Privacy & Data Protection

We process only what we need to run the platform honestly:

• Account data — your name, email, phone and password hash;
• Transaction data — orders, contributions, bids and bookings, and the payment reference (we store only the last four digits of a card, never the full number);
• Maker & partner data — profiles, stories, payout details and the documents you upload for verification;
• Usage data — the pages you visit and basic device information, to keep the service secure and working.

We process your data to provide the service you asked for, to fulfil orders and payouts, to verify makers and partners, to keep the platform secure, and to meet our legal obligations. Where the law requires consent — for example, to send you our letter — we ask for it clearly and you may withdraw it at any time.

You are the “Data Principal” and Sanchaari is the “Data Fiduciary” under the DPDP Act. We do not sell your personal data. Ever.

To complete a sale we share what is necessary with the maker or community fulfilling it — for example, the delivery address. Payment and delivery partners receive only what they need to do their part. Partner organisations that raise funds issue their own receipts and act as fiduciaries for the contribution data you give them. We require every processor to protect your data to the same standard we do.

We keep personal data only for as long as your account is active or as needed to meet legal, tax and accounting obligations — after which we delete or anonymise it. Provenance records are retained as part of a piece’s permanent history, but owner identities on public records are always shown pseudonymously (for example, “Private collector, London”).

You have the right to:

• Access a summary of the personal data we hold about you;
• Correct or complete inaccurate or incomplete data;
• Erase data we no longer need to keep;
• Nominate another individual to exercise your rights in the event of death or incapacity;
• Raise a grievance and have it addressed by our Data Protection team.

Use the form below and we will respond within the timelines the DPDP Act sets. If you are not satisfied, you may escalate to the Data Protection Board of India.

Sanchaari is not intended for children under 18. We do not knowingly process a child’s personal data without verifiable parental consent, and we never use it for tracking or targeted advertising.