Privacy
Privacy
What we collect, why, and how long we keep it.
Buyers without an account
Browsing needs no account. NEXT_LOCALE remembers the site language. An anonymous visitor-count cookie helps estimate daily and total browser visits, as explained below. We do not use advertising trackers.
Buyers with an account
An account unlocks checked seller details, a private shortlist and private enquiries. We store your email, name, a one-way password hash, and the phone number and district if you choose to give them. Google sign-in stores Google's durable account identifier and the verified email seen when you link it, but no Google token or profile photo. An enquiry sends your name and message to the selected seller; your email becomes Reply-To only when you explicitly choose that option after verification. We store the enquiry for delivery and staff follow-up. Signing in sets an HTTP-only session cookie, which is revoked when you sign out.
Farmers and organic stores who apply
We collect the farm or store name, contact name, phone, email, district, description and verification evidence to review and publish the directory entry. Farms provide their produce type and item and the last four Aadhaar digits; organic certificate details are optional. Stores provide FSSAI and optional organic certificate details. We never ask for the full Aadhaar number. Contact email and government-ID digits stay private. Public name, district, description and address where relevant are shown; phone numbers are shown only after consent and launch approval. Invited sellers receive a private portal session so they can manage permitted public details and read enquiries; legal identity and verification evidence remain staff-controlled.
How long we keep it
Applications and contact messages are kept while review or support work requires them; you can ask us to correct or delete them. A seller listing is removed on a verified request. Deleting a buyer account removes its profile, sign-in identities, shortlist, enquiries and subscription record. If payments are enabled, limited provider event IDs, amounts, currency and processing results may remain without the customer relation for fraud, accounting and webhook audit; no card details are stored.
Your rights
You can delete your account from its security page after password or linked-Google confirmation. Deletion is permanent. If a recurring payment exists, OSSIL first stops future charges; the account is kept and an error is shown if that cannot be confirmed.
Sponsored placement measurement
Sponsored cards are labelled. We count only daily totals for card views and clicks. We do not store a visitor ID, customer ID, IP address or user-agent with those totals, and no third-party advertising script is used. Short-lived rate limits reduce artificial traffic and are not retained as advertising profiles.
Finding what is near you
If you ask the farmers or stores page to find what is near you, your browser asks for your position and compares it against a published list of district centres. That comparison happens on your device. Your coordinates are never sent to OSSIL, never written to our database and never stored in your browser. The only thing that leaves your device is the name of the nearest district, which appears in the page address exactly as it does when you pick a district by hand. You can refuse the request and use the district filter instead; nothing else on the site changes.
Visitor counts
We use a random browser cookie, renewed for one year, to estimate visitor counts. We retain its hash and last India calendar visit date for deduplication, plus daily and total aggregates. These records are not linked to an account and contain no IP address. Clearing the cookie or using another browser may count you again. We respect Do Not Track and Global Privacy Control; counts start when this feature launches, not from the site's creation.
To ask for a copy of what we hold, or to have something corrected, write to us: ossilindia@gmail.com