Version 2026-09-16

Privacy Policy

Made For Indians is operated by Aashita Technosoft Pvt. Ltd. (“we”). This notice explains what personal data we process when you use madeforindian.co.in, why we process it, and the rights you have under the Digital Personal Data Protection Act, 2023 (DPDP Act).

We are the Data Fiduciary for this data. Send questions and requests to rkhan@aashita.ai.

1. Data we collect
- Account: name, email address, password (stored only as a hash), phone, company and country, and when you accepted our terms.
- Supplier verification (KYC): legal company name, business licence code, registered address, contact name, title and phone, ID type and number (stored encrypted), and images of your business licence, ID document, a live selfie and factory photos.
- Trade activity: inquiries, requirements (RFQs), chat messages, saved products, and whether you chose to share your interest with a supplier.
- Security and technical data: sign-in and two-factor events, the IP address of security-relevant actions, and a session cookie (mfi_session) that keeps you signed in. Small preferences, such as your theme and saved products, are kept in your browser.
2. Why we use it, and on what basis
- To run your account and the marketplace, connecting buyers and suppliers: based on the consent you give when you create an account.
- To verify that a supplier represents the company they claim: based on the separate, explicit consent you give before submitting verification documents.
- To keep the service secure, prevent fraud and abuse, and meet legal obligations: the legitimate uses permitted by Section 7 of the DPDP Act.
- To send service emails, such as verification codes and review decisions. We do not sell personal data or use it for third-party advertising.
3. Who we share it with
We share personal data only as needed to provide the service:
- Other users: a supplier sees the inquiry or message you send them. A buyer’s identity is shown to a supplier only when the buyer chooses to share it.
- Service providers who process data for us: hosting, email delivery (Google), encrypted backup storage (Microsoft OneDrive), translation of a chat message when you ask for it (Google Translate or MyMemory) and, once paid supplier plans launch, our payment processor (PayGlocal).
- Authorities, when the law requires it.
4. Transfers outside India
Many suppliers on the platform are outside India, and some service providers process data abroad. We transfer personal data only as the DPDP Act permits, and never to a country the Government of India has restricted.
5. How long we keep it
- Account data: while your account is open. After you ask to delete your account you have 30 days to restore it; after that your personal data is removed, and messages you sent are kept only in anonymised form.
- Verification documents: deleted 30 days after an application is rejected, and when the account is deleted.
- Security and audit records, including consent records: kept as long as needed to protect the service and meet legal obligations.
- Encrypted backups: overwritten on a rolling basis, at most eight weeks after the data is deleted from the live service.
6. How we protect it
Connections use HTTPS. Passwords are hashed, ID numbers and verification documents are encrypted, sessions use an HttpOnly cookie, administrator accounts require two-factor sign-in, and access to verification documents is limited to reviewers and recorded.
7. Your rights
Under the DPDP Act you can:
- ask what personal data we hold about you and how we use it;
- have it corrected, completed or updated;
- have it erased, subject to legal retention duties;
- withdraw consent at any time (this does not affect processing already done, and may end the service that depends on it);
- nominate someone to exercise these rights if you die or become incapacitated;
- raise a grievance with us, and then with the Data Protection Board of India.
You can change your details or delete your account in your account. For anything else, write to rkhan@aashita.ai.
8. Grievance Officer
- Name: [Grievance Officer name to be added before launch]
- Email: rkhan@aashita.ai
- Phone: [Phone number to be added before launch]
- Address: Aashita Technosoft Pvt. Ltd., [Registered office address to be added before launch]
9. Children
Made For Indians is a business marketplace for adults. We do not knowingly process personal data of anyone under 18.
10. Changes to this notice
Any change is published here with a new version date. If a change affects something you consented to, we will ask for your consent again.

We are the Data Fiduciary for this data. Send questions and requests to rkhan@aashita.ai.

1. Data we collect

Account: name, email address, password (stored only as a hash), phone, company and country, and when you accepted our terms.
Supplier verification (KYC): legal company name, business licence code, registered address, contact name, title and phone, ID type and number (stored encrypted), and images of your business licence, ID document, a live selfie and factory photos.
Trade activity: inquiries, requirements (RFQs), chat messages, saved products, and whether you chose to share your interest with a supplier.
Security and technical data: sign-in and two-factor events, the IP address of security-relevant actions, and a session cookie (mfi_session) that keeps you signed in. Small preferences, such as your theme and saved products, are kept in your browser.

2. Why we use it, and on what basis

To run your account and the marketplace, connecting buyers and suppliers: based on the consent you give when you create an account.
To verify that a supplier represents the company they claim: based on the separate, explicit consent you give before submitting verification documents.
To keep the service secure, prevent fraud and abuse, and meet legal obligations: the legitimate uses permitted by Section 7 of the DPDP Act.
To send service emails, such as verification codes and review decisions. We do not sell personal data or use it for third-party advertising.

3. Who we share it with

We share personal data only as needed to provide the service:

Other users: a supplier sees the inquiry or message you send them. A buyer’s identity is shown to a supplier only when the buyer chooses to share it.
Service providers who process data for us: hosting, email delivery (Google), encrypted backup storage (Microsoft OneDrive), translation of a chat message when you ask for it (Google Translate or MyMemory) and, once paid supplier plans launch, our payment processor (PayGlocal).
Authorities, when the law requires it.

4. Transfers outside India

Many suppliers on the platform are outside India, and some service providers process data abroad. We transfer personal data only as the DPDP Act permits, and never to a country the Government of India has restricted.

5. How long we keep it

Account data: while your account is open. After you ask to delete your account you have 30 days to restore it; after that your personal data is removed, and messages you sent are kept only in anonymised form.
Verification documents: deleted 30 days after an application is rejected, and when the account is deleted.
Security and audit records, including consent records: kept as long as needed to protect the service and meet legal obligations.
Encrypted backups: overwritten on a rolling basis, at most eight weeks after the data is deleted from the live service.

6. How we protect it

Connections use HTTPS. Passwords are hashed, ID numbers and verification documents are encrypted, sessions use an HttpOnly cookie, administrator accounts require two-factor sign-in, and access to verification documents is limited to reviewers and recorded.

7. Your rights

Under the DPDP Act you can:

ask what personal data we hold about you and how we use it;
have it corrected, completed or updated;
have it erased, subject to legal retention duties;
withdraw consent at any time (this does not affect processing already done, and may end the service that depends on it);
nominate someone to exercise these rights if you die or become incapacitated;
raise a grievance with us, and then with the Data Protection Board of India.

You can change your details or delete your account in your account. For anything else, write to rkhan@aashita.ai.

8. Grievance Officer

Name: [Grievance Officer name to be added before launch]
Email: rkhan@aashita.ai
Phone: [Phone number to be added before launch]
Address: Aashita Technosoft Pvt. Ltd., [Registered office address to be added before launch]

9. Children

Made For Indians is a business marketplace for adults. We do not knowingly process personal data of anyone under 18.

10. Changes to this notice

Any change is published here with a new version date. If a change affects something you consented to, we will ask for your consent again.