Privacy policy

Last updated: 29 October 2026

This policy explains what personal data LOCALA (locala.in) collects and how we use it. We follow India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.

What we collect

• When you sign in: your name, email address and profile photo from Google or Facebook, whichever you use.
• When you post: your listing's text, photos, price, place, and the phone number you give for WhatsApp and calls.
• When you add a business: your business's name, address, phone number, photos, products and opening hours, and the email you give for orders.
• When you order from a business: what you ordered, your name, the phone number you give, your delivery address and any note for the business.
• When you send a CV for a job: the name and phone number you give, your note, and your CV file.
• When you contact us: the name, email address and phone number you give in the Contact us form, what it is about and your message.
• When you chat: your messages, and your location only when you tap "Share my location".
• When you use the site: listings you save or report, and counts of views, shares, WhatsApp taps and calls on listings.
• On your device: your language choice and sign-in session are kept in your browser's storage. We don't use advertising or tracking cookies.

How we use it

• To run the marketplace: show listings, let buyers contact sellers, and send alerts such as "your listing expires soon", "new message" or "new listing in a category you follow".
• To send phone notifications, but only after you turn them on. We keep an address your browser gives us for this, and delete it when you turn notifications off or log out.
• To keep it safe: review reports, remove bad listings and stop abuse. Every new listing photo is checked automatically for nudity and offensive symbols, and words in listings are checked against a list of offensive words.
• To comply with the law when a court or authority lawfully asks.

We do not sell your data and we do not show ads based on it.

Who can see what

• Anyone can see live listings: title, photos, price, place and the seller's display name.
• Your phone number is never shown on the page. Only signed-in users who tap WhatsApp or Call on your listing get it, one listing at a time.
• Approved businesses are public: name, address, phone number, opening hours, products and prices.
• An order can be seen only by the customer who placed it and the business it was placed with. The business sees your name, phone number, delivery address and note, so it can prepare and deliver the order.
• A CV you send for a job, with your name, phone number and note, can be seen only by you, the person who posted the job and LOCALA admins. It is kept in private storage and is never public.
• Chats can be read only by the buyer and seller in them.
• LOCALA admins can see reports and account details to handle complaints.

Where it is stored

Data is stored with Supabase on servers in Mumbai, India. The website is hosted by Hostinger. Google and Facebook handle sign-in under their own privacy policies. Listing photos are sent to Sightengine for the automatic safety check. Phone notifications pass through your browser's own push service (for example Google for Chrome or Apple for Safari). Order messages are sent on WhatsApp through Meta's WhatsApp Business service (only if you tick the box at checkout, or for businesses, in Business details), and order emails are sent through Brevo. Messages from the Contact us form are emailed through Brevo to our support inbox at Zoho Desk, where our team answers them. They receive the phone number or email address, the order number and the order details in the message.

How long we keep it

Listings expire after 60 days (jobs after 30) and can be renewed. A listing that isn't renewed is deleted, with its photos, 30 days after it expires. CVs sent for a job are deleted 60 days after the job closes, or straight away if you withdraw them. Messages sent with the Contact us form are deleted from LOCALA after 12 months. Your account and its data stay until you ask us to delete them. After you ask, we delete your account, listings, photos and chats within 30 days, except records the law requires us to keep.

Your rights

You can see and change your listings any time, and ask us to correct or delete your data. See how to delete your account. You can withdraw consent by deleting your account.

Children

LOCALA is for people aged 18 and over. We don't knowingly collect data from children.

Contact

For any privacy question or complaint, contact our Grievance Officer:

Grievance Officer
Email: info@locala.in