Back to home

Privacy Policy

How we collect, use, and safeguard your information.

Last updated: 26 May 2026

1. Who we are

Nirman Gyan OS (referred to as “Nirman Gyan OS”, “we”, “our”, “us”) is an MSME-registered sole proprietorship with its registered office at Siddharth Nagar, Uttar Pradesh, India. We operate a construction material procurement marketplace at this domain and its sub-pages.

2. What we collect

  • Account data: full name, phone number, hashed password and an optional email address.
  • Project data: BOQ inputs, project city, addresses, and optional location pins (latitude/longitude).
  • Supplier data: GSTIN, business address, inventory and optional bank/UPI details for future payouts.
  • Payment data: Razorpay order/payment identifiers and amounts. We never see or store your card or UPI PIN — Razorpay handles that under PCI-DSS.
  • Device & usage: IP address, browser type, anonymised analytics events.

3. Why we collect it

To authenticate accounts, match RFQs with suppliers, process payments, fulfil legal/tax obligations, support customers, detect fraud and improve the product. We do not sell your personal data to third parties.

4. Who we share data with

  • Razorpay — for processing payments (PCI-DSS compliant).
  • OpenStreetMap / mapping providers — for address geocoding.
  • Selected supplier(s) — your name and project address are shared with a supplier only after you lock them as the winner of a material packet.
  • Law-enforcement authorities — on receipt of a valid legal request.

5. Data retention

Active account data is retained until you request deletion. After a deletion request we anonymise or remove your data within 30 days. Financial and payment records are retained for 7 years to satisfy Indian tax law.

6. Your rights

You may access, correct, export or delete your data, and withdraw consent at any time. Email support@nirmangyanos.com to exercise these rights. We respond within 7 working days.

7. Security

Passwords are hashed with bcrypt. All payment signatures use HMAC-SHA256 verification before any state change. APIs are role-gated. Data is encrypted at rest by our managed database provider. Transport is via HTTPS (TLS 1.2+).

8. Children

Nirman Gyan OS is not directed to users under 18. If you are under 18, please do not use the service.

9. Cookies

We use only session and theme cookies necessary to keep you logged in and remember your preferences. We do not use third-party advertising trackers.

10. Updates

We may update this policy from time to time. The “Last Updated” date above will change accordingly and material changes will be highlighted in-app.

11. Grievance Officer (per IT Rules, 2021)

Email: compliance@nirmangyanos.com
We acknowledge grievances within 48 hours and resolve them within 15 calendar days.

Made with Emergent