Privacy Policy

Draft — pending legal review. This page is a template and has not yet been reviewed by a lawyer.

Last updated: 2026-09-28

PassBazaar ("we", "us") operates an independent event discovery and peer-to-peer pass marketplace. This policy explains what personal data we process, why, and the choices you have.

1. Data we collect

• Account data: mobile number (required for OTP sign-in), display name, email address (optional), city, and profile photo (optional).
• Listing data: event, pass type, quantity, prices, reason for selling, transfer method, and ticket proof images you upload for moderation. Proof images are stored privately and are visible only to you and our moderation team.
• Enquiries and contact interactions: when you contact a seller or a buyer contacts you, we log the listing, the time and the channel (for example WhatsApp or phone). We do not read your WhatsApp or phone conversations.
• Buyer requests: the event, quantity, budget and pass preferences you submit.
• Payment data for listing fees: our payment partner processes your card, UPI or netbanking details. We receive only transaction references, the amount and the status. We never store full card numbers or UPI PINs.
• Device and usage data: IP address, device and browser type, pages viewed, approximate location derived from IP, and cookie identifiers.
• Location: precise location only if you allow it in your browser, and only to suggest your city.

2. How we use data

To create and secure your account, show events relevant to your city, publish and moderate listings, connect buyers and sellers, process listing fees, send service notifications, prevent fraud and abuse, comply with law, and improve the product.

3. What other users see

Sellers are shown by display name, city, verification badges and listing details. Your phone number is never shown publicly. It is shown only to signed-in users, and only if you enabled that in your contact settings. Your email is never shown unless you enable email contact.

4. Cookies and analytics

We use essential cookies (session, city preference) and, where configured, analytics tools such as Google Analytics, Google Tag Manager and Microsoft Clarity. We do not send your phone number or email to analytics providers. See our Cookie Policy.

5. Sharing

We share data with service providers acting on our behalf (hosting, SMS/OTP, email, payment gateway and analytics), with the counter-party of a contact you initiate (as described above), and with authorities when legally required. We do not sell personal data.

6. Retention

Account data is kept while your account is active. Listings, contact logs and payment records are retained for as long as required for fraud prevention, dispute handling and legal and tax obligations, and are then deleted or anonymised. OTP records expire within minutes and are purged regularly.

7. Security

Encrypted transport (HTTPS), hashed OTPs and session tokens, access-controlled private file storage, role-based admin access and audit logs. No system is perfectly secure. Please protect your device and never share OTPs.

8. Your rights

Subject to applicable law, you may access, correct or delete your data, withdraw consent, and nominate a person to exercise your rights. Contact us using the details below. You can delete your account from your profile. Some records may be retained where the law requires it.

9. Children

PassBazaar is not intended for users under 18. We do not knowingly collect data from children.

10. Legal requests

We may disclose information in response to valid legal process or to protect users against fraud or harm.

11. Changes

We will post updates here and, for material changes, notify you in the app.

12. Contact / Grievance Officer

Email: privacy@passbazaar.example · Grievance Officer: [name and address to be added before launch]