Privacy policy

Part A — Privacy for customers

A1. What we collect

• Identity & contact — name, email, phone; Google account identifiers if you sign in.
• Enquiry details — city/pincode, category/equipment interest, dates or duration, notes, routing mode (direct vs broadcast), and related status history.
• Health-related data (optional / as provided) — prescription uploads, caregiver notes, or other health information you choose to share. This may be treated as sensitive personal data; we use it only to support the enquiry and matching described here.
• Delivery / area — pincode, locality labels, and (if you grant permission) approximate location used for distance sorting; see §4.
• Support messages — content you send via Contact us or in-app feedback.
• Technical data — IP address (for security, rate limiting, and abuse prevention), device/browser type, cookies or local storage identifiers, and anonymous session hashes for analytics.

A2. Why we use it (purposes)

• Create and manage enquiries; notify and match relevant suppliers.
• Send manage links, status updates, and service communications.
• Improve search, coverage, and product experience (including anonymous demand trends).
• Prevent fraud, spam, and abuse; secure accounts and APIs.
• Comply with law and respond to lawful requests.
• With your consent or other lawful basis, future features we clearly describe at collection.

A3. Who we share with

• Suppliers handling your enquiry — contact details and enquiry content needed to respond (and prescription/health notes when attached to that enquiry).
• Ops / Admin — to support matching, safety, and dispute triage.
• Processors — hosting, email, storage, geocoding, and auth providers under contracts requiring appropriate safeguards. Prefer India-aligned hosting in production.
• Authorities — when required by law or to protect vital interests / security.

Listed partners. Some shops shown on Sanjione have not joined yet — we display their business name and public phone so you can contact them. If you ask us to notify one of them, we email that shop a summary of the request (equipment, city, pincode, duration) without your name, phone, email, or notes. Your contact details reach them only if they create a Sanjione partner account and take up the enquiry.

We do not sell your personal data to advertisers or data brokers.

A4. Retention (customers)

• Enquiry and account records — kept while your account/enquiry relationship is active and for a reasonable period afterward for disputes, audits, and legal obligations (exact periods to be confirmed with counsel; prescription/document auto-delete targets may apply after enquiry closure where implemented).
• Support tickets — retained as needed to resolve your request and improve service.
• Anonymous analytics — see §5 (may be retained indefinitely without phone/email/name).

Part B — Privacy for vendors (suppliers)

B1. What we collect

• Business & contact — business name, contact person, email, phone, address/city, GST or other tax identifiers you provide, and application/onboarding responses.
• Credentials & compliance uploads — documents you voluntarily upload (e.g. licences); MD-42 is optional at launch and not required to list.
• Inventory & listings — SKUs, prices, stock, photos, coverage pincodes/zones, and related operational data.
• Lead activity — claims, status updates, messages/actions in the supplier dashboard, and rental/fulfilment records created on the Platform.
• Technical & security — login identifiers, IP for rate limits and audit, and security events (including step-up PIN where enabled for elevated roles).

B2. Why we use it

• Onboard, verify, and operate supplier accounts and listings.
• Route leads, enable claims, and support fulfilment workflows.
• Show public-facing listing information you choose to publish.
• Communicate about leads, product changes, and partner terms.
• Prevent abuse, enforce Terms of use, and meet legal obligations.

B3. Customer data you receive

When you claim or are assigned an enquiry, you receive customer personal data as an independent business handling that rental interest. You must use it only for that purpose, keep it secure, and not sell or misuse it. You are responsible for your own compliance as a Data Fiduciary / Data Processor as applicable to your handling of that data. See Terms of use Part B.

B4. What we may show publicly

Business name, listing details, coverage indicators, and other information you publish may appear on Sanjione for customers to discover you. Do not upload secrets or third-party personal data you are not allowed to publish.

B5. Retention (vendors)

Account, listing, and lead history are retained while you partner with us and for a reasonable period afterward for audits, disputes, and legal requirements. You may request correction or deletion via Contact us; we may retain limited records where law or legitimate disputes require it.

Location, analytics, security & your rights

4. Location, pincode & coverage planning

• User-provided sources only in product flows — browser geolocation after you grant permission (reversed to city/pincode), pincode entry, city picker, or enquiry address fields.
• Precise coordinates — when used for distance sorting or delivery pins, they are treated as internal/session or rental-fulfilment data and are not displayed as public GPS on browse pages. Long-term product analytics prefer city/pincode aggregates, not raw lat/lng.
• We may use city/pincode signals (including anonymous unique-visitor style hashes) to understand demand by city and prioritise vendor onboarding — not to sell location profiles.
• We do not use covert device fingerprinting or MAC addresses for this purpose. IP-based city databases are not part of the current product approach; any future use would require a policy update and counsel review.

Anonymous usage analytics

To improve search, city coverage, and supplier matching, we record anonymous interaction metadata — for example catalog filters, guided find choices, listing views, and enquiry category/city. These events use a one-way session hash, not your phone or email, and are not sold to third parties.

We retain this anonymous metadata indefinitely to understand long-term demand trends (for example seasonal shifts and city expansion). It contains no phone, email, or name, is not sold to third parties, and is separate from enquiry records you can ask us to delete.

6. Cookies & storage

We use cookies and browser storage as needed for sessions, security, preferences (e.g. dismissed banners), and anonymous analytics identifiers. You can clear site data in your browser; some features may stop working until you sign in or re-enter area details.

7. Security

We use TLS in transit, access controls, rate limiting, audit logging for sensitive actions, and India-aligned hosting when deployed to production. No method of transmission or storage is 100% secure; please use unique passwords/PIN practices where offered and protect magic links.

8. Children

The Platform is not directed at children under 18 acting alone. Caregivers may submit enquiries on behalf of patients; provide only data you are authorised to share.

9. Your rights (DPDP)

Subject to applicable law, you may request access, correction, erasure, and withdrawal of consent where processing is consent-based, and raise a grievance. Use Contact us and choose "Privacy & data request." We may need to verify your identity. Some data may be retained where required for legal claims, security, or anonymised analytics that no longer identify you.

10. International transfers

We aim to host production personal data on India-aligned infrastructure. If a processor outside India is used, we will take steps consistent with applicable law and update this policy as needed.

11. Changes

We may update this policy; the "Last updated" date will change. Material changes may be highlighted on the Platform or via email where appropriate.

12. Contact & data requests

Privacy questions, export, or deletion: Contact us. Related: Terms of use.