Privacy Policy

Last updated: 14 July 2026

1. What information we collect

Account information

When you register, we collect your full name, email address, phone number, and password (stored as a one-way hash — we never store or can see your actual password).

Listing information

When you create a listing, we collect the item's details (title, description, price, category-specific attributes like a vehicle's registration year or a property's carpet area), photos you upload, your asking price, and a general location or, for cars and bikes specifically, precise coordinates if you choose to share your current location.

Verification documents

To list an item, we require an ownership document (such as a vehicle Registration Certificate or a property Sale Deed) — see Section 4 for how this is specifically handled.

Usage data

We log QR code scans, contact unlocks, expressions of interest, messages sent through the platform, and payment records — this is what powers your dashboard's activity feed and lets us detect abuse.

2. How we use it

• To operate the core marketplace: showing your listings to buyers, processing contact unlocks, and delivering messages.
• To verify that a listing's ownership document plausibly matches the seller's identity, before the listing goes live.
• To send you transactional notifications — a new expression of interest, a message, a document review outcome — by email, SMS, or in-app.
• To detect and prevent abuse, such as repeated fake listings or a buyer spamming expressions of interest.
• To process payments for platform fees (see Section 6 on Razorpay).

We do not sell your personal data to third parties, and we do not use your data to serve third-party advertising.

3. How contact unlocking actually works

This is a deliberate design choice, not just a policy promise: the underlying system does not include your phone number in any listing data sent to a browser until one of those two actions has actually happened. Once revealed to a specific buyer, that buyer can see your number for the purpose of contacting you about that listing.

4. Ownership documents

Documents you upload to verify ownership (RC, Sale Deed, Aadhaar for identity cross-checks, etc.) are stored in a restricted area of our systems that is not directly accessible over the web — our server configuration explicitly blocks direct URL access to these folders. They are visible only to you, and to Bechdoo staff reviewing your listing for approval. We do not share these documents with other users, including a buyer who unlocks your contact.

5. Location data

If you use "Near me" while browsing, your device's location is sent to our server for that single search request, to sort listings by distance — we do not store a persistent location history tied to your account from this feature.

If you're selling a car or bike and choose to share its current location, that coordinate is stored against the listing (not your personal account) and shown to buyers so they can judge distance — this is opt-in, and only offered for vehicle categories, since a vehicle's location can genuinely change, unlike a house.

6. Who we share data with

• Razorpay — our payment processor, for handling platform fee payments. We do not store your card or UPI details; Razorpay processes these directly.
• SMS gateway provider — to deliver OTPs and notification texts.
• Law enforcement — only if legally compelled by a valid order, and only to the extent required.

We do not share your data with data brokers or advertising networks.

7. How long we keep it

Account and listing data is kept while your account is active. If you delete your account, we remove personally identifying information within a reasonable period, except where we're required to retain transaction records for accounting or legal purposes (typically limited to payment records, not your browsing or messaging history).

8. Your rights

You can review and update your name and contact details any time from your profile settings. To request a copy of your data or full account deletion, contact us as described in Section 12 — we'll act on a deletion request within a reasonable timeframe, subject to the retention exceptions above.

9. Security

Passwords are hashed, never stored in plain text. Sessions use secure, randomly generated tokens. Ownership documents and identity-sensitive uploads sit in folders that are not web-accessible by direct URL. We rate-limit login attempts and OTP requests to reduce abuse. No system is perfectly secure, and we can't guarantee absolute security, but we treat verification documents and account credentials as our highest-sensitivity data.

10. Children's privacy

Bechdoo is not intended for use by anyone under 18. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us and we'll investigate and remove it.

11. Changes to this policy

We may update this policy as the platform evolves. Meaningful changes will be reflected with an updated "Last updated" date at the top of this page.

12. Contact us

For privacy questions, requests, or concerns, reach out from your account dashboard, or write to the support contact listed there.