Privacy Policy

1. Introduction

1Buy Technologies Private Limited ("1BUY.AI", "we", "us", or "our"), a company incorporated under the laws of India with its registered office in India, operates the website www.1buy.ai and related services (collectively, the "Services").

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our Services. We are committed to protecting your privacy and ensuring compliance with applicable data protection laws, including but not limited to:

• Information Technology Act, 2000 and IT Rules, 2011 (India)
• Digital Personal Data Protection Act, 2023 (India)
• General Data Protection Regulation (GDPR) for EU residents
• California Consumer Privacy Act (CCPA) for California residents

2. Information We Collect

2.1 Information You Provide

We collect information you voluntarily provide, including:

• Account Information: Name, email address, company name, job title, phone number when you register or request a demo
• Business Information: Bill of Materials (BOM) data, component requirements, procurement specifications
• Communication Data: Messages, feedback, and correspondence with our team
• Career Applications: Resume, cover letter, professional history when applying for positions

2.2 Automatically Collected Information

When you access our Services, we automatically collect:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, time spent, click patterns, search queries
• Cookies and Tracking: Session cookies, analytics cookies, preference cookies
• Location Data: General geographic location based on IP address

3. How We Use Your Information

We use collected information for the following purposes:

• Service Delivery: To provide, maintain, and improve our procurement intelligence platform
• Communication: To respond to inquiries, send service updates, and provide customer support
• Analytics: To understand usage patterns and improve user experience
• Marketing: To send relevant product information and industry insights (with your consent)
• Legal Compliance: To comply with legal obligations and protect our rights
• Security: To detect, prevent, and address technical issues or fraudulent activity

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area, we process personal data based on:

• Consent: Where you have given explicit consent for specific purposes
• Contract: Where processing is necessary to fulfill our contractual obligations
• Legitimate Interests: For business purposes that do not override your rights
• Legal Obligation: Where required by applicable law

5. Data Sharing and Disclosure

We may share your information with:

• Service Providers: Third-party vendors who assist in providing our Services (hosting, analytics, payment processing)
• Business Partners: Trusted partners for joint offerings, with your consent
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In connection with merger, acquisition, or sale of assets

We do not sell your personal information to third parties.

6. International Data Transfers

As a global service provider based in India, your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Data processing agreements with all service providers
• Compliance with applicable cross-border data transfer regulations

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Retention periods vary based on:

• Active accounts: Duration of business relationship plus 3 years
• Marketing data: Until consent is withdrawn
• Analytics data: 26 months
• Legal records: As required by applicable law (typically 7-10 years)

8. Your Rights

8.1 All Users

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (subject to legal requirements)
• Opt-out: Unsubscribe from marketing communications

8.2 EU/EEA Residents (GDPR)

• Right to data portability
• Right to restrict processing
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

8.3 California Residents (CCPA)

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to say no to the sale of personal information
• Right to non-discrimination for exercising privacy rights

9. Data Security

We implement industry-standard security measures to protect your information, including:

• SSL/TLS encryption for data in transit
• Encryption at rest for sensitive data
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms
• Employee training on data protection

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

10. Cookies and Tracking Technologies

We use cookies and similar technologies for:

• Essential Cookies: Required for website functionality
• Analytics Cookies: To understand how visitors interact with our site
• Preference Cookies: To remember your settings and preferences

You can control cookies through your browser settings. Disabling certain cookies may affect website functionality.

11. Children's Privacy

Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. We encourage you to review this policy periodically.