Privacy Policy
1. Overview & Legal Entity
Welcome to iBhudev (hereinafter referred to as "iBhudev", "we", "us", or "our"). This Privacy Policy explains in a transparent and comprehensive manner how we collect, use, store, protect, and disclose personal data when you access or interact with our marketplace website, progressive web application (PWA), and associated digital services across India.
By visiting iBhudev, creating an account, posting an advertisement, submitting a job application, or enquiring about loan or insurance products, you acknowledge that you have read, understood, and consented to the data practices described in this document.
- Company Name: iBhudev
- Registered Address: Government Hospital Near Rajula, 365560
- Operating Address: Near Hotel TGH, Diu – 362520, India
- Jurisdiction: Rajula, Gujarat, India
- Operating Territory: Republic of India
2. Personal Information Collected
We collect only the essential personal information required to deliver verified marketplace services, authenticate users, facilitate direct peer-to-peer communication, and process service requests.
Account Registration Data
- Full Name
- Email address (used for secure login & verification)
- Mobile phone number
- City and geographical location in India
Advertisement Details & Photos
- Ad title, category, description, and pricing
- Item condition, specifications, and locality
- Uploaded photographs of cars, bikes, or property
- Direct contact preference for buyer inquiries
Loan & Insurance Enquiries
- Applicant Name and contact phone number
- Applicant City and State in India
- Requested loan amount or insurance requirements
- Employment type or vehicle registration category
Facilitation & Support Data
- Direct WhatsApp enquiry click-through events
- Customer support feedback and email correspondence
- Account activity and session logs
- Security audit timestamps and IP request logs
3. How We Use Your Information
We process user information exclusively for legitimate, defined, and transparent business operations:
User Authentication & Identity Verification
To verify user credentials, prevent identity theft, and maintain active secure sessions.
Publishing & Displaying Marketplace Listings
To publish approved advertisements (cars, bikes, houses, rental properties, and classified goods) so interested buyers across India can discover them online.
Facilitating Direct WhatsApp Communications
To generate prefilled WhatsApp click-to-chat links, enabling prospective buyers to initiate transparent, direct negotiations with sellers without platform intervention.
Processing Loan & Insurance Inquiries
To route user-submitted loan and insurance requests to authorized desk personnel, allowing quick assistance and follow-up on financing needs.
Spam, Abuse & Fraud Prevention
To monitor repetitive submissions, prevent automated bot attacks, detect duplicate ad flooding, and maintain marketplace integrity.
4. Third-Party Sharing & Non-Sale Commitment
iBhudev does not sell, rent, lease, trade, or monetize personal customer data, email addresses, or phone numbers to third-party telemarketers, commercial advertisers, or data brokers.
Information is shared only under strict operational boundaries:
5. Technical Logs, CSRF & Cookies
Our platform employs standard, secure web technologies to maintain system stability, authenticate sessions, and protect against cyber threats:
CSRF Security Tokens
Every HTML form includes a cryptographic Cross-Site Request Forgery (CSRF) token to ensure requests originate exclusively from the legitimate user.
Encrypted Session Cookies
We utilize essential encrypted HTTP-only session cookies to preserve your login status as you navigate through marketplace pages.
Server Access Logs
Web servers log standard operational data such as IP address, browser type, referral URL, and access timestamps for diagnostic and rate limiting needs.
6. Data Retention & Security Controls
We implement rigorous organizational and technical measures to safeguard personal information against unauthorized access, loss, or manipulation:
Listing Data Retention & Auto-Deletion (30 Days)
Product and marketplace listing data is subject to auto-deletion within 1 month (30 days) following expiration or removal. Statutory transaction records, PhonePe payment processing references, and security audit logs may be retained for longer periods as permitted or mandated under applicable Indian law.
Cryptographic Password Hashing
All user account passwords are irreversibly hashed using modern algorithms (Bcrypt/Argon2). We never store or log plaintext passwords under any circumstances.
Secure Session Management & Controls
Verification codes dispatched via email expire automatically within a short window (10 minutes) and are protected by strict rate limits and resend cooldowns (60 seconds) to block brute-force attempts.
Rate Limiting & Attack Mitigation
Login forms and public enquiry forms are safeguarded by IP-based rate limiting to prevent credential stuffing and automated abuse.
Server-Side Role-Based Authorization
Administrative portals and ad moderation features require verified server-side authorization checks (is_admin). Client-side flags are strictly not relied upon.
7. Your Privacy Rights & Deletion
As a registered user or marketplace visitor, you have explicit rights regarding your personal records under applicable Indian privacy guidelines:
You can log in to your User Dashboard at any time to review your profile information, registered mobile number, and published advertisements.
You may modify, update, or edit your listing details, photos, prices, or verified phone number through your account dashboard.
You can delete your active advertisements at any time, and expired product listings are auto-deleted within 30 days. To permanently delete your entire account, submit a deletion request to our support desk. Statutory transaction and security audit logs may be retained as permitted under applicable law.
You can withdraw consent for future loan or insurance communications at any time by notifying our support team via email or WhatsApp.
8. Contact & Grievance Office
For any questions, data modification requests, grievance redressal, or privacy concerns, please contact our designated grievance team through the official channels below:
Formal Entity Address & Grievance Officer
iBhudev
Grievance Officer: Kishan Jani
Registered Address: Government Hospital Near Rajula, 365560
Operating Address: Near Hotel TGH, Diu – 362520, India
Jurisdiction: Rajula, Gujarat, India
