Privacy Policy

1. Overview & Commitment

BulkBuddy ("we", "our", or "us") operates the collective group-buying platform located at https://bulkbuddy.in. We respect your privacy and are committed to complying with the Digital Personal Data Protection (DPDP) Act, 2023 of India. This Privacy Policy explains what personal data we collect, why we collect it, where it is stored, and how you can exercise your rights.

2. Data We Collect & Purpose of Processing

When you join our waitlist or submit a product requirement, we collect only the minimal data necessary to fulfill the group buying service:

• Contact Information: Full name, email address, and mobile phone number (+91 Indian format) to communicate deal status, matching circles, and verified shop instructions.
• Location Data: City and preferred locality/area to match you with nearby buyers and physical retail shops.
• Product Intent & Timeline: Specific item desired, specifications, model, color, and buying timeframe (1-4 weeks).
• Technical & Security Information: Cryptographic SHA-256 hash of your IP address (never raw IP) with a secret salt, user agent, and Cloudflare Turnstile verification token to protect against automated spam and abuse.

3. Data Hosting & Storage in India

In accordance with Indian data protection norms, your personal data is stored securely on Amazon Web Services (AWS) DynamoDB located strictly in the ap-south-1 (Mumbai) Region. We employ point-in-time recovery, encryption at rest using AWS KMS, and encryption in transit over HTTPS/TLS.

4. Sharing With Third Parties

We do not sell or rent your personal data to marketing agencies or advertisers. Your contact details are only shared with the specific verified retail store handling your group purchase once the circle is confirmed and you have authorized the deal.

5. Your Rights & Erasure Requests

Under the DPDP Act, you have the right to access, correct, or request the complete deletion/erasure of your personal information from our databases at any time.