Privacy Policy

01Scope

This policy covers data we collect through the Hushcontracts website and service — from buyers who post requirements and from suppliers who apply to be listed. It does not cover what a buyer and supplier do directly with each other once we introduce them; that is between them.

02What we collect

• Requirement details you provide — what you need, quantity, delivery location, timeline, and any specs.
• Contact details — your name, phone/WhatsApp number, and (optionally) email, company, and designation. If you choose email as your channel, we require an email.
• Supplier details — for suppliers, your business name, offerings, capacity, location, representative name, contact number, and optional GSTIN.
• Messages & activity — your correspondence with us and basic technical logs (for example, that a quote link was opened).
• Payment data — if you pay a finder’s fee, our payment provider (Razorpay) processes your payment. We receive confirmation and invoice details, not your full card or bank credentials.

03How we use it

• To source and vet suppliers and prepare your quote comparison.
• To contact you on your chosen channel with your quotes, updates, and — after a match — a congratulations note and an optional request for feedback or a testimonial.
• To introduce a buyer and a chosen supplier so they can transact directly.
• To raise and collect the finder’s fee where one applies.
• To operate, secure, and improve the service, and to meet legal obligations.

We use AI tools to help structure requirements, find candidate suppliers, and organise quotes. A person reviews the work; we do not make solely automated decisions that have a legal effect on you.

04What we never do

• We never sell your data or your contact details.
• We never post your contact publicly, and we never broadcast your number to a list of vendors.
• We do not reveal a buyer’s identity to bidding suppliers during the quoting stage — only once the buyer chooses to proceed.
• We do not use your data for unrelated third-party advertising.

05When we share data

We share personal data only:

• with the supplier you choose (or, for a supplier, with the buyer) — the details needed to connect and transact, once you decide to proceed;
• with the service providers listed below, who process data on our behalf under confidentiality obligations; and
• where the law requires it, or to prevent fraud or harm.

06Service providers

We use trusted providers to run the service: Supabase (database & auth), Vercel (hosting), Resend (email delivery), Anthropic (AI processing of requirements and quotes), and Razorpay (payments). Each processes data only to provide their service to us. Some may process or store data outside India; where they do, we rely on appropriate safeguards.

07How long we keep it

We keep your data for as long as needed to provide the service, meet legal, tax, and accounting obligations, and resolve disputes. You can ask us to delete your data (see “Your rights”); we will do so unless we are required to retain it.

08Security

We apply reasonable security practices — access controls, encryption in transit, and row-level database protections so your requirement and contact details are readable only by us and, when you proceed, the counterparty you choose. No method is perfectly secure, but we take this seriously.

09Your rights

You may ask us to access, correct, or delete your personal data, or to stop contacting you, by emailing support@hushcontracts.com. You can withdraw consent for a testimonial at any time and we will unpublish it.

10Changes

We may update this policy as the service or the law changes. Material changes will be notified on this page with a new effective date.

11Grievance & contact

For any privacy question or grievance, contact us at support@hushcontracts.com. We acknowledge grievances within 48 hours and resolve them within the timelines set by applicable Indian law.