Privacy policy
Last updated: 9 October 2026
MandiSetu is a marketplace app that connects farmers, traders, suppliers and vendors to trade fresh produce. This policy explains what personal data we collect, why we collect it, and the rights you have under India's Digital Personal Data Protection Act, 2023. MandiSetu is currently run by its founders while company registration is in progress.
What we collect
- Account details: your mobile number, name, preferred language, state and district, and the roles you choose (farmer, trader, supplier, vendor).
- Trade details: the crops you list, quantities, prices, orders, delivery confirmations, and any complaints you raise.
- Payment details: payment and payout references from our payment partner. Card, UPI and bank login details are entered on the payment partner's page and never reach our servers.
- Payout account: the payout account reference needed to send sellers their money.
- Records of consent and activity: when you agreed to this policy, and a log of important actions such as payments and payouts, kept for security and audit.
Why we use it
- To log you in with a one-time password (OTP) sent by SMS.
- To show your listings to buyers in your district, and to run orders, payments, refunds and payouts.
- To resolve complaints about quantity or quality.
- To keep the tax records the law requires, such as GST on our fee and TDS on sales.
- To keep the service secure and to prevent fraud.
We do not sell your personal data, and we do not use it for advertising.
Who we share it with
- The other side of your trade: buyers see a seller's name, district and listing. Each side of an order sees the order details.
- Service providers that run the app for us: our payment partner (Razorpay), our SMS provider for OTPs, and our cloud hosting provider in India.
- Government authorities: when the law requires it, for example for tax filings or a valid legal request.
Where it is stored and for how long
Your data is stored on servers in India. We keep account data while your account is open. Order, payment and tax records are kept for as long as Indian tax and accounting laws require, even after you close your account. Other data is deleted when it is no longer needed.
Your rights
- Get a summary of the personal data we hold about you.
- Ask us to correct or update it.
- Withdraw your consent and ask us to delete your data, except records we must keep by law. Withdrawing consent means you can no longer use the app.
- Nominate a person to use these rights for you in case of death or incapacity.
- Complain to our Grievance Officer, and if you are not satisfied, to the Data Protection Board of India.
To use any of these rights, write to [email protected] and include your registered mobile number.
Children
MandiSetu is meant for adults. You must be 18 or older to create an account.
Data breaches
If a breach affects your personal data, we will inform you and the Data Protection Board as the law requires.
Changes to this policy
If we change this policy, we will update the date at the top and tell you in the app before the change applies to you.
Grievance Officer
Grievance Officer, MandiSetu
Email: [email protected]
We acknowledge complaints within 24 hours and aim to resolve them within 15 days.