Privacy Policy

This explains what personal information Xigmapro Software Pvt Ltd (“Rathika”, “we”) collects through https://rathika.in, why, who sees it, and your choices. It is written to meet the requirements of India's Digital Personal Data Protection Act, 2023 and the IT Act, 2000.

1. What we collect

• Account details: name, email, mobile number, password (stored only as a one-way hash), and your language and city.
• What you post: listings, photos, descriptions, offers, messages, enquiries, reviews, test-drive and inspection requests, auction bids.
• Documents you upload for review: identity documents, business documents, vehicle papers (RC, insurance) and, for services, the papers needed for your request. These are private (see section 5).
• Your voice, if you use voice listing: the recording is sent for transcription and is not stored by us; the text it produces is kept as part of your draft.
• Business and billing details if you advertise: business name, GSTIN, billing address, and payment records (card and UPI details go to our payment provider, never to us).
• Technical data: IP address, browser type and request logs, kept for security and to fix problems.
• Messages you send us through the Contact page, and your privacy requests.

2. Why we use it

To run your account and the marketplace; to review listings and documents; to put buyers and sellers in touch; to run auctions and services you ask for; to send you notifications you have not switched off; to prevent fraud and abuse; to keep legally required records; and to improve the site. We send marketing email only if you agreed, and you can change that at any time in your notification settings.

3. Who sees it

• Other users see what you choose to publish: your listing, your public name as shown (individuals appear by first name and last initial), and the reviews you receive. Your email and mobile number are shared with another user only in the course of an enquiry, offer, test drive or sale you take part in. In auctions, bidders see only a number (“Bidder 3”).
• Our staff see what they need to do their job (for example, reviewers see documents sent for review). Staff actions on sensitive data are logged.
• Service providers that process data for us: our email sender (Inboxili), our cloud database and file storage hosts, OpenAI (for the AI features you use: your listing text, photos you ask us to analyse, or your voice for transcription), our payment provider Dodo Payments (for advertising purchases only), and Google (if a page shows a Google Map, your browser contacts Google).
• Google reCAPTCHA protects our sign-up, sign-in, password-reset, resend-code and contact forms from automated abuse. While one of those forms is on screen, your browser loads reCAPTCHA from Google, and Google receives information such as your IP address, your browser and device details, and how you use the box, and may set its own cookies. Google's Privacy Policy and Terms of Service apply to what Google does with it. We receive only a yes or no.
• Authorities, where the law requires it. We do not sell your personal information.

4. Cookies

We use only the cookies the site needs to work: a session cookie that keeps you signed in, a security cookie that protects forms, and a short-lived cookie during sign-up. We do not use advertising or analytics cookies. Counting how many people see a sponsored placement does not use cookies. If you view a page with a Google Map, or use a form protected by reCAPTCHA, Google may set its own cookies.

5. Keeping it safe

Passwords are hashed. Sessions and sign-in codes are stored in a form that cannot be reversed. Identity and vehicle documents are kept private and are opened only through short-lived links tied to the person who is allowed to see them. Uploaded images are re-processed to remove hidden location data. No system is perfectly secure, so please use a strong, unique password.

6. How long we keep it

We keep information for as long as we need it to provide the service and to meet legal, accounting and dispute-resolution obligations, and then delete or anonymise it. Some records (for example sale records, invoices and audit logs) must be kept even after an account is closed, with your identity details removed where we can.

7. Your rights

You can ask to see, correct or delete your personal information, to withdraw consent, or to nominate someone to act for you if you cannot. You can make a request from your dashboard (Dashboard → Your data) or on the Contact page. We will confirm your identity first, and aim to respond within 30 days. When you ask us to delete your account we remove your identity details and private documents; records we must keep stay in anonymised form.

8. Children

Rathika is for people aged 18 and over. We do not knowingly collect information from children. If you believe we have, tell us and we will delete it.

9. Complaints

Contact our grievance officer: our grievance officer, sales@xigmapro.com. We aim to acknowledge within 48 hours and resolve within 15 days. You may also approach the Data Protection Board of India once it is in operation.

10. Changes

We will post changes here and tell you about material ones. The version you agreed to at sign-up is recorded.

Address: Shaila Tower, Salt Lake, Sector V, Kolkata - 700091