Privacy Policy

1. Introduction

Sagazo ("we," "us," or "our") is a hyperlocal neighbourhood commerce and community platform operated by ProperEleven. We serve Tier-2 Indian cities, starting with Vijayawada, combining a geo-locked social feed, local grocery marketplace, and peer-to-peer task delivery within your local area.

This Privacy Policy describes how we collect, use, store, and share your personal data when you use our mobile application, website, and related services (collectively, the "Platform"). By using Sagazo, you consent to the practices described in this policy.

2. Information We Collect

2.1 Account Information

• Phone number (used for authentication and OTP verification)
• Full name and username
• Profile photo

2.2 Location Data

• Selected area or neighbourhood (e.g., "Patamata," "Benz Circle")
• City and state
• We do not store your exact GPS coordinates. We use your selected area to filter content relevant to your neighbourhood.

2.3 Content You Create

• Posts, comments, and reactions
• Messages in direct and circle conversations
• Photos and media uploads

2.4 Commerce Data

• Orders and order history
• Delivery addresses
• Cart data

2.5 Social Connections

• Friendships and friend requests
• Circle memberships
• Blocked users

2.6 Technical Data

• Session cookies (for authentication)
• localStorage data (area preference, cart state, open chat windows)

2.7 Data from Third Parties

• Google Sign-In: When you sign in with Google, we receive your name and email address from Google. We use this solely for account creation and identification.

3. How We Use Your Information

We use your information to:

• Provide our services — create and manage your account, enable posting, messaging, and commerce features
• Deliver geo-filtered content — show you posts, shops, tasks, and circles relevant to your selected neighbourhood
• Facilitate commerce — process orders, manage delivery addresses, and connect buyers with local sellers
• Enable messaging — power direct and circle conversations, including real-time chat and typing indicators
• Ensure safety and moderation — detect and prevent abuse, enforce community guidelines, process reports, and filter banned keywords
• Send notifications — inform you about activity relevant to you, such as messages, orders, task updates, and friend requests
• Improve the platform — understand usage patterns to enhance features and fix issues

4. Legal Basis for Processing

Under the Digital Personal Data Protection (DPDP) Act, 2023, we process your data on the following grounds:

• Consent: We obtain your explicit consent before processing personal data. You consent when you create an account, select your area, or opt in to specific features. You may withdraw consent at any time.
• Legitimate use: We process data that you voluntarily provide for the purpose of delivering the services you requested, such as displaying your posts to your neighbours or fulfilling your orders.
• Legal obligations: We may process and retain data where required by applicable Indian laws, including tax and financial regulations.

5. Your Rights Under the DPDP Act

As a Data Principal under the DPDP Act, 2023, you have the following rights:

6. Data Retention

7. Data Sharing & Third Parties

We may share data with:

• Cloudflare R2: We use Cloudflare R2 for secure file storage (profile photos, media uploads). Cloudflare processes data under their privacy terms.
• Google OAuth: When you choose to sign in with Google, we receive your name and email from Google.
• Google Analytics: We may use Google Analytics to understand platform usage patterns. This collects anonymized data such as pages visited, session duration, and device type. No personally identifiable information is shared.
• Law enforcement: We may disclose your data when required by law, regulation, court order, or governmental request.

8. Data Security

We implement appropriate technical and organizational measures to protect your data:

• All data is encrypted in transit using TLS/HTTPS
• Passwords are hashed using industry-standard algorithms and are never stored in plaintext
• Access to personal data is restricted to authorized personnel on a need-to-know basis
• Authentication tokens have expiry periods and are automatically invalidated
• We conduct regular security reviews to identify and address vulnerabilities

9. Children's Policy

Sagazo is intended for users who are 18 years of age or older. We do not knowingly collect personal data from anyone under 18. If we become aware that we have collected data from a minor, we will take immediate steps to delete that data and terminate the associated account. If you believe a minor has provided us with personal data, please contact us at privacy@sagazo.com.

10. Cookies & Local Storage

We use cookies and browser local storage for platform functionality. We may also use third-party analytics services (such as Google Analytics) to understand how our platform is used and to improve your experience. These services may collect anonymized usage data.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make significant changes, we will notify you through the Platform (via an in-app notification or a prominent notice on our website). We encourage you to review this policy periodically. The "Last updated" date at the top indicates when the policy was most recently revised.

12. Grievance Redressal

In accordance with the DPDP Act, 2023, we have appointed a Grievance Officer to address your concerns:

If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India as established under the DPDP Act, 2023.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: