01Who is responsible#
The person below decides what is collected and why — a data fiduciary, in the language of the Digital Personal Data Protection Act, 2023 — and is also the person who answers questions about it.
- Operated by
- Seelam Mahendhar Goud
- Trading as
- listup
- Address
- H No 14-1-90/248/A, Gayathri Nagar, Allapur Road, Borabanda, Balanagar, Medchal-Malkajgiri, Telangana 500018, India
- contact.galvam@gmail.com
- Phone
- +91 91005 67616
- Grievance officer
- Seelam Mahendhar Goud
- Support hours
- Monday to Friday, 10:00–18:00 IST
02What is collected, and why#
- Your email address and phone number, entered on the payment provider's checkout and passed to us with the payment. Used to send your receipt and to contact you about your own listing. Nothing else.
- Your listing — the link you submitted, the category you chose and the total you paid. All of this is public; that is the product you are buying.
- Payment records — the provider's payment and order identifiers, and the amount. Not your card number, which we never receive.
- Click counts — when a listing is clicked. Your IP address and browser details are put through a one-way hash and only the result is stored, so repeat clicks are not double-counted. The original values are never written down and cannot be recovered from what is.
There are no accounts, no login and no password. There is no profile of you to build, and nothing here is used to identify you across other sites.
03On what basis#
Your contact details are processed because you gave them in order to buy something, and they are used only for that purchase — the receipt, and anything that needs saying about your listing. Payment records are kept because the law requires a record of money received. Click counts are kept in a form that is not personal data once hashed.
04Who else sees it#
Only the services needed to run the site, and only what each needs:
- Our payment provider — takes the payment. They are a payment aggregator authorised by the Reserve Bank of India. Your card and bank details are entered on their hosted checkout and go to them, never to us. The provider is named on the checkout itself, before you enter anything.
- Vercel — runs the site.
- Supabase — stores the database and the listing images.
Your data is never sold, rented or shared for anyone else's purposes. There is no advertising on this site and no third-party tracking or analytics.
05How long it is kept#
- Contact details: kept while your listing is on the board, and deleted on request at any time. Deleting them does not remove your listing or return your payment.
- Payment records: kept for eight years, which is the period Indian tax law requires records of income to be retained. These cannot be deleted on request.
- Listings: public for as long as the site operates, or until removed on request.
- Hashed click data: kept as aggregate counts. The per-click rows are folded into daily totals and the rows discarded.
06Your rights#
Under the Digital Personal Data Protection Act, 2023 you may ask for any of the following, and there is no charge for any of them:
- To know what personal data is held about you, and who it has been shared with.
- To have it corrected if it is wrong, or completed if it is incomplete.
- To have it erased, except where the law requires it to be kept.
- To withdraw consent for anything not required to keep a record of your payment.
- To nominate someone to exercise these rights if you die or become incapacitated.
- To have your listing removed, whether or not you are the person who paid for it.
Write to the address above. Requests are acknowledged within 48 hours and answered within one month.
07If you are not satisfied#
Complain to the grievance officer named above first. If that does not resolve it, you may complain to the Data Protection Board of India, which is the authority established under the Act to hear such complaints.
08Children#
This site is not intended for anyone under 18, and payment requires a bank card or account. Personal data is not knowingly collected from children. If you believe a child's data is held here, write to the address above and it will be deleted.
09Security#
Card details are never collected, transmitted or stored by this site — all card entry happens on the payment provider's own checkout. Traffic is encrypted in transit. Access to the database is limited to the operator.
10Changes#
If this policy changes, the new version appears here. Anything materially different about what is collected or why will be said plainly rather than folded quietly into the text.