Privacy Policy

Last updated: May 5, 2026

This Privacy Policy describes how Bataoo collects, uses, and protects information when you use bataoo.com. It is drafted in accordance with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the rules notified thereunder.

This is an interim policy. A lawyer-reviewed version will replace this notice. Until then, we are conservative in our data collection: we collect the minimum necessary to operate the service.

Data we collect

· Search queries — for service operation and quality measurement. IP addresses are anonymised within 7 days. We do not associate queries with identity unless you have signed in.
· Pucho UGC contributions — questions and answers you post. Visible to other users.
· Account data — phone number (for OTP-based sign-in to Pucho only). We do not require an account for search.
· Server logs — standard HTTP logs (timestamp, URL, user-agent, response code). Retained 30 days then aggregated and discarded.
· Cookies / local storage — only essential cookies for session and preferences. No third-party analytics or advertising trackers in v0.

Purpose of processing

· To provide search results and answer cards
· To prevent abuse, spam, and unlawful use of the service
· To improve search quality and ranking
· To comply with legal obligations

Data we do NOT collect or sell

· We do not sell personal data to anyone, ever
· We do not share search queries with third parties
· We do not run third-party advertising trackers (no Google Analytics, no Meta Pixel)
· We do not train AI models on user data
· We do not collect biometric or financial data

Your rights as a Data Principal

Under the DPDP Act, 2023 you have the right to:

· Access the personal data we hold about you
· Correct or update your personal data
· Erase your personal data (subject to legal retention requirements)
· Withdraw consent for processing
· Nominate a person to exercise these rights on your behalf in case of incapacity
· File a grievance — see /grievance

To exercise any of these rights, email [email protected] with subject "DPDP request". We respond within 24 hours and resolve within 15 days.

Data retention

· Search query logs: 7 days (with IP anonymisation), then aggregated
· Server logs: 30 days then aggregated
· Pucho posts: indefinitely while account active; deleted within 15 days of account deletion request
· Account phone numbers: retained while account is active; deleted on closure

Children

Bataoo is not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, contact [email protected].

Cross-border transfer

Bataoo's primary infrastructure is in India and France (OVH). Personal data of Indian Data Principals may be processed across these locations. The Government of India has not, as of this writing, restricted any specific country for cross-border transfer; should it do so, our processing will conform.

Breach notification

In the event of a personal-data breach, we notify the Data Protection Board of India and affected Data Principals within 72 hours, as required by Section 8(6) of the DPDP Act, 2023.

Changes to this policy

We will publish updates here with a revised "Last updated" date. Substantive changes affecting Data Principal rights will be notified to logged-in users.

Contact

Privacy questions: [email protected]. Grievance: /grievance.