Privacy Policy

This Privacy Policy is published by Mauli G-Mart Private Limited (“Mauli G-Mart”, “we”, “us” or “our”), a company incorporated in India under CIN U52200MH2022PTC396158, with its registered office at 506, Akruti Arcade, Shri Ramwadi, J.P. Road, Nr Dhake Colony, Andheri (West), Mumbai – 400053, Maharashtra, India.

It is published in accordance with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the Digital Personal Data Protection Act, 2023 (“DPDP Act”), as applicable and as brought into force.

1. Scope

This policy applies to your use of:

• the Mauli Mart customer app, used by retail buyers to source produce in bulk;
• the Mauli Mart vendor app, used by wholesale suppliers to publish rates and fulfil orders;
• the Mauli Mart transporter app, used by delivery partners to accept trips and complete handover;
• the Mauli G-Mart admin and management platform, used by our internal operations team; and
• this website and any related communication we send you by SMS, email, push notification or WhatsApp.

Together these are referred to as the “Platform”. By registering for or using the Platform, you acknowledge that you have read and understood this policy.

2. Data we collect

2.1 Information you give us at registration

Registration on the Platform is a vetted process. Depending on whether you register as a customer, vendor or transporter, we collect:

Documents you upload are reviewed by our operations team as part of KYC verification. Registrations are not activated automatically; each one is approved or rejected by a person.

2.2 Information generated by your use of the Platform

• Transaction data — orders placed, items and quantities, prices, vendor assigned, order type (Regular or Emergency), delivery slot chosen, order status history, invoices, payments made, credit limit, outstanding balance and overdue amounts.
• Catalogue and pricing data — for vendors, the rates and bulk slabs you publish and your inventory list.
• Delivery and handover data — trip assignment, delivery timestamps, the name and mobile number of the person who received the order (owner or nominated representative), and confirmation that the one-time password was validated.
• Support data — complaints you raise, quality reports, and correspondence with our support team.

2.3 Technical and device information

• Device model, operating system and version, app version, device identifiers, language and time zone.
• IP address, log data, crash reports and diagnostic information.
• Approximate or precise location, where you grant permission — used for delivery routing and serviceability checks (see section 6).

2.4 Data we do not intentionally collect

We do not ask for your Aadhaar number, biometric data, passwords to third-party services, or health data. Please do not upload documents containing such information unless we have specifically requested them for a lawful purpose.

3. How we use your data

• To verify you. Confirming your identity, business standing, bank account and, for transporters, vehicle and licence, so that both sides of a bulk transaction know who they are dealing with.
• To operate the marketplace. Displaying vendor catalogues and rates to buyers, routing orders to the correct vendor, assigning transporters, and updating order status.
• To complete delivery. Sharing the buyer's name, delivery address, mobile number and slot with the assigned vendor and transporter, and sending a one-time password to the nominated receiver to confirm handover.
• To bill and settle. Raising tax-compliant invoices, calculating vendor commission and payouts, and maintaining the credit ledger.
• To assess and manage credit. Setting, reviewing, reducing or withdrawing credit limits (see section 7).
• To support you. Investigating complaints about quality, shortage or delivery, and resolving them with the counterparty.
• To improve the Platform. Understanding which features are used, diagnosing crashes and improving performance, using aggregated or de-identified data wherever possible.
• To communicate. Sending transactional messages — order confirmations, delivery OTPs, dispatch updates, invoice and payment reminders, and service notices. Transactional messages are integral to the service and cannot be opted out of while your account is active.
• To comply with law. Meeting tax, accounting, anti-fraud, and regulatory obligations, and responding to lawful requests.

We do not sell your personal data. We do not share your contact details with third parties for their own marketing.

4. Legal basis and consent

We process personal data on the basis of the consent you give when you register and when you grant app permissions, and, where applicable, for the legitimate uses recognised under the DPDP Act — including performing the contract you have entered into with us, complying with legal obligations, and preventing fraud.

You may withdraw consent at any time by writing to contact@mauligmail.com. Withdrawing consent does not affect processing already carried out, and may mean we can no longer provide the Platform to you — for example, we cannot deliver an order without sharing a delivery address with a transporter.

5. Sharing and disclosure

We share personal data only as set out below.

• With the counterparty to your transaction. When an order is placed, the vendor sees the buyer's business name, order manifest and delivery details necessary to fulfil it. The buyer sees the vendor's name. Bank details are never shared between users.
• With the assigned transporter. Name, delivery address, mobile number, delivery window and order manifest — limited to what is needed to deliver and validate handover.
• With service providers. Cloud hosting, SMS and notification gateways, payment gateways, KYC verification services, analytics and crash reporting, and customer support tooling. These providers act on our instructions under contract and may not use your data for their own purposes.
• With financial and professional advisers. Auditors, accountants and legal advisers under confidentiality obligations.
• With authorities. Where required by law, court order, or a lawful request from a government agency, or where necessary to establish, exercise or defend a legal claim.
• On a business transfer. If our business is merged, acquired or reorganised, data may transfer to the successor entity, which will remain bound by this policy or a policy no less protective.

6. App permissions

Every permission can be declined or revoked in your device settings. Some features will not work without them.

7. Credit assessment data

Where a customer applies for or holds the credit (overdraft) facility, we additionally process business and financial information, order and repayment history, and outstanding and overdue balances, in order to set and periodically review a credit limit.

Credit limits are determined by Mauli G-Mart at its discretion and may be increased, reduced, suspended or withdrawn based on this assessment. Where we work with a lending partner or credit information company, we will obtain your specific consent before sharing information with them.

8. Data retention

• Account and KYC records — for as long as your account is active, and thereafter for the period required under applicable law.
• Transaction, invoice and tax records — retained for at least eight financial years, as required under Indian tax and company law.
• Delivery and handover records — retained for the period necessary to resolve disputes and meet legal obligations.
• Technical logs — typically retained for up to 180 days.

When data is no longer needed, it is deleted or irreversibly anonymised.

9. Security

We follow reasonable security practices and procedures as required under the IT Act and rules made under it. These include encryption of data in transit, access controls limiting internal access to those who need it, OTP-based authentication for account access and delivery confirmation, audit logging of administrative actions, and regular review of our providers.

No system is perfectly secure. Keep your registered mobile number secure, never share a one-time password with anyone including someone claiming to be from Mauli G-Mart, and tell us immediately at contact@mauligmail.com if you suspect unauthorised access. In the event of a personal data breach we will notify the affected users and the relevant authority as required by law.

10. Your rights

Subject to applicable law, you may:

• Access a summary of the personal data we hold about you and how we process it;
• Correct data that is inaccurate, or complete data that is incomplete;
• Erase personal data that is no longer needed for the purpose it was collected — subject to records we must retain by law;
• Withdraw consent for processing based on consent;
• Nominate another individual to exercise your rights in the event of your death or incapacity; and
• Complain to our Grievance Officer, and thereafter to the Data Protection Board of India.

To exercise any of these, write to contact@mauligmail.com from your registered email address or call +91 98333 55302. We will respond within the timelines prescribed by law, and in any case will acknowledge your request within 72 hours.

Account deletion. You may request deletion of your account at any time. Outstanding dues must be settled first, and orders in progress must be completed or cancelled. After deletion we retain only the transaction and tax records we are legally required to keep.

11. Children

The Platform is a business-to-business service intended only for persons aged 18 or over who are authorised to act for a registered business. We do not knowingly collect personal data of children. If you believe a child has provided us data, contact us and we will delete it.

12. International transfers

Your data is primarily stored and processed in India. Some service providers may process data outside India. Where that happens, we ensure the transfer complies with applicable Indian law and that the recipient is bound by contractual obligations to protect it to a comparable standard.

13. Cookies and analytics

This website uses only the cookies necessary for it to function correctly. If we introduce analytics or advertising cookies in future, we will present a consent banner and update this section before setting them. Our apps use device-level analytics and crash-reporting tools to understand feature usage and diagnose faults.

14. Changes to this policy

We may update this policy as the Platform, our providers or the law change. The “Last updated” date at the top will always reflect the current version. For material changes we will give notice in the app or by email before they take effect. Continued use of the Platform after that date constitutes acceptance.

15. Grievance Officer

In accordance with the Information Technology Act, 2000 and the rules made under it, and the DPDP Act, the contact details of our Grievance Officer are:

Grievances are acknowledged within 24 hours and resolved within 15 days of receipt.

This policy was last updated on 28 July 2026. It should be read together with our Terms & Conditions.