Privacy Policy

This policy applies to the DabhasaMart Android app and the DabhasaMart website. DabhasaMart serves Dabhasa Village, Padra, Vadodara, Gujarat, India. Privacy questions can be sent to dabhasamart@gmail.com.

• Pickup orders: customer name, mobile number, ordered items, quantities, payment choice, order status, and order time.
• Farmer accounts: name, mobile number, village area, profile details, verification status, and a securely hashed sign-in PIN. We do not store the readable PIN.
• Google sign-in (optional):when a farmer chooses “Continue with Google”, Google and our authentication provider (Supabase Auth) process the farmer's Google email address and Google account identifier to create and sign in to the account. The email is used for account identity and support; it is not shown on the public marketplace profile.
• Farmer content: produce names, prices, quantities, categories, listing photos, and optional profile photos.
• On this device: language choice, farmer session information, private order reference codes used to show orders placed on that device, and, in the Android app, identifiers for farmers or listings the user blocks.

• Show available produce and verified farmer profiles.
• Create, manage, and track pickup orders.
• Let farmers sign in, manage listings, and receive orders.
• Prevent misuse, investigate reports, provide support, and protect the service.

Data is stored and processed using Supabase, our database, authentication (Supabase Auth), and image-storage service provider. When a farmer signs in with Google, Google is the identity provider and Supabase Auth is the authentication service provider for that sign-in, and Google applies its own privacy policy to the Google sign-in. DabhasaMart does not sell personal data and does not use personal data for advertising.

When a customer chooses WhatsApp or Call, the phone opens that third-party app. Information is sent to WhatsApp only after the customer taps the WhatsApp action. WhatsApp and the phone provider handle that activity under their own policies. We may disclose information when required by law or needed to protect users and the service.

Data is transmitted over encrypted HTTPS connections. Farmer PINs are stored as one-way hashes, and protected account and order actions use access-controlled server functions. No internet service can promise absolute security.

Account and listing data is kept while the farmer uses DabhasaMart. Order records are kept only as long as reasonably needed for pickup fulfilment, support, security, dispute handling, or legal obligations. Data is deleted or anonymised when it is no longer needed. A valid deletion request removes the account and associated personal data unless limited retention is required for legal or security reasons.

Farmers can update their profile, remove listings, sign out, and request permanent account deletion. Deleting a farmer account removes the farmer record, listings, uploaded Storage photos, and sessions; for accounts created with Google, the linked Supabase Auth user and Google identity are removed as well. Customers and farmers may also request deletion or correction of personal data by contacting support.

Visit the DabhasaMart account and data deletion page for the request process. Removing the app from a phone does not itself delete server records.

DabhasaMart is intended only for adults aged 18 and over. It is not designed for children, and children must not create a farmer account or place an order.

We may update this policy when the service or legal requirements change. The latest version and update date will remain available on this page.