Privacy Policy

DukanCloude (“DukanCloude”, “we”, “us”) runs an online marketplace at dukancloude.com. Buyers use it to find local shops, services, jobs and bookings, and sellers use it to list them. The marketplace is organised into sector-wise “Cloudes” such as Shopping, Food, Booking, Property, Education and Clinic & Doctors.

This policy explains what personal data we collect when you use our website and services, why we collect it, who we share it with and the choices you have. It is written to meet the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and the rules made under them.

Information you give us

• Account details: your name, email address, mobile number, city, pincode, profile photo and password. The password is stored only as a hash.
• Verification: the one-time passwords (OTPs) we send to your email or phone. We keep them as hashes and they expire within minutes.
• Shops and listings: shop name, photos, products, services, prices, business hours and the shop location you choose to publish.
• Orders and bookings: the items you buy, delivery address, pickup or arrival time, and booking details such as dates, guests, rooms, trips or rental periods.
• Job applications: your resume, contact details, experience and anything else you send to a recruiter.
• Finance applications: the KYC and income documents a lender or advisor asks for, such as PAN, Aadhaar, bank statements, salary slips and ITR.
• Health information: appointment details and any health information you choose to share with a clinic or doctor.
• Communications: chats with sellers or buyers, reviews, ratings, reports and messages you send to our support team.

Information collected automatically

• Device and usage data: IP address, browser type, device, pages viewed and actions taken. We use it to keep the service secure and working well.
• Location: the city or area you pick in the location picker, so we can show nearby results. We only use your precise device location if you allow it in your browser.
• Cookies and local storage: used to keep you signed in and to remember your bucket list, theme and location. See section 6.

Payment information

Online payments are handled by RBI-authorised payment gateway partners. We receive the transaction reference, amount, payment method and status. We never receive or store your full card number, CVV, net-banking password or UPI PIN.

• To create your account, verify your email or phone with an OTP, and keep you signed in.
• To publish your shop, products, services and jobs, and show them to buyers nearby.
• To process orders, bookings, payments, refunds and cancellations, and to send you updates about them.
• To pass your job or finance application to the recruiter or agency you applied to.
• To power chat between buyers and sellers, reviews, ratings and notifications.
• To prevent fraud, spam and abuse. This includes enforcing our Cash on Delivery no-show rules and acting on reports against sellers.
• To answer your support requests and handle complaints.
• To understand how DukanCloude is used, so we can fix problems and improve features.
• To send offers or updates, but only if you have agreed to receive them. You can opt out at any time.
• To meet our legal, tax and regulatory obligations.

We share only the data each party needs to do its part:

If DukanCloude is merged with or acquired by another company, your data may move to the new owner. It will stay protected by this policy.

Documents uploaded for a Financing Cloude application (PAN, Aadhaar, bank statements and similar) and health information shared through the Clinic & Doctors Cloude are treated as sensitive. For this data:

• It is shown only to the agency or clinic you chose, and to authorised DukanCloude staff when needed for support or fraud checks.
• It is never used for advertising or profiling.
• We check the file type and size when you upload it. We store it only for as long as your application needs it or the law requires.

Most browsers let you block or delete cookies. If you block essential cookies, you may not be able to sign in or place orders.

• Account data: kept while your account is active. It is deleted within 30 days of an account deletion request, unless we need to keep it for a reason listed below.
• Orders, payments and invoices: kept for up to 8 years, as Indian tax and accounting laws require.
• Job and finance applications: kept while the application is open. After that, we keep them only as long as the law or an ongoing dispute requires.
• Chats and support tickets: kept for up to 2 years, so we can resolve disputes and prevent fraud.
• Security logs: kept for up to 180 days, as required by CERT-In directions.

• All traffic between your device and DukanCloude is encrypted with HTTPS (TLS).
• Passwords and OTPs are stored as salted one-way hashes, never as plain text.
• Only authorised staff can access personal data, and only when their work needs it.
• Payments go through PCI-DSS compliant, RBI-authorised gateways.
• We check uploads and limit their size and file type.

No system is 100% secure. If a data breach affects you, we will inform you and the Data Protection Board of India as the law requires.

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Access: get a summary of the personal data we hold about you and how we use it.
• Correction: fix details that are wrong or incomplete.
• Erasure: ask us to delete your account and personal data.
• Withdraw consent: stop optional uses such as marketing at any time.
• Grievance redressal: complain to our Grievance Officer. If you are not satisfied, you can go to the Data Protection Board of India.
• Nominate: name someone to exercise these rights for you if you die or become incapacitated.

To use any of these rights, email support@dukancloude.com from your registered email address. We reply within 30 days.

You must be 18 or older to create an account. We do not knowingly collect personal data from children without verifiable consent from a parent or guardian. If you think a child has given us personal data, contact us and we will delete it.

We may update this policy when our services or the law change. The “Last updated” date at the top shows the latest version. If a change is significant, we will tell you by email or with a notice on the site before it takes effect. Please also read our Terms & Conditions.

For privacy questions or complaints, contact our Grievance Officer, appointed under the IT Rules, 2021 and the DPDP Act, 2023:

We acknowledge complaints within 24 hours and resolve them within 15 days.