Privacy Policy

Welcome to Esparex Platform("Esparex", "we", "our", or "us"). Esparex is India's dedicated online marketplace connecting buyers, individual sellers, technicians, and verified wholesale suppliers of electronics, smartphone spare parts, and professional repair services.

This Privacy Policy describes in clear, transparent terms what personal information and data we collect, why we collect it, how it is processed and safeguarded, when it may be shared, how long it is retained, and how you can exercise your privacy and data protection rights under Indian law. By accessing or using our website (esparex.in), mobile applications, or associated services (collectively, the "Platform"), you acknowledge that you have read and understood this Privacy Policy.

1. Information We Collect

We collect only the minimum necessary information required to provide, secure, and improve the Esparex marketplace:

2. Legal Grounds for Processing Data

We process your personal information under the following lawful bases recognized by Indian law:

• Contractual Performance: To create your account, publish your listings, connect you with buyers/sellers, and facilitate communications.
• User Consent: For specific features such as precise geolocation, promotional notifications, and optional analytics cookies.
• Legal & Statutory Compliance: To comply with mandatory requirements under the Information Technology Act 2000, Intermediary Guidelines 2021, GST laws, CERT-In cybersecurity directives, and lawful law-enforcement requests.
• Legitimate Interests: To detect fraud, block prohibited listings, enforce platform security, resolve disputes, and maintain a trusted marketplace ecosystem.

3. How We Use Your Information

We use the information we collect for specific, legitimate marketplace purposes:

• To authenticate your identity and protect user accounts against unauthorized takeovers.
• To display relevant spare parts, devices, and repair technicians based on your city or search radius.
• To facilitate real-time chat communication and price negotiation between prospective buyers and sellers.
• To verify business authenticity through manual and automated KYC checks, awarding verified trust badges.
• To perform automated AI-assisted scanning and human moderation of listings, photos, and messages to prevent counterfeit sales, scams, stolen goods, and abusive content.
• To securely process payments for optional premium features (such as Spotlight Ads and Business Subscriptions). Payments are handled via authorized payment gateways; Esparex never stores raw credit/debit card numbers or bank PINs.
• To send important transactional notifications, security alerts, and customer support responses.

4. Information Sharing & Third Parties

We share data strictly in the following limited circumstances:

• With Other Platform Users: Your display name, city/state, member since date, and active public listings are visible to facilitate trades. Your phone number is ONLY shared if you select the "Show" or "On-Request" visibility setting in your profile.
• With Infrastructure & Cloud Partners: We utilize secure enterprise cloud infrastructure (e.g., AWS Asia Pacific data centers in India) for data storage, media hosting, and verified SMS/OTP delivery services. All service providers operate under strict confidentiality and security agreements.
• Statutory Authorities & Law Enforcement: We disclose information when legally required by a valid court order, warrant, summons, or statutory directive from recognized law enforcement agencies under Indian law.
• Business Reorganization: In the event of a merger, acquisition, asset transfer, or corporate restructuring, user information will remain subject to the commitments outlined in this Privacy Policy.

5. Data Retention Schedule

We retain personal data only for as long as necessary to fulfill marketplace operations, comply with statutory tax and accounting requirements, and resolve legal disputes:

6. Cookies & Tracking Technologies

Esparex uses cookies and local storage tokens to deliver a reliable, secure user experience:

• Essential Cookies: Required for account authentication, CSRF security, maintaining your active session, and managing cookie consent preferences. These cannot be disabled.
• Functional Storage: Stores your local UI preferences, such as Dark/Light theme mode and last-searched city, directly in your browser.
• Anonymous Analytics: Aggregated, non-personally identifiable metrics (such as page view counts and ad impression frequencies) to optimize search performance.

You can manage or decline non-essential cookies via our on-screen Cookie Preferences banner or configure your browser settings to refuse cookies.

7. Your Privacy Rights & Data Deletion

Under the Digital Personal Data Protection Act, 2023, you have clear rights regarding your personal data:

• Right to Access & Summary: You may view your profile, active listings, and account metadata at any time in Account Settings.
• Right to Rectification: You can edit your name, contact details, shop address, and listing information directly from your dashboard.
• Right to Erasure (Account Deletion): You can permanently delete your Esparex account and associated personal data by visiting Account Settings → Delete Account. Upon confirmation, active listings are removed immediately, and identifiable data is wiped according to our retention schedule.
• Right to Withdraw Consent: You may withdraw consent for optional communications or phone visibility at any time through your profile settings.
• Right to Nominate: You have the right to nominate an individual to manage your account in the event of incapacity or death.

8. Security Safeguards

We implement multi-layered technical, administrative, and physical security measures to protect your data against unauthorized access, loss, or alteration:

• All data in transit is encrypted using modern TLS (Transport Layer Security) 1.3 protocols with HTTPS enforcement.
• Databases are hosted in secured VPC networks with strict role-based access control and principle of least privilege.
• Automated visual and text classifiers continuously inspect uploads for malicious payloads, spam, and prohibited materials.
• Periodic vulnerability assessments and dependency audits are conducted across our codebase.

9. Children's & Minors' Usage Restriction

Esparex is intended solely for individuals who are 18 years of age or older and legally capable of entering into binding contracts under the Indian Contract Act, 1872. We do not knowingly solicit or collect personal information from children or minors under 18. If we discover that an account has been created by a minor without verified parental/guardian authorization, we will promptly deactivate the account and delete the associated data.

10. Policy Changes & Version Updates

We may update this Privacy Policy periodically to reflect technological changes, new platform features, or evolving statutory requirements. When material changes occur, we will update the "Last updated" date at the top of this page and post a prominent notice on our website or send an in-app alert. We encourage you to review this policy periodically.