Privacy policy

Who we are

The platform is operated by Bundiwal Tech, a partnership firm, Nagpur, Maharashtra 440002 ("Bundiwal Tech", "we"). Each board and app shows the rates of one jeweller. That jeweller decides who gets a trade account and who may book, and sees the details described below for their own buyers. We run the service for them.

Looking at rates

No account, no login and no name, number or email. Your chosen jeweller, your favourites and the last rate seen stay on your device and go when you uninstall the app. If you turn on rate alerts, your device subscribes to an anonymous notification topic for that board: it identifies the board, not you.

Trade sign-in

Trade buyers sign in with their mobile number to see trade rates. We send a one-time code on WhatsApp.

• Your mobile number, to send the code and to recognise you at that jeweller. It is stored per jeweller: signing in to a second jeweller's app starts a separate record.
• Sign-in codes are stored only in a scrambled form that cannot be read back, expire after 10 minutes and are deleted within a day.
• A sign-in token keeps your phone signed in. It ends after 60 days without use, and after 180 days in any case.

Trade account details

Under Login, then "Account details", in the app you may give your name, your business name and, if you wish, your GST number (GSTIN). The jeweller's staff see them and approve or decline the account by hand. The GSTIN is checked only for being correctly formed.

Booking

Where a jeweller offers booking and has allowed you to book, we keep each order: the metal, the weight, the rate, the time and its status, together with the gram limits the jeweller set for you. Completed and cancelled orders are kept for 30 days and then deleted automatically; an order still pending is kept until the jeweller completes or cancels it. The jeweller may send order confirmations to you on WhatsApp from their own business number. The app takes no payment; payment is settled directly between you and the jeweller.

Jewellers and their staff

Staff who use the portal or the Jewellers Portal app sign in with their mobile number. We keep the number, the name and role the shop gives it, a sign-in token (ending after 30 days without use and after 90 days in any case), and, if alerts are allowed, the phone's notification token so that shop's alerts reach it. Sign-in attempts are kept for 60 days to stop misuse. Changes to rates, margins, buyers and orders are recorded with the name of the person who made them and the last four digits of their number.

Records we keep for accountability

Account actions (a rate or margin change, an approval, an order, a deletion) are written to an activity record with the time and the network address they came from, so a jeweller can answer a question about a price long after it was shown. Buyer entries in that record carry an internal number, not your mobile number.

Who else handles your data

We do not sell your data, show advertising or use your data to build profiles.

Deleting your account

In the jeweller's app, open My account and tap "Delete my account". You see what is deleted and what is kept, then confirm it a second time. No code is needed. An account with a pending order cannot be deleted until the jeweller completes it, because the jeweller still owes you that order. You can also ask the jeweller to remove you. Download your orders first if you want a copy.

• The account is deleted as soon as you confirm. There is no waiting period and it cannot be undone. Every phone where you were signed in is signed out.
• If you placed orders, it is sealed at once: no sign-in ever again. Your number, name, business name and GSTIN are locked away in encrypted form the jeweller's staff cannot read, and your sign-in tokens are deleted.
• The sealed record is erased on 31 March of the 7th year after the financial year of your last completed order, the period the income-tax and GST laws require records to be kept. If you never placed an order, nothing needs to be kept, and it is erased at once.

A jeweller's staff member is removed by the shop's owner.

Your rights

Under India's Digital Personal Data Protection Act, 2023 you can ask for a summary of the personal data we hold about you, have it corrected or erased, and nominate someone to act for you. Write to our Grievance Officer: Harshal Bundiwal, harshal@bundiwaltech.com. We reply within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.

Children

Trade sign-in and booking are for businesses and are not meant for anyone under 18.

Changes

We will change this page when what we collect changes, and update the date at the top.

See also the terms of use and how the trend is calculated.