Reeborn Market Privacy Policy

Maple Digital Technology International Private Limited including its affiliates (collectively, "Reeborn Market", "We", "Our", or "Us") operates the Reeborn Market mobile application (the "App"), a B2B online auction platform for buying and selling pre-owned/refurbished electronic devices.

This Privacy Policy ("Policy") describes how we collect, use, store, share, and protect the Personal Information of our registered vendors and users ("you" or "User") when you access or use the App and its associated services (collectively, "Services"). By registering for or using the App, you expressly agree to the practices described in this Policy.

  • 1. Definitions
    1. "Personal Information" means any information that relates to a natural person which, directly or indirectly, is capable of identifying that person.
    2. "Sensitive Personal Data or Information (SPDI)" includes passwords, financial information (bank account, payment instrument details), biometric information, and government-issued identification data, as defined under the Information Technology (SPDI) Rules, 2011.
    3. "KYC Data" means government-issued identity and business proof documents collected for vendor verification and regulatory compliance.
    4. "Device Data" means technical identifiers and metadata collected from your mobile device.
    5. "Affiliates" means any entity that directly or indirectly controls, is controlled by, or is under common control with Reeborn Market.
  • 2. Data We Collect

    2.1 Personal & Contact Information

    We collect the following when you register or manage your account:

    1. Primary Mobile Number - Authentication, OTP-based login, and account identity.
    2. Alternate Mobile Number - Optional secondary contact for vendor communication.
    3. Full Name & Display Name - Vendor account identification.
    4. Email Address - Account communication, KYC notifications, and sending ledger/purchase statements.
    5. Business / Firm Name - Vendor profile and invoicing.
    6. Business Address (Street, City, State, Pincode) - Delivery, compliance, and invoicing.

    2.2 Government Identification & KYC Verification Data

    To comply with regulatory obligations and verify vendor identity, we collect the following Sensitive Personal Data:

    1. PAN Card Information - 10-digit Permanent Account Number (PAN) and uploaded photo/scanned copy of PAN card.
    2. Business Proof Documents - Document types including GST Certificate, Trade License, Shop & Establishment Certificate (SNE), MSME Certificate, and Udyam Registration Certificate, along with their registration numbers (e.g., 15-digit GSTIN, Udyam number, Trade License number) and uploaded certificate files (PDF, JPG, PNG).
    3. Individual Identity & Address Proof - Document types including Aadhaar Card, Voter ID, Passport, and Driving License, along with identification numbers (e.g., 12-digit Aadhaar number, Passport number, Voter ID, Driving License number) and uploaded front and back copies of documents.
    4. Consent & Verification Records - KYC verification consent timestamp and flag, KYC approval status, and verification remarks.

    Note: All SPDI is collected directly from you on a voluntary basis. However, failure to provide KYC data will prevent activation of your vendor account as required by law.

    2.3 Financial & Payment Information

    1. Bank Account Number - For processing auction payouts and refunds.
    2. Account Holder Name - For bank verification and payment processing.
    3. Bank Name & Branch Name - For payment routing.
    4. IFSC Code - For NEFT/IMPS payment transfers.
    5. UPI Payment App Detection (via Razorpay) - Detection of installed UPI payment apps on your device (e.g., Google Pay, PhonePe, Paytm, CRED, BHIM) to enable seamless UPI checkout.

    We do not store your credit or debit card numbers directly. Payment card processing is handled by Razorpay, subject to their own privacy policy and PCI-DSS compliance standards.

    2.4 Device & Technical Identifiers

    1. Unique Device ID - Unique hardware/device ID used for authentication security, device session management, and fraud prevention.
    2. Operating System & Platform (Android / iOS) - OS name and version for app compatibility and support.
    3. FCM Push Notification Token - Firebase Cloud Messaging token used to deliver real-time auction and order alerts.
    4. App Version - Installed app build/version number for update management and compatibility tracking.
    5. Network Connectivity Status - Internet connection status (online/offline) for monitoring network availability during auction participation.

    2.5 User Activity, Transactions & Support Data

    1. Bidding & Auction Activity - Normal bids, quick bids, bid values, timestamps, and won/lost auction history.
    2. Orders & Logistics History - Device lots won, order IDs, shipping tracking progress, and ledger history.
    3. Support Ticket Data - Subject, category, issue descriptions, photos and videos showing damaged or defective devices, and messages exchanged within support tickets.
  • 3. Device Permissions Requested

    The App requests the following permissions only when required:

    1. Camera - To take photos or videos of defective/damaged devices for dispute tickets and return claims, and to photograph KYC documents.
    2. Photo Library / Storage - To select and upload document scans, photos, or videos from device storage.
    3. Push Notifications - To send real-time alerts for live auction updates, outbid notices, order status changes, and payment alerts.

    You may revoke these permissions at any time through your device settings; however, doing so may limit certain features of the App.

  • 4. How We Use Your Data

    We use the collected information for the following purposes:

    1. Account Registration & Authentication - Creating and managing your vendor account, verifying identity via OTP, and securing your sessions.
    2. KYC Verification & Compliance - Fulfilling legal and regulatory requirements for vendor onboarding and identity authentication.
    3. Auction & Transaction Management - Facilitating live and scheduled auctions, processing bids, confirming won lots, and maintaining auction history.
    4. Payment Processing - Initiating payouts to your bank account and processing wallet top-ups via Razorpay.
    5. Order Fulfilment & Logistics - Managing orders for auction-won device lots and communicating shipping and tracking updates.
    6. Customer Support - Responding to queries, managing dispute and return tickets, and resolving device condition claims.
    7. Push Notifications - Sending real-time alerts for auction events, outbid notices, order updates, and payment confirmations.
    8. Security & Fraud Prevention - Using Device IDs and session data to detect unauthorized access and prevent fraud.
    9. Analytics & Product Improvement - Analyzing usage patterns and auction behavior to improve App performance via Google Firebase Analytics.
    10. Crash Diagnostics - Diagnosing and fixing App errors via Google Firebase Crashlytics.
    11. Legal & Regulatory Obligations - Retaining records as required under applicable Indian laws, including the IT Act, GST regulations, and the DPDP Act 2023.
  • 5. Third-Party Services

    We engage the following trusted third-party service providers who may process your data on our behalf:

    1. Razorpay - Processes online payments and wallet top-ups. Also detects installed UPI apps on your device to enable seamless checkout.
    2. Amazon Web Services (AWS S3) - Stores uploaded KYC documents, support ticket attachments, and device inspection media.
    3. Google Firebase Analytics - Collects in-app usage data, visited screens, search terms, and filter usage associated with an internal User ID and platform type.
    4. Google Firebase Crashlytics - Collects crash reports, stack traces, device state during crashes, and API diagnostic breadcrumbs (HTTP method, endpoint URL, status code, and request payload) when an API error occurs.

    All third-party service providers are contractually required to handle your data securely and only for the specified purposes.

  • 6. Local Data Storage & Caching

    The App stores the following data locally on your device using AsyncStorage / Redux Persist:

    1. User authentication tokens (JWT) and login session state
    2. Registered mobile phone number
    3. Push notification device token (FCM)
    4. Cached profile details
    5. Cache of viewed auctions and onboarding completion status

    This locally stored data provides faster app performance and offline access. You may clear this data by logging out or uninstalling the App.

  • 7. Sharing & Disclosure of Your Information

    We do not sell your Personal Information. We may share your information in the following circumstances:

    1. Service Providers - With third-party vendors who process data on our behalf as described in Section 5 above.
    2. Affiliates - With our Affiliates for operational, compliance, and service delivery purposes.
    3. Legal & Regulatory Authorities - With government agencies, regulators, courts, or law enforcement bodies where required or permitted by law, including for identity verification, fraud prevention, or compliance with legal process.
    4. Business Transfers - In the event of a merger, acquisition, restructuring, or sale of assets, your Personal Information may be transferred to the successor entity, subject to equivalent data protection obligations.
    5. With Your Consent - With other third parties where you explicitly authorize us to do so.
  • 8. Data Security

    We implement appropriate technical and organizational security measures to protect your Personal Information from unauthorized access, disclosure, alteration, or destruction. These measures include:

    1. Encrypted data transmission (TLS/HTTPS)
    2. Secure cloud storage on AWS S3 with access controls
    3. JWT-based authenticated API sessions
    4. Device ID-based session security
    5. Role-based access controls for internal systems

    If you suspect any misuse, unauthorized access, or breach of your Personal Information, please contact us immediately at grievances@mapledti.com.

  • 9. Data Retention

    We retain your Personal Information for as long as necessary to fulfil the purposes outlined in this Policy, or as required by applicable law:

    1. Account and KYC Data - Retained for the duration of your account and for a minimum of 7 years after account closure, as required under Indian financial and business regulations.
    2. Transaction and Auction Records - Retained for a minimum of 7 years for audit, tax, and legal compliance.
    3. Crash and Analytics Data - Retained per the retention policies of Google Firebase.
    4. Support Ticket Data - Retained for 3 years from ticket closure.

    Upon expiry of the applicable retention period, data will be securely deleted or anonymized.

  • 10. Your Rights & Choices

    Subject to applicable law, you have the following rights regarding your Personal Information:

    1. Right to Access - Request confirmation of what Personal Information we hold about you.
    2. Right to Rectification - Request correction of inaccurate or incomplete data.
    3. Right to Withdraw Consent - Withdraw consent for specific processing activities; this may affect your ability to use certain Services.
    4. Right to Data Portability - Request a copy of your data in a structured, machine-readable format where applicable under law.
    5. Right to Erasure - Request deletion of your Personal Information, subject to legal retention obligations.

    To exercise any of these rights, please contact us at grievances@mapledti.com. We will respond within 30 days of receiving your request.

  • 11. Children's Privacy

    The Reeborn Market App is intended solely for use by registered business vendors and is not directed at individuals under the age of 18. We do not knowingly collect Personal Information from minors. If you believe a minor has provided us with their information, please contact us immediately.

  • 12. Changes to This Policy

    We reserve the right to update or modify this Policy at any time. We will notify you of material changes via in-app notification, email to your registered address, or a prominent notice within the App. Your continued use of the App after changes are posted constitutes your acceptance of the revised Policy.

  • 13. Governing Law & Jurisdiction

    This Policy shall be governed by the laws of India without regard to any principles of conflict of laws. Any and all disputes arising hereunder shall be subject to the exclusive jurisdiction of the courts at Mumbai.

  • 14. Grievance Redressal Officer

    In accordance with the Information Technology Act, 2000 and rules made thereunder, any discrepancies, grievances, or complaints may be addressed to our designated Grievance Redressal Officer:

    Name : Legal Team
    Designation : Grievance Redressal Officer
    Email : grievances@mapledti.com
    Address : Maple Digital Technology International Private Limited, Mumbai, India
    Response Time : Within 30 days of receipt of complaint

  • 15. Consent

    By registering for and using the Reeborn Market App, you provide your express and informed consent to the collection, storage, processing, use, disclosure, and transfer of your Personal Information (including SPDI) as described in this Policy.

    In compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and rules thereunder, we will seek your specific consent for processing sensitive personal data and will notify you of any material changes to our data practices.

    If you do not agree with this Policy, please do not use the App or its Services.