Privacy Policy

The Services are operated by [REPLACE: Legal Entity Name], [REPLACE: registered address]. For any privacy question or request you can reach us at privacy@scrapsale.org. Our Grievance Officer details are in Section 13.

We collect only what we need to run a doorstep pickup safely and reliably:

• Account information — your mobile phone number (used to sign in via one-time password), and your name. Sign-in is OTP-based; we do not store passwords.
• Pickup address & location — the address you save for a pickup and, only if you choose “Use my location”, your device’s GPS coordinates to drop a map pin and check service availability. You can always type the address manually.
• Pickup photos & videos — images/short videos of the scrap that you choose to capture or attach, so the pickup partner arrives prepared.
• Order & transaction data — items, weights, amounts, payment method (cash / UPI), receipts, ratings, and order history.
• Partner data (ScrapSale Partner app only) — KYC verification documents (e.g. ID, driving licence), vehicle number, UPI ID for payouts, online/offline status, and approximate location while you are online with an active job.
• Device & technical data — device model, OS version, app version, a push-notification token, and basic diagnostics/crash logs.

We do not use advertising identifiers, and we do not sell your personal information.

Each permission is requested only at the moment you use the related feature, and you can decline or revoke it anytime in your device settings (some features then won’t work).

• Camera — only when you tap to photograph/record your scrap (customer) or to scan a pickup QR code and capture KYC documents (partner). Never used in the background.
• Microphone — only while you are actively recording a video of your scrap, so the clip has sound. Never recorded in the background.
• Photos / Media — only when you choose to attach an existing photo or video, or to save a pickup bill to your device. We access only the items you select.
• Location (while using the app) — to pin your pickup address and confirm it’s inside our service area (customer), or to navigate to accepted jobs (partner).
• Background location (ScrapSale Partner app only) — used only while a partner is set to “Online” with an accepted pickup, to route jobs and keep navigation working if the app is minimised. Going “Offline” stops it immediately. The customer app never uses background location.
• Notifications — to send order and job updates.
• Biometric (Face ID / fingerprint) — only to lock/unlock the app; the biometric data stays on your device and is never sent to us.

• To create and manage your account and authenticate sign-in.
• To schedule pickups, match you with a partner, and run the live weighing flow.
• To process payments/payouts and generate receipts.
• To send order/job status notifications and important service messages.
• To verify partner identity (KYC) and keep the marketplace safe.
• To provide support, prevent fraud/abuse, and meet legal obligations.

We process your data on the basis of your consent (given when you use a feature/permission) and to perform the pickup service you request. You may withdraw consent at any time by revoking a permission or deleting your account (Section 9).

To complete a pickup, we share the minimum needed: the assigned partner sees the customer’s name, pickup address, and a contact method for that active order; the customer sees the partner’s name, vehicle, and rating. This information is shared only for the duration of the order.

We use a small set of trusted processors, bound to protect your data:

• Supabase — database, authentication, and secure backend hosting.
• Cloudflare — storage and delivery (CDN) of your uploaded pickup/KYC images and videos.
• Firebase Cloud Messaging (Google) — push notifications.
• Google Maps Platform — maps, geocoding, and address lookup.

We may also disclose information if required by law, or to protect the rights, safety, and security of our users and the Services.

We keep your data only as long as needed to provide the Services and to meet legal, tax, and accounting requirements. Order and invoice records may be retained as required by applicable law; other personal data is deleted or anonymised when no longer needed or upon account deletion, subject to those legal retention requirements.

You can delete your account and personal data at any time, directly in the app: Settings → Delete account. This permanently removes your profile, saved addresses, uploaded media, and order history (except records we must retain by law). You can also request deletion by emailing privacy@scrapsale.org and we will action it within 30 days.

Data is stored on Supabase with row-level security so users can only access their own records. All network traffic uses TLS 1.2+. App secrets are compiled into the app binary rather than shipped as plain files, session tokens are kept in secure device storage, and uploaded media is served over Cloudflare with restricted access. No method of transmission or storage is 100% secure, but we work to protect your data using industry-standard measures.

The Services are intended for users aged 18 and over and are not directed to children. We do not knowingly collect personal data from children under 13. If you believe a child has provided us data, contact us and we will delete it.

Subject to applicable law (including India’s Digital Personal Data Protection Act, 2023), you have the right to access, correct, and delete your personal data, to withdraw consent, and to nominate a representative. To exercise any right, email privacy@scrapsale.org.

In accordance with the DPDP Act, 2023 and applicable IT Rules, you may contact our Grievance Officer for any data concern:

[REPLACE: Grievance Officer Name]
Email: privacy@scrapsale.org
Address: [REPLACE: registered address]

We may update this Policy from time to time. Material changes will be notified in the app or on this page, and the “Last updated” date above will change.

Questions? Email support@scrapsale.org or reach us on WhatsApp via the in-app “Contact Support” screen.