Privacy policy

1. Who we are

Datbot Technologies, a partnership firm at First Floor, 191, OJ Mansion, Santhi Nagar, Alagapuram Periya Pudur, Salem 636016, Tamil Nadu, India, operates Datbot Market. Under the Digital Personal Data Protection Act, 2023, we are the Data Fiduciary for personal data processed through the Service.

2. What we collect

When you sign in. Your name, email address, and an identifier from the sign-in provider. We do not receive or store your password.

When you claim or register a company. The company's name, registered identifier, address and website; and a contact person's name, email address and telephone number.

When you use the Service. Pages viewed, searches made, and technical data such as browser type and time of access. We record actions taken on company records — who submitted what, and who approved it — as an audit trail.

When you contact us. Whatever you choose to tell us.

When you ask to be introduced to a company. Your name, work email address, organisation, role or title if you give one, country, the purpose you select, and what you write. Submitting the form lets us review the request and reply to you; nothing in it is sent to the company, and your details are not shared with anyone unless you agree first.

Anonymous usage measurement. On the public pages we use Umami, a cookieless analytics tool, to count page views. Each counted view carries the page address and the page title — on a company page the title is that company's name and city — the page you arrived from, an approximate location the tool works out from your network address (your country, and often your region and city), and your browser, operating system, device type, screen size and language. It never carries search text, form content or anything else you type. Umami also counts directory search outcomes together with the rough length of the search term, which filters were used, presses of the claim button, and — as bare counts carrying nothing else — how often the introduction request form was shown and how often one was successfully submitted. It sets no cookies, records no session replays, builds no advertising profiles and does not follow you across other websites. It is switched off entirely for browsers that send a Do Not Track or Global Privacy Control signal, runs only on public pages — never on signed-in pages such as your dashboard or capability workspace — and is not linked to your account. We do not receive or store your IP address from it, and the measurement data is deleted by our analytics provider after six months at most.

3. Why we process it

• To operate the Service and show company information to buyers.
• To verify that a person claiming a company is authorised to represent it.
• To introduce buyers and suppliers where both have consented.
• To keep a record of who changed what, so published information can be traced to a source.
• To detect and prevent misuse, including automated extraction.
• To comply with law.

4. What is public and what is not

Public. A company's name, registered identifier, location, website and description, once published.

Never public. Contact person names, email addresses and telephone numbers. These are shown only to the company's own authorised representatives, to us, and — with consent — to a specific buyer at the point of an introduction.

We do not publish contact details on any page reachable without signing in.

5. Who we share it with

We do not sell personal data.

We share it with: the other party to an introduction, where both parties have consented; service providers who host and operate the Service on our behalf, bound to process it only on our instructions; and authorities, where the law requires it.

Umami Software, Inc. (Umami Cloud) processes the anonymous usage measurement described in section 2 on our behalf. It receives no name, no email address, no company text and no message content, and cannot identify you.

6. Where it is stored

Some personal data collected in India is stored and processed outside India. The Digital Personal Data Protection Act, 2023 permits this except where the Central Government restricts transfer to a particular country. No such restriction currently applies to where we store data.

7. How long we keep it

• Company profiles and the information in them — kept indefinitely. We do not delete company records — no part of this system is able to — so a listing we take down stops being public but the record of it is kept. The removal route is below.
• Audit records — who submitted, changed or approved a company record — for at least seven years from the event. These outlive the listing because they are what makes a published record traceable to its source.
• Sign-in details — kept for as long as the account exists. There is no way to close an account here, and nothing removes the name and email address attached to one: what we hold is what your sign-in provider last told us, refreshed each time you sign in.
• Correspondence with us — when you write to us through the contact form, your name, email address and message are stored with it and kept until they are removed — at your request, or by us once they are no longer needed to answer you. Nothing here expires on a timer, so we publish no period for it. Removing them leaves the record that a message arrived and what was done about it.
• Introduction requests — when you ask to be introduced to a company, your name, email address, organisation, role and message are stored with the request and kept until they are removed — at your request, or by us once they are no longer needed. Nothing here expires on a timer, so we publish no period for it. Removing them leaves the record that a request was made, about which listing, and how it ended.
• Usage measurement — the anonymous counts described in section 2 are deleted by our analytics provider after six months at most. We keep no copy of them.

If a listing about your company should not be here, tell us through the contact form.

A person reads every message. Where we take a listing down it stops appearing in the directory and in search. Nothing is erased: the record that the listing existed, and of who submitted it, is kept.

8. Your rights

Under the Digital Personal Data Protection Act, 2023 you may ask us to give you a summary of the personal data we hold about you and how we process it; correct or complete inaccurate data; erase data we no longer need; and nominate someone to exercise these rights if you die or become incapacitated.

Write to privacy@datbots.com. We acknowledge within 72 hours and respond within 30 days.

Some records cannot be erased on request, because they are the audit trail that lets a published company record be traced to its source. Where that applies we will tell you which records and why.

9. Withdrawing consent

You may withdraw consent at any time. Tell us, and we take the listing down: it stops appearing in the directory and in search. Records of what was published, and of who published it, are retained as described above.

10. Cookies

See the Cookies page.

11. Security

Access to personal data is restricted and logged. Sign-in is handled by an identity provider; we do not hold passwords. No system is perfectly secure, and we do not claim otherwise.

12. Children

The Service is for business use. It is not intended for anyone under 18.

13. Changes

We will publish any updated policy with a new effective date and tell registered users where the change is significant.

14. Contact

privacy@datbots.com, or write to us at the address above.