Privacy Policy

At MegapolisMarket, we value your privacy and are committed to safeguarding your personal data. This Privacy Policy details how we handle your personal information, explains your data privacy rights, and outlines how the law protects you.

We process and protect user data in strict accordance with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and other applicable Indian laws. Please read this statement carefully before using our hyperlocal marketplace platform, website, or mobile applications (collectively referred to as the "Services" or "Platform").

Please also read our Terms of Service and Cookie Policy, which explain additional rules and technologies that apply when you use MegapolisMarket.

Who We Are & Regulatory Compliance

MegapolisMarket operates as a hyperlocal marketplace serving users in India. For the purposes of applicable data protection law, MegapolisMarket is the data controller of personal data collected through the Platform.

If you have questions about this Privacy Policy, wish to exercise your legal rights, or have a grievance regarding your data, contact our designated officers:

• Data Protection & Legal Inquiries: legal@megapolismarket.com
• Grievance Officer: grievance@megapolismarket.com
• Grievance Hotline: +91 80 4567 8900

Personal Data We Collect

2.1 Information You Share Directly

Account registration details

When you register, we collect your full name, email address, mobile number, and password (stored in hashed form; we never store plain-text passwords). MegapolisMarket uses email and password sign-in. We do not offer Google or Apple social sign-in on the Platform at this time.

Hyperlocal listing and media content

We collect and store listing titles, descriptions, prices, categories, photographs, condition details, and the locality or neighbourhood text you enter when publishing an ad. You may also choose whether to display your phone number or email on a listing.

Optional seller verification documents

To build community trust, you may voluntarily submit identity or seller verification documents for review by our compliance team. Verification is optional and raw documents are not displayed publicly.

Customer support correspondence

We retain information you provide when contacting support or filing a grievance, including your name, contact details, listing references, and the content of your request.

Email Security Code Validation

To maintain a secure, spam-free environment, MegapolisMarket validates accounts using a one-time security code sent to your registered email address after registration. Until verification is complete, some features may be restricted—including posting listings or using certain premium features. We may introduce additional mobile-number checks in the future where permitted by law.

2.2 Information Collected Automatically

Device and log metrics

We automatically log technical indicators such as IP address, operating system, browser type, app version, language, time zone, login timestamps, pages viewed, searches performed, and device identifiers where available.

Hyperlocal location data

MegapolisMarket does not continuously track your precise GPS location. Hyperlocal discovery is based primarily on the area or locality you type when creating or browsing listings. We may derive an approximate region from your IP address for security, analytics, and service delivery. You are not required to grant device location permissions to use core marketplace features on the website.

Clickstream and behavioural analytics

We analyse how users interact with the Platform—including referral URLs, session duration, search queries, listing views, and feature usage—to fix bugs, improve design, and make search results more relevant. This analysis uses aggregated or pseudonymised data where possible.

Cookies and tracking technologies

We use cookies and similar technologies for session management, preferences, security (including Google reCAPTCHA on login and registration), and analytics (including Google Analytics). See our Cookie Policy for categories and your choices. Blocking necessary cookies may limit login or listing features.

Purposes and Legal Bases for Data Processing

We process personal data under valid legal frameworks—including contractual necessity, legal obligation, legitimate interests in operating a safe marketplace, and your consent where required.

3.1 Delivering and Enhancing Hyperlocal Operations

• Service provisioning: Creating and authenticating your account, publishing and managing listings, and processing paid Platform features you purchase
• Geographical matching: Showing listings in relevant categories and localities based on information you and other users provide
• Platform improvement: Using usage patterns to improve search, categorisation, fraud detection, and overall user experience

3.2 Secure Platform Operations and Fraud Mitigation

• Security monitoring: Analysing device and log data to detect bots, suspicious logins, spam listings, and policy violations
• Verification review: Processing optional verification submissions to display trust indicators without exposing raw documents to the public

We do not sell or rent your personal data for third-party marketing.

Material Policy Modifications

We may update this Privacy Policy to reflect changes in law, regulation, or our Services. When we make material changes, we will post a prominent notice on the Platform and, where appropriate, notify you by email. The effective and last-updated dates at the top of this page will change accordingly. If you do not agree with an update, you may close your account as described under Your Rights & Data Deletion Requests below. Continued use after the effective date constitutes acceptance unless applicable law requires otherwise.

Communications and System Notifications

By registering an account, you agree to receive transactional, security, and administrative messages necessary to operate the Platform—such as email verification codes, password reset links, listing status updates, moderation decisions, and important policy notices. These operational messages are essential and generally cannot be opted out of while your account remains active. Promotional communications, where sent, will respect your consent and applicable law.

Data Sharing and Third-Party Disclosures

We do not sell, rent, or trade your personal data to data brokers for their independent marketing.

We may share personal data in these situations:

Public marketplace visibility

When you publish a listing, information you choose to display—such as your profile name, listing photos, description, price, and locality—may be visible to other users and visitors.

Note on user communications

MegapolisMarket does not operate a dedicated in-app chat inbox. Buyers and sellers connect through email, phone, or WhatsApp links based on contact details the seller has chosen to share. Communications through WhatsApp, your phone network, or external email are governed by those providers' policies. Exercise caution before sharing additional personal information with other users.

Vetted infrastructure providers

We use service providers for cloud hosting, email delivery, payment processing, Google reCAPTCHA, Google Analytics, SMS delivery (where used), and optional identity review. They process data only under contract and appropriate confidentiality obligations.

Legal mandates

We may disclose information to courts, law enforcement, regulators, or government authorities when required by applicable law or legal process under the DPDP Act, 2023 and other Indian law.

Corporate reorganisation

If MegapolisMarket undergoes a merger, acquisition, or asset sale, personal data may transfer to the successor entity subject to this policy or notice to you.

Storage Infrastructure and Retention Timelines

Your personal data is stored on secure infrastructure, primarily in India. We retain information only as long as necessary to:

• Provide the Platform and maintain your account
• Meet fraud prevention, dispute resolution, and safety requirements
• Comply with tax, accounting, audit, and regulatory obligations

As a general guideline, we retain account data for the active life of your account and for up to three years after closure unless a longer period is required by law or an active investigation.

Your Rights & Data Deletion Requests

Under the Digital Personal Data Protection Act, 2023, you may have the right to access, correct, erase, or withdraw consent for consent-based processing, and to lodge a complaint with the relevant authority.

How to exercise your rights

Email legal@megapolismarket.com or grievance@megapolismarket.com. We may verify your identity before fulfilling a request.

Account deletion

• In the MegapolisMarket mobile app, open your profile and select Delete Account
• On the website, send a deletion request from your registered email address to legal@megapolismarket.com or grievance@megapolismarket.com

We will process valid deletion requests subject to legal retention requirements. Data we must retain for tax, accounting, fraud prevention, or ongoing legal matters cannot be erased earlier than the law allows.

Information Security Measures

We implement technical and organisational safeguards—including TLS encryption in transit, encryption at rest for sensitive fields where appropriate, access controls, audit logging, and security reviews—to protect against unauthorised access, loss, or alteration of personal data.

Payment-related data is transmitted over encrypted connections through our payment partners. No online system is completely secure; please use a strong unique password, keep verification codes confidential, and avoid signing in on untrusted networks.

Third-Party Links and External Platforms

Our Platform may link to or open external services such as WhatsApp, email clients, payment processors, app stores, and partner websites. When you leave MegapolisMarket or interact with a third party, that party's privacy policy applies. We do not control how external sites collect or use your information.

Our website uses Google reCAPTCHA and Google Analytics. Google's use of information collected through those services is governed by Google's policies.