Privacy Policy — Marketplace

DRAFT FOR OWNER/LEGAL REVIEW — 2026-09-29-draft-1. Not activated.

About this notice

Relvo Projects Private Limited operates Relvo Market. Privacy contact: help@relvomarket.com. This draft explains the current Android marketplace and its website counterpart. Relvo Vehicles presents Relvo inventory; Exchange Vehicles contains customer listings. Read Marketplace Terms & Safety separately for listing and transaction rules.

Sign-in and account

We use your mobile number and Firebase Phone Authentication to identify your customer account. We keep a customer identifier, account and activity timestamps, and authentication-related account records. Google processes verification information, including phone numbers, for authentication and abuse prevention. Never share an OTP with Relvo support. Logout ends the app session; it does not delete your account or saved records.

Your marketplace profile

You may save a display name, a selected profile photo and an optional Office Name. Your public seller identity can show these fields to other marketplace users. Office Name is a self-provided label, not proof of business verification. The app uses your authenticated account to allow changes only to your own profile. Legacy marketplace email values may remain in existing private records; Office Name does not change your authentication identity.

Location choices

Your confirmed browsing location is stored locally on your device or browser and used to order the bounded Exchange results near that area. Existing account records may also contain a previously saved browsing choice. It is not automatically made your public seller location. Location search sends your entered place to the Google Places service. If you allow foreground location, the app can resolve an initial area or an area you explicitly request with Current Location. It does not request background location or continuously track your movements. You can refuse permission and choose an Indian location manually. A manual browsing choice is not silently replaced by GPS.

Listing information and photos

We store your listing fields, selected photos, confirmed listing location, linked Brand/Model references, suggestions, status and relevant revision/audit information. The Android picker gives access to photos you choose, not unrestricted access to your library. Optimized images and profile-image versions are held in protected media storage and served through controlled endpoints. Do not upload identity documents, bank information or photos of people without appropriate permission. Visible text or location information embedded in a photo may be seen by viewers.

Public and private information

Active eligible Exchange listings can expose their public vehicle details, price, photos, listing location and seller profile. Listing locations can include coordinates used for map links. Confirm an appropriate public meeting area before submitting; do not assume a home address is private once included in a listing or photo. Unpublished drafts, moderation explanations and private account metadata are not part of the public listing response. Authorized Relvo operators can access records necessary for moderation and support. Public information can be copied or shared by viewers, so removal from Relvo cannot guarantee removal of their copies.

Contact, favorites and referrals

Favorites are saved against your account to show your selected vehicles; your favorite list is not a public seller field. When an authenticated customer requests Call or WhatsApp on an eligible Exchange listing, the service resolves the seller’s current contact number and passes it to the chosen external app. Relvo inventory contacts use the assigned staff member or configured fallback. Referral links and supported install-referrer data can establish a persistent first staff assignment, with audited Admin reassignment. Referral click, attributed-registration and current-customer counts support referral management. Logout does not change that ownership. We do not read call audio, your SMS inbox, contact list or WhatsApp conversations.

Security, analytics and notifications

Firebase App Check and Play Integrity verify app/device requests. Our providers process technical request information, including IP/device/network information, to operate and protect services. The app records supported foreground session and vehicle/contact/share interactions with account/session/event identifiers, app/OS version and timestamps. Firebase Cloud Messaging device-token records include notification state and app details; notification permission controls display, not all token processing. We use bounded rate limits and audit records for abuse prevention and administration. We do not use advertising-ID matching to assign referrals.

Providers and external services

Google/Firebase provides authentication, data, messaging, security and API infrastructure. Vercel hosts the existing website. Google Places processes typed location searches and selected-place requests. Browser location is optional and requested only when you choose Current Location. Dialer, WhatsApp, Maps and share destinations operate under their own terms when you choose them. The present Exchange flow does not process or guarantee buyer-to-seller payments or offer internal chat. No advertising SDK or sale of customer data is implemented in this app.

Retention and deletion

Profiles, favorites, listings, suggestions, referral and moderation/audit records have no general automatic account-age deletion deadline in the current marketplace. Deactivating a listing or logging out is not deletion. Activity-event expiry is configured for 90 days and rate-limit expiry for one day; database cleanup is asynchronous. Generated media, replaced versions, backups and provider security logs may remain until their applicable cleanup or verified deletion process completes. The existing seven-day Relvo stock media lifecycle is not a promise that all Exchange/profile records are erased after seven days.

Your requests and choices

You can edit your public profile, choose photos/location, change favorites and manage supported listing states. Email help@relvomarket.com for access, correction, a privacy concern or account deletion; include the registered number to allow ownership verification, never an OTP. A marketplace deletion review should identify associated profile/photos, listings, favorites, suggestions and attribution/audit records as well as Auth, events and device records. Support must confirm scope, any specific lawful retention need and completion; this app does not promise an instant automated purge. Separate canonical CRM vehicle/purchase/sale records are not customer marketplace account records. Provider logs and support correspondence are separate. Review this notice when material changes are announced.

Website contact and security

Public website browsing does not require sign-in. Call and WhatsApp are available through the Android app; the website does not retrieve protected seller/staff phone numbers. Website view preferences, recent searches and confirmed browsing location use local browser storage. Authentication uses the same Firebase customer identity. App Check protects authenticated APIs; secure web sign-in remains unavailable until web attestation is configured. No new legal-consent contract is activated by this draft.