Privacy Policy

1. Introduction

Rubid Digital Marketplace (“Rubid”, “we”, “our”, or “us”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains our data collection, usage, and security practices in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian information technology guidelines.

2. Information We Collect

To facilitate reverse auctions between shoppers and verified kirana stores, we collect:

• Contact Information: Phone number and delivery address provided during account registration or order placement.
• Camera & Image Data (AI Parchi Scanner): When you use our AI Parchi Scanner, you grant camera and storage permissions to capture photographs of your handwritten shopping lists. These images are transmitted securely to our OCR processing service solely to extract grocery items and quantities. We do not use your personal parchi images to train public models without your explicit consent.
• Geolocation Data: We collect precise or coarse location data with your permission to identify verified kirana merchants within your 1–2 km neighbourhood radius.
• Order & Bidding History: Lists posted, bids received, prices accepted, and order fulfilment statuses.

3. How We Use Your Data

• To broadcast itemised shopping lists to verified neighbourhood kirana stores for bidding.
• To enable real-time price comparison and order confirmation inside the Rubid mobile application.
• To facilitate doorstep delivery or store pickup by providing your delivery contact details to the winning store.
• To process payments securely through PCI-DSS compliant payment gateways.
• To communicate transactional status updates via SMS, push notifications, or WhatsApp.

4. Data Sharing & Third Parties

We never sell your personal information. We only share data with:

• Verified Kirana Merchants: Stores in your radius view the items on your shopping list to submit bids. Only the store whose bid you accept receives your delivery address and contact number.
• Authorised Service Providers: Cloud infrastructure hosts, cloud OCR processors, and regulated payment aggregators operating under strict confidentiality contracts.
• Legal Authorities: When required by lawful court order, subpoena, or Indian regulatory bodies.

5. Data Security & Retention

We employ industry-standard encryption protocols (TLS 1.3 in transit, AES-256 at rest) to safeguard user data. Camera snapshots processed by the Parchi Scanner are kept temporarily during the active bidding window and purged from live servers within 30 days unless retained for dispute resolution.

6. Your Rights Under Indian Law

As a data principal under the DPDP Act, you have the right to request access to your stored personal data, request correction of inaccurate records, withdraw consent for location or camera tracking at any time via your device settings, or request permanent deletion of your Rubid account.