Last updated 13 October 2026
1. What we collect
- From Google when you sign in: your name, email address, profile photo and Google account ID. We never see your Google password.
- Profile details you add: mobile number (optional), city and state.
- What you post: listings (title, description, price, specifications, city), photos, chat messages, price offers, saved listings and reports. Photos are re-processed when uploaded, which removes location and camera data embedded in them.
- Your location, only if you allow it: your browser's location is converted to the nearest city on your device. The coordinates are never sent to us; only the city name is stored, in a cookie on your device.
- Technical data: your IP address and basic request details, used to protect the site from abuse (rate limiting) and kept briefly in security logs.
- Cookies and device storage: a sign-in cookie, a short-lived cookie during Google sign-in, your chosen city, and your recent searches (stored only in your browser). We use no advertising or tracking cookies.
2. Why we use it
- To run your account and show your listings to buyers.
- To let buyers and sellers chat and make offers.
- To keep the platform safe: preventing spam, scams and abuse, and acting on reports.
- To meet legal obligations, including responding to lawful requests from authorities.
We process your data on the basis of the consent you give when you create an account, and for the legitimate uses the Act allows (such as safety and legal compliance). We do not sell your data or use it for advertising.
3. Who can see what
- Everyone: your name, profile photo, city, "member since" date and your live listings.
- The person you're chatting with: the messages and offers in that chat.
- Never shown to other users: your email address and mobile number. A seller never learns who reported their listing.
- Moderators see reported listings and the reports about them.
4. Service providers
We use Cloudflare to host the site and store data, photos and messages, and Google for sign-in. They process data on our behalf under their own security and privacy commitments. Cloudflare operates a global network, so your data may be processed in data centres outside India.
5. How long we keep it
We keep your data while your account exists. When you delete your account, we delete your profile, listings, photos, chats, offers, saved listings and sessions straight away. Database backups that may still contain it are overwritten within 30 days. Security logs are kept only briefly.
6. Your rights
Under the DPDP Act, 2023 you can:
- ask for a summary of the personal data we hold about you;
- correct or update it (most of it directly in your Account);
- have it erased, by deleting your account from Account → Delete account. Deleting your account also withdraws your consent;
- nominate someone to exercise these rights if you die or become incapable;
- raise a grievance with us (see Grievance redressal), and, if you're not satisfied, complain to the Data Protection Board of India.
Write to grievance@secondhandlistings.in for any request we can't handle through the app. We respond within the time limits set by law.
7. Children
Second Hand Listings is only for people aged 18 or over. We don't knowingly collect data from children. If you believe a child has created an account, tell us and we'll remove it.
8. Security
Connections are encrypted, sign-in sessions are stored only in hashed form, uploads are checked and re-encoded, and access to data is limited by account and role. No system is perfectly secure; if a breach affects your data, we'll inform you and the Data Protection Board as the law requires.
9. Changes
If we change this policy in a way that matters, we'll show a notice on the site before the change takes effect.