GRAHAC

Privacy Policy

Effective date: April 22, 2026

Grahac ("Grahac", "we", "us", or "our") operates the Grahac mobile application and the website grahac.com (together, the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the Service, you agree to this policy.

1. Information we collect

a. Information you provide

  • Phone number — used for one-time password (OTP) sign-in and account identification.
  • Name and email address — optional profile details.
  • Supplier business details — if you register as a supplier: business name, categories, and product listings (name, description, price, images, unit).
  • Search content — text queries you enter and images you upload for product discovery.

b. Permissions requested by the mobile app

The Android app requests the following permissions. Each is used only for the specific purpose below, and most can be declined at prompt time without losing core functionality.

  • Camera (android.permission.CAMERA) — used only when you choose to take a photo to perform an image-based product search. Photos are captured on-device and uploaded only for the search request you initiate. We do not access the camera in the background.
  • Photos and media (android.permission.READ_EXTERNAL_STORAGE, READ_MEDIA_IMAGES) — used only when you pick an existing image from your gallery to perform an image-based product search.
  • Location (android.permission.ACCESS_FINE_LOCATION, ACCESS_COARSE_LOCATION) — used to rank and display suppliers and products near you. You can deny this permission; the app falls back to a default region.
  • Microphone (android.permission.RECORD_AUDIO) — declared as a dependency of the image-picker library. Grahac does not record, store, or transmit audio. This permission will not be used unless and until voice-search is explicitly introduced in a future release and separately disclosed.

c. Automatically collected

  • Device and app data — device model, operating system version, app version, crash logs, and general diagnostic information.
  • Usage data — pages and product listings viewed, search queries performed, and timestamps.
  • Authentication tokens — stored on your device to keep you signed in.

2. How we use information

  • To create and authenticate your account via phone OTP.
  • To run image and text product search, including transmitting your query and uploaded image to our backend for matching.
  • To show suppliers and products near your location when location permission is granted.
  • To let suppliers list products, and let buyers contact suppliers directly (e.g., via WhatsApp or phone, launched by your device).
  • To send transactional notifications (for example, order or product-related updates).
  • To secure the Service, prevent abuse, and comply with law.
  • To improve the Service through aggregated, de-identified analytics.

3. How we share information

We do not sell your personal information. We share information only as described below.

  • With suppliers you contact. If you initiate contact with a supplier, they may see your phone number and name.
  • With buyers for supplier listings. If you register as a supplier, your business name, products, product images, and contact details are visible to buyers on the marketplace.
  • Service providers. We use MSG91 to deliver SMS one-time passwords, and standard cloud infrastructure (including AWS) to host our backend and store data. These providers process data solely on our behalf.
  • App stores. Distribution through Google Play and Apple App Store is subject to their own privacy disclosures.
  • Legal, safety, and business transfers. We may disclose information when required by law, to protect rights or safety, or in connection with a merger, acquisition, or sale of assets.

4. Data retention

We keep account information for as long as your account is active. Search queries and uploaded images are retained only for as long as needed to deliver results and for a limited period for diagnostics and abuse prevention. You can request deletion at any time (see Section 6).

5. Security

We use industry-standard safeguards including encryption in transit (HTTPS/TLS), access controls, and secure credential storage. No method of transmission or storage is perfectly secure; we cannot guarantee absolute security.

6. Your rights and choices

  • Access and correction. You can view and edit your profile in the app or on the website.
  • Deletion. You can request account and associated-data deletion by emailing support@grahac.com. We will confirm and complete the deletion within 30 days, subject to any legal retention requirements.
  • Permission management. You can revoke Camera, Photos, or Location permissions at any time in your device settings. The relevant features in the app will stop until you re-enable them.
  • Marketing opt-out. We do not send marketing messages today. If that changes, you will be able to opt out.

7. Children's privacy

Grahac is a B2B marketplace intended for adults. We do not knowingly collect personal information from children under 13 (or the applicable minimum age in your jurisdiction). If you believe a child has provided us information, please contact us and we will delete it.

8. International users

Grahac is operated from India. If you use the Service from outside India, your information may be transferred to, processed, and stored in India and other countries where our service providers operate.

9. Changes to this policy

We may update this policy from time to time. We will post the updated version on this page and update the effective date. For material changes we will make reasonable efforts to notify you in the app or by email.

10. Contact us

Questions or requests about this policy? Email support@grahac.com.