Privacy Policy

Pradesham (pradesham.in) is a local business directory, search, and booking platform focused on Kerala. This policy applies to all visitors, registered customers, and business owners who use Pradesham.

We have written this policy in plain language wherever possible so that it is easy to understand, while still being legally accurate. If any term in this policy conflicts with a definition under Indian law, the legal definition will apply.

Pradesham is currently operated as an independent project by its founder. As of the date of this policy, no company or LLP has been incorporated to run Pradesham. This is stated here honestly so users know the current operating status of the platform.

Regardless of incorporation status, the person or entity operating Pradesham acts as the 'Data Fiduciary' for your personal data under India's Digital Personal Data Protection Act, 2023 (DPDPA), and is responsible for the commitments made in this policy.

Once Pradesham is incorporated as a registered company or LLP, this policy will be updated to name that entity as the Data Fiduciary. Continuing to use Pradesham after such an update means you accept the updated policy.

Account information: your full name, email address and/or phone number, a password (which we store only as a hashed value and never in plain text), an optional profile photo, your account role (customer or business owner), and your date of birth, which we collect and verify to confirm you meet our minimum age requirement.

If you sign in using Google Sign-In, we receive your name, email address, and profile picture from Google, as permitted by your Google account settings.

Technical and security information: your IP address and browser or device information, which we store together with login sessions and admin audit logs for security and fraud-prevention purposes.

If you register as a business owner, we collect your business name, phone number, WhatsApp number, business email, physical address, and precise GPS coordinates of your business location, along with any photos you upload to your listing.

If you are a customer making a booking or service request, we collect your name, phone number, email address, any notes or descriptions you provide about the request, and any optional photos you attach.

If you post a review, we collect the text of your review and any optional photo you attach, linked to your account as the reviewing customer.

We use your information to create and manage your account, operate the directory and search features, connect customers with business listings, process bookings and service requests, display reviews, verify your age, keep your account secure, investigate misuse, and comply with our legal obligations.

We do not use your personal data for behavioural tracking or targeted advertising, and we never sell your data to advertisers or other third parties for marketing purposes.

Pradesham is intended only for use by individuals who are 18 years of age or older. We collect and verify your date of birth at signup to confirm this.

We do not currently offer a parental-consent pathway for users under 18. If we discover that an account belongs to someone under 18, we will decline the signup or remove the account, and any associated personal data will be deleted or anonymised as appropriate.

Our database is hosted by Supabase, with servers physically located in Tokyo, Japan. Our application server runs on Render, with servers physically located in Singapore.

This means your personal data leaves India and is processed on servers located in Japan and Singapore. We are disclosing this to you transparently. As of the date of this policy, no Indian law prohibits this kind of cross-border processing, but we want you to be fully aware of where your information is held.

We share personal data only with the service providers necessary to operate Pradesham: Supabase (our database hosting provider) and Render (our application hosting provider), both of whom process data on our behalf under their own security commitments.

If you choose to sign in with Google, Google processes the information involved in that sign-in according to its own privacy policy, which we encourage you to review separately.

We do not sell your personal data to advertisers or any other third party, and we do not share it for marketing purposes. Data is disclosed to government or law-enforcement authorities only where required by applicable Indian law.

Under India's Digital Personal Data Protection Act, 2023 (DPDPA), you have the right to know what personal data we hold about you, the right to request correction of inaccurate or incomplete data, and the right to request erasure of your personal data, subject to any legal retention requirements that may apply.

You also have the right to nominate another individual who may exercise these rights on your behalf in the event of your death or incapacity.

If you have a grievance about how we handle your personal data, you may raise it with our Grievance Officer using the contact details at the end of this policy. If you remain unsatisfied with our response, you have the right to file a complaint with India's Data Protection Board.

We note that many of the DPDPA's substantive provisions are being phased in by the Government of India, with a final commencement date of 14 May 2027. Pradesham has chosen to honour these rights for our users now, rather than waiting for the Act to fully come into force.

We retain your personal data for as long as your account remains active, and for a reasonable period afterward where needed for legal, security, or dispute-resolution purposes.

You may request deletion of your data at any time by contacting us using the details in the 'Your Rights Under DPDPA' section above, and we will act on valid requests subject to any legal retention obligations.

Pradesham uses a single session cookie to keep you logged in while you use the platform. This cookie is used only for authentication and is not used for advertising or tracking purposes.

We do not currently use any third-party advertising or analytics cookies.

We take reasonable technical and organisational measures to protect your personal data, including storing passwords only as hashed values, maintaining login and admin audit logs for security monitoring, and restricting access to personal data to what is necessary to operate the platform.

No method of storage or transmission over the internet is completely secure, and while we work to protect your information, we cannot guarantee absolute security.

Pradesham is not directed at, and is not intended for use by, anyone under the age of 18. We do not knowingly collect personal data from children.

If we become aware that we have collected personal data from someone under 18, we will take steps to delete that data and remove the associated account promptly.

We may update this Privacy Policy from time to time as our services, legal obligations, or operating status change. When we do, we will update the 'last updated' date at the top of this page and highlight material changes on the site.

We encourage you to review this policy periodically to stay informed about how we protect your information.

If you have questions, requests, or grievances relating to this Privacy Policy or your personal data, please contact our Grievance Officer / Data Protection Contact: Pradesham Support Team, Email: netaddons@gmail.com.

We are committed to acknowledging your grievance within 7 days of receiving it and resolving it within 30 days, in line with data protection best practices.