Privacy Policy

• Account data: name, work email, password (stored only as a hash), role and organisation.
• Listing and deal data you enter: profiles, inventory, prices, partners, messages, proof and reports.
• Security data: sign-in attempts and IP address (for abuse prevention), session cookie.
• Contact form submissions and email delivery status.

To run your account and the marketplace, match supply and demand, send transactional emails (verification, requests, deal updates, password reset), keep the service secure, and meet legal obligations. We process data on the basis of your consent given at signup and for legitimate uses permitted under the DPDP Act. We do not sell personal data and do not use it for third-party advertising.

Published listings are public. Requests, proposals and deals are visible to the parties involved and to Arena operators who support them. We use processors for hosting (Vercel), database (managed PostgreSQL) and email (Resend), bound by confidentiality and security obligations.

We keep account data while your account is active and delete or anonymise it within 90 days of closure, except where law requires longer retention (e.g. tax records). Sign-in attempt logs are kept for up to 24 hours.

You may access a summary of your data, correct or update it, withdraw consent, request erasure, and nominate another person to exercise your rights. Withdrawing consent may mean we can no longer provide the service. Write to shashank.chaudhry@liveaware.in; we respond within 30 days.

Passwords are hashed with bcrypt, sessions use signed HTTP-only cookies, sign-in is rate limited, and access to workspace data is checked on every request. If a personal data breach occurs we will notify affected users and the Data Protection Board of India as required.

Contact our grievance officer at shashank.chaudhry@liveaware.in. If unresolved, you may approach the Data Protection Board of India.