Privacy Policy
Last updated: 30 August 2026
This policy explains how Sahi Advise handles personal data, consistent with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and other applicable Indian law. Sahi Advise is the data fiduciary for the personal data described below.
1. What we collect, and why
| Data | Collected when | Purpose (lawful basis: your consent) |
|---|---|---|
| Name, mobile number, email, city, state, company, requirement details | You post a query or enquiry | Verifying your requirement and connecting you with a suitable Professional |
| Mobile number, OTP verification records | You verify your number or log in | Confirming the number belongs to you; preventing spam and fraud |
| Professional KYC: name, firm, qualification/membership number, PAN/GSTIN, address, uploaded certificates | You register as a Professional | Verifying credentials before granting marketplace access |
| Payment records (order IDs, amounts, status) | You top up your wallet | Processing and reconciling payments. Card/bank credentials are handled by Razorpay, not stored by us |
| Usage analytics (pages viewed, events) | Only after you accept the cookie banner | Improving the product. Declining the banner disables analytics entirely |
2. Sharing with third parties
- Partner professionals: when your requirement is accepted/purchased by a verified Professional, we share your name, contact details, city and requirement so they can serve you. This is the core purpose of the platform and happens only for the Professional handling your requirement.
- Processors: payment processing (Razorpay), SMS/OTP delivery, email delivery and cloud hosting providers, each bound to use data only to provide their service.
- Legal: where required by law or to protect the platform against fraud or abuse.
- We do not sell personal data.
3. Retention
Customer queries and the related contact details are retained for 3 years from last activity, then deleted or anonymised. Professional KYC records are retained for the life of the account plus 5 years (financial-record obligations). Payment and wallet ledger records are retained for 8 years as required by tax law. OTP records are retained for 90 days for fraud prevention. Analytics data is retained for 26 months.
4. Your rights (DPDP Act 2023)
- Access a summary of the personal data we hold about you and how it has been processed.
- Correct inaccurate or incomplete data, and update your details.
- Erase your data where it is no longer necessary for the purpose it was collected (subject to legal retention duties above).
- Withdraw consent at any time — we will stop the related processing prospectively.
- Grievance redressal: write to [email protected]; we respond within the timelines prescribed under the DPDP Act. If unresolved, you may complain to the Data Protection Board of India.
- Nominate a person to exercise these rights on your behalf in case of death or incapacity.
5. Security
Data is transmitted over encrypted connections, access is role-restricted and logged, customer contact details are hidden from professionals until a lead is lawfully purchased, and administrative actions are audited. No system is perfectly secure; we will notify affected users and the Data Protection Board of personal-data breaches as the DPDP Act requires.
6. Cookies
Essential cookies (session, security) are always on. Analytics cookies load only after you choose "Accept analytics" on the consent banner, and you can clear the choice by clearing site data.
7. Children
The platform is intended for users aged 18 and above.
This document is a working draft prepared for the platform and should be reviewed by legal counsel before commercial launch.
Questions about this policy? Write to us via the contact page.