Privacy Policy.
At Gadinodi, we take your data seriously. This policy outlines how we handle, protect, and process your information across our marketplace.
Introduction
Welcome to Gadinodi Private Limited ("Gadinodi", "we", "us", or "our"). We operate an online vehicle marketplace in India and process personal data for account access, seller onboarding, marketplace listings, enquiries, support, fraud prevention, security, and legal compliance.
This website is intended for adults. We do not knowingly collect children's personal data, and seller accounts must not be created by minors. This notice should be read with our Terms of Service and any just-in-time notice shown during registration or seller onboarding.
Data Collection
We may collect, use, store and transfer the following kinds of personal data where needed for the marketplace:
Identity Data
Includes name, email address, phone number, city, seller profile details, account identifiers, and support messages.
Technical Data
Includes IP address, browser or device data, session information, security logs, listing images, and uploaded vehicle information.
Use of Data
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
- To register and authenticate buyer, seller, and admin accounts.
- To publish vehicle listings and support marketplace enquiries.
- To verify seller access, process support requests, and prevent misuse.
- To maintain security, logs, legal records, and regulatory compliance.
- To process privacy, erasure, correction, grievance, and nomination requests.
Data Security
We use access controls, password hashing, secure session cookies, request validation, role-based admin access, and operational safeguards to reduce unauthorised access. Vehicle and brand images may be processed through third-party image hosting providers, and hosting/database providers may process personal data on our behalf under applicable contracts and security obligations. We retain registration records for at least 180 days after account cancellation where required by intermediary obligations, and retain grievance, consent, security, and legal records as needed for dispute, audit, fraud-prevention, or statutory purposes.
Your Data Rights
You may request access, correction, erasure, consent withdrawal, nomination support, or privacy grievance review. We may ask for account identifiers such as your email or phone number to verify the request. Privacy grievances are targeted for response within 90 days, and IT Rules grievances are acknowledged within 24 hours and targeted for resolution within 15 days. If a data breach affects your personal data, we will use the contact details available to us to notify affected users and make required regulatory reports.
Questions & Contact
If you have any questions about this privacy policy or our privacy practices, please contact our Legal Compliance team or submit a privacy request above: