Privacy Policy
Who we are
India Business International, a proprietorship of Dr T Sasimurugan ME.PhD., is the data fiduciary for IBI Product Listings Master. Contact details are at the end of this page.
What we collect, and why
- Account data — email address, a name or business name you choose, a salted password hash (we never store the password), plan and payment status. Purpose: to sign you in, sync your workspace and bill you.
- Workspace data — the product records, generated listings, performance rows, custom channels and settings you create. In local mode this stays in your browser (IndexedDB) and never reaches us. When you sign in and sync, a copy is stored in our cloud so you can use it on other devices.
- Usage counters — how many AI enhancements you used this month, and rate-limit counters keyed by IP address for abuse prevention (kept for minutes to an hour).
- Payment data — Razorpay processes card, UPI and netbanking details; we receive only the order id, payment id, amount and status. For manual UPI payments we receive the UPI reference you send us.
- Support messages — what you send us on WhatsApp or email.
We do not run advertising trackers or third-party analytics on the Service.
AI processing
When you press an AI button, the product facts and the current draft for that listing are sent to an AI model provider (Anthropic, Google or DeepSeek, depending on the deployment) to write text. The provider receives product information only, not your account details. If you use your own API key, the request goes from your browser to the provider directly and we never see it. Do not enter personal data about other people in product facts.
Live search suggestions
The keyword tool sends the seed phrase you type (for example a product type) to Google and Amazon.in autocomplete through our server, which caches the result for 24 hours. No account information is sent with it.
Where data lives
Cloud data is stored in Cloudflare Workers KV, an edge key-value store replicated globally with India points of presence, and in Razorpay's systems for payments. Local data lives only on your device.
How long we keep it
Account and workspace data: until you delete the account (in-app), after which the cloud copy is removed within 30 days. Payment records: 8 years, as required for tax. Rate-limit counters: up to one hour. Suggestion cache: 24 hours.
Your rights
You can export everything (Account → Download backup), correct it in the app, delete your account yourself, or write to us to access, correct or erase your data, withdraw consent, or nominate someone to act for you. We respond within 30 days. Complaints may be escalated to the Data Protection Board of India.
Security
Passwords are hashed with PBKDF2-SHA-256 (100,000 iterations, per-user salt). Sessions use signed, HttpOnly, Secure cookies. Sign-in attempts are rate-limited. API keys you paste for AI stay in your browser's local storage and are excluded from backups and sync.
Children
The Service is for businesses and is not directed at children under 18.
Changes
We will post changes here with a new effective date and announce material changes in the app.