Privacy Policy

Last updated 22 July 2026

[REGISTERED ENTITY NAME]operates SalesGro. This policy explains what personal data we handle, why, and what rights you have under the Digital Personal Data Protection Act, 2023 (“DPDP Act”).

It covers two different groups: Candidates, whose contact details are listed on the marketplace, and Buyers, who hold accounts and purchase leads.

1. Data we collect

Candidates

• Name, telephone number, WhatsApp number, email address and postal address.
• Programme interest, qualification, and for education leads: college name, department and year of passing.
• Consent record — the source that captured the consent, the version of the consent text, and the timestamp.

Buyers

• Account details: name, business name, email, telephone, state and GSTIN where supplied.
• Transaction records: payments, invoices, wallet and coin movements.
• Security and audit logs: sign-in events, and a record of every lead whose details you accessed.

Payments are processed by our payment gateway. We do not store card numbers, UPI credentials or bank details on our systems.

2. Lawful basis and consent

Candidate data is collected on the basis of consent given at the point of enquiry — a campaign lead form, a landing page, a seminar signup or a similar channel — where the Candidate agreed to be contacted by program providers about the programs they enquired about. We retain the source, version and timestamp of that consent against every record.

Buyer data is processed to perform our contract with you and to meet legal obligations such as GST invoicing and record keeping.

3. How we use it

• To list leads on the marketplace in masked form, and to disclose the full details to a Buyer who purchases that lead.
• To operate accounts, memberships, wallets, invoicing and refunds.
• To detect fraud and misuse, and to investigate complaints about how a Buyer contacted a Candidate.
• To meet tax, accounting and legal obligations.

We do not sell Buyer account data, and we do not use Candidate data for our own marketing beyond the purpose it was collected for.

4. Who we share it with

• Buyers— a Candidate's full contact details are disclosed to a Buyer only when that Buyer purchases the lead. Leads are non-exclusive, so the same Candidate may be disclosed to more than one Buyer, subject to any per-lead buyer limit.
• Processors — our hosting, database and payment providers, under contract and only to run the service.
• Authorities — where required by law or to establish or defend a legal claim.

5. Security

Candidate contact details are stored encrypted at rest and are separated from the public listing data, which shows only masked values. Access is controlled by row-level security in the database, administrator accounts require two-factor authentication, and every disclosure of a Candidate's details is written to an access log.

No system is perfectly secure. If a breach affects your personal data we will notify you and the Data Protection Board as the DPDP Act requires.

6. Retention

Candidate records are retained while they remain commercially relevant and are then deleted or anonymised. Buyer transaction records, invoices and audit logs are retained for the period required by Indian tax and company law, currently eight years, and access logs are retained to support DPDP accountability.

7. Your rights

Under the DPDP Act you may:

• Ask what personal data of yours we hold and how it has been shared.
• Ask us to correct or complete inaccurate data.
• Ask us to erase your data where we no longer need it for the purpose it was collected.
• Withdraw consent at any time. Withdrawal stops future listing of your details; it does not undo disclosures already made to Buyers, though we will inform Buyers who received your details where practicable.
• Nominate someone to exercise these rights.
• Raise a grievance, and escalate it to the Board.

Candidates: if you are receiving calls you did not ask for, write to us at the address below with the number that was contacted and we will remove you and investigate the Buyer.

8. Buyers as independent data fiduciaries

Once a Buyer purchases a lead, that Buyer becomes an independent data fiduciary for the data they receive and is responsible for their own compliance. Our Terms & Conditions require Buyers to honour opt-outs, restrict contact to the Candidate's stated interest, and never resell the data.

9. Cookies

We use strictly necessary cookies to keep you signed in and to secure the session. We do not use advertising or cross-site tracking cookies.

10. Grievance officer

[GRIEVANCE OFFICER NAME]
[REGISTERED ENTITY NAME]
[REGISTERED OFFICE ADDRESS]
support@salesgro.cc

We aim to acknowledge grievances within 48 hours and resolve them within 30 days.