment instrument metadata — we see the method and a masked reference (for example the last four digits). Card numbers and UPI credentials are handled by our payment processor and never touch PashuBid servers.

2.5 Communications

• Support conversations — messages you send to help centre or dispute support, including attachments you choose to share.
• Dispute records — inspection reports, photos, claims and resolutions, kept with the transaction they relate to.

2.6 Device and usage data

• Usage events — pages viewed, searches made, lots followed, and buttons clicked, used to keep the marketplace usable and to detect abuse.
• Technical data — IP address, browser and device type, language, and referring address, used for security, fraud prevention and aggregate analytics.

3. Why we use your data, and on what basis

We process personal data only when we have a lawful basis. Under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) those bases are your consent, or certain legitimate uses permitted by law. In practice:

We do not sell your personal data, and we do not use it for behavioural advertising against third-party profiles.

4. Who we share it with

We share personal data only with the categories below, and only to the extent needed for each purpose:

• The other party to a deal — a seller sees the buyer’s display name, district and contact details for a won lot, and vice versa, so the handover can actually happen. KYC documents are never shown to the other party; only a “verified” status.
• Payment and escrow providers — banks, card networks and UPI rails that move money, receiving the identifiers they require.
• Identity verification vendors — services that help check KYC documents against issuing-authority records, under contracts that forbid any other use.
• Infrastructure and communication providers — cloud hosting, databases, email, SMS and push-notification services that store and deliver data on our instructions.
• Professional advisers and authorities — auditors, lawyers, tax authorities, courts and law-enforcement bodies, where a legal obligation requires disclosure or a legal claim makes it necessary.
• A successor entity — if PashuBid is ever merged or acquired, personal data moves with the business under this policy’s protections, and you are told before it does.

5. Data residency and cross-border transfers

PashuBid serves users in India. Personal data is stored on infrastructure located in India, and we do not transfer personal data outside India except as the central government may permit under Section 16 of the DPDP Act and its notified countries. If a transfer is ever permitted, it will be protected by contract and equivalent safeguards, and this section will be updated.

6. How long we keep your data

When a retention period ends, data is deleted or irreversibly anonymised — for example, a bid amount kept in an anonymised public price index with no name attached.

7. How we protect your data

• All traffic is encrypted in transit with TLS; data at rest is encrypted in our databases and object storage.
• Passwords are stored only as salted, adaptive hashes; session tokens are http-only and rotate on privilege changes.
• KYC documents live in access-controlled storage: only identity-verification staff and processes can open them, every access is logged, and they are never exposed to other users.
• Payments are card- and UPI-tokenised by our payment processor; PashuBid servers never handle raw payment credentials.
• Staff access follows least privilege, is reviewed regularly, and is revoked the day a role changes.

No system is perfectly secure. If a breach affects your personal data, we will inform you and the Data Protection Board without undue delay, in line with the DPDP Act.

8. Your rights

Under the DPDP Act you are the owner of your personal data. You can:

• Access a summary — ask us what personal data we hold about you, which categories, and who it was shared with.
• Correct and complete — fix inaccurate or incomplete data, including your name, contact details and profile photo, from your profile page or by writing to us.
• Erase — ask us to delete your personal data. We will erase what we can; where the law requires us to keep something (tax and transaction records, verification status), we keep only that, for only that period, and tell you what and why.
• Withdraw consent — for any processing based on consent, including marketing. Withdrawal stops future processing; it does not undo what was already lawfully done.
• Nominate — name a person who may exercise your rights on your behalf if you are unable to, or in the event of your death.
• Grieve — raise a complaint with our Grievance Officer (Section 13), and after that with the Data Protection Board of India.

We respond to verified requests within 30 days. We may ask for proof of identity to make sure we do not hand your data to the wrong person.

9. Children’s data

PashuBid is not for anyone under 18. We do not knowingly collect personal data from children, we do not run tracking or targeted advertising at children, and accounts belonging to minors are suspended when detected. If you believe a child has given us personal data, contact the Grievance Officer and we will delete it; where required, we will seek verifiable consent from a parent or lawful guardian before any further processing.

10. Cookies and local storage

• Strictly necessary — a session cookie that keeps you signed in, and security tokens that protect forms against forgery. These cannot be switched off without breaking sign-in.
• Preferences — local storage entries such as your light/dark theme choice. They stay on your device and are not sent to us.
• Analytics — aggregate, privacy-preserving counters that tell us which pages and lot types are used. They load only after you accept the consent banner (IP anonymised, no cross-site tracking, no advertising cookies). Declining keeps analytics off entirely, and "Cookie settings" in the footer lets you withdraw or change your choice at any time.

11. Notifications and marketing

Operational messages — outbid alerts, escrow status, handover instructions, security notices — are part of the service and are sent while your account is active. Marketing messages (new lots matching your interest, platform news) are sent only with your consent, and every one carries a working unsubscribe. Withdrawing marketing consent never affects operational messages or your account.

12. Changes to this policy

When this policy changes materially — a new data category, a new sharing category, or a change of purpose — we will notify you by email and through a notice in the product before the change takes effect, and where consent is the basis of processing, we will ask for it again. The version and date at the top of this page always describe the policy in force.

13. Grievance Officer and contact

For any question, request or complaint about your personal data, write to our Grievance Officer appointed under the DPDP Act:

If you are not satisfied with our response, you may escalate to the Data Protection Board of India under the DPDP Act.

Read the terms of use →
← Back to home