Privacy Policy

We collect only the minimum necessary information required to provide verified discovery and merchant communication services: • Account Registration Data: Name, email address, password hash, and optional contact phone number when you register as a Citizen or Business Owner. • Business Listing Data: Physical business address, landmark, locality, official phone numbers, WhatsApp contact numbers, operating hours, and storefront images provided by authorized owners. • Customer Enquiries: Name, email, phone number, and message text submitted when inquiring about a specific business establishment. • Technical & Usage Logs: IP address, device type, browser information, session cookies, and page visit metrics necessary for platform security and performance optimization.

We maintain a strict and uncompromising policy against commercial data exploitation: We DO NOT sell, trade, rent, or distribute user telephone numbers or email addresses to third-party telemarketers, lead brokers, or spam aggregators. When you send an enquiry to a business, that information is dispatched exclusively to that specific merchant.

Personal data collected by Maru Ahmedabad is used strictly to: 1. Authenticate your identity and maintain secure session tokens (via encrypted httpOnly cookies). 2. Dispatch one-time passwords (OTPs) for account verification and password recovery. 3. Display verified customer reviews and calculate aggregate business ratings. 4. Route customer enquiries directly to authorized business owners. 5. Protect the platform against malicious attacks, bot traffic, and fraudulent review submissions.

Maru Ahmedabad utilizes secure HTTP-only session cookies ('maru_auth_token') strictly for authentication and security purposes. These cookies expire after 7 days and cannot be accessed by client-side JavaScript. We do not deploy invasive third-party cross-site advertising trackers.

All database records are stored in secure cloud PostgreSQL databases with SSL/TLS encryption in transit and at rest. Passwords are irreversibly hashed using industry-standard bcrypt algorithms with salted rounds. We regularly review our security measures to prevent unauthorized access, alteration, or disclosure of data.

As a data principal under Indian law, you have the right to: • Access and review the personal data associated with your account. • Correct, update, or rectify any inaccurate or incomplete personal information. • Request the permanent erasure and deletion of your user account and associated personal data. • Withdraw your consent for non-essential communications at any time.

In accordance with the Information Technology Act 2000 and the DPDP Act 2023, the details of our designated Grievance Officer are: Grievance Redressal Officer: Tech & Compliance Cell Maru Ahmedabad Media & Tech Labs Titanium City Centre, Satellite Road, Ahmedabad - 380015, Gujarat, India Email: maruahmedabadm@gmail.com