Privacy Policy | BSG Infra

1. Information We Collect

We collect the following types of information when you use the BSG Infra platform:

Account Information: Name, email address, phone number, and password when you create an account.
Vendor Information: Company name, GST number, business address, bank account details (for payouts), and PAN/TAN numbers.
Client Information: Location data, rental history, and project details.
Usage Data: Pages visited, search queries, equipment viewed, and interactions with the Platform.
Communication Data: Messages exchanged between vendors and clients through the Platform's chat feature.
Device Information: Browser type, IP address, and device identifiers for security and analytics.

2. How We Use Your Information

To provide and maintain the Platform, including account management and booking processing.
To verify vendor identities and business credentials for platform approval.
To facilitate communication between vendors and clients.
To process payouts to vendors for completed bookings.
To send important notifications about bookings, account status, and platform updates.
To improve the Platform through analytics and usage patterns.
To detect and prevent fraud, abuse, and security threats.

3. Information Sharing

We do not sell your personal information. We may share information in the following circumstances:

Between Users: Vendor business information is visible to clients browsing equipment. Client contact details are shared with vendors upon booking confirmation.
Service Providers: We use third-party services for email delivery, cloud hosting, and payment processing. These providers are bound by confidentiality agreements.
Legal Requirements: We may disclose information if required by law, court order, or government regulation.
Business Transfers: In the event of a merger, acquisition, or asset sale, user data may be transferred to the acquiring entity.

4. Data Security

We implement industry-standard security measures to protect your data:

Passwords are hashed using bcrypt and never stored in plain text.
Sensitive data like bank account numbers are encrypted and access-restricted.
API communications are secured with JWT authentication and HTTPS.
Regular security audits are conducted to identify and address vulnerabilities.

While we strive to protect your information, no method of electronic storage is 100% secure. We cannot guarantee absolute security.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. After account deletion, we may retain certain information as required by law or for legitimate business purposes (e.g., financial records, dispute resolution).

6. Your Rights

Access: You can view your personal information through your profile page.
Correction: You can update your information through your account settings.
Deletion: You can request account deletion by contacting our support team.
Data Export: You can request a copy of your data by contacting us.

7. Cookies

We use essential cookies and local storage for authentication (JWT tokens) and user preferences. We do not use third-party tracking cookies for advertising purposes.

8. Third-Party Services

The Platform integrates with third-party services including Google OAuth for authentication and Cloudinary for image storage. These services have their own privacy policies, and we encourage you to review them.

9. Children's Privacy

The Platform is not intended for users under 18 years of age. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or Platform notification. Your continued use of the Platform constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related questions or data requests, contact us at contact@bsginfra.com.