Privacy Policy

1. Introduction

Orsale (“we,” “our,” or “us”) is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, and store your information when you use our application and related services (the “Services”). By using our Services, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Personal Information— When you register and use our Services, we collect personal information including your name, email address, phone number, and WhatsApp number. We also collect your profile photograph, city, state, PIN code, and postal address. Additionally, we store your company or organisation name and business details, along with your encrypted passwords and authentication credentials to secure your account.

2.2 Business Data— To provide our order management functionality, we collect and store business-related information: order information and transaction records, customer contact details, product descriptions, categories, and specifications, order status updates and activity history, payment and subscription information, and any custom business fields and metadata you create within the application.

2.3 Files and Images— We store photographs and images you upload, including edited images and design files, plus file metadata (timestamps, file types, sizes).

2.4 Device Permissions— Our mobile app may request access to contacts (to facilitate invitations/customer entry) and camera/photo gallery (to upload images for orders), with your consent. You may revoke these anytime via device settings.

3. How We Use Your Information

To provide/maintain app functionality, authenticate users, secure accounts, process and manage orders, store your business data, enable communication/notifications, process payments and subscriptions, enforce role-based access control, provide customer support, comply with legal obligations, and prevent fraud/unauthorised access. Your data belongs to you and is stored exclusively for your use and benefit.

4. Data Storage and Security

4.1 Data is stored securely in our databases and file storage systems, solely for your use.

4.2 All transmissions are encrypted via HTTPS/WSS. Passwords are hashed with salts (never stored in plain text). JWT-based auth with secure token management. Role-based access controls. Rate limiting against brute force. Uploaded files are validated/scanned. Regular DB backups. Multi-tenant architecture with strict data isolation between organisations.

4.3 Data Retention— Active data is retained while your account is active. Temporary files auto-delete after processing. Account deletion removes your data per applicable law.

5. Data Sharing and Disclosure

We do not sell, rent, trade, or share personal data with third parties.

5.1 Within Your Organisation— shared only with authorised members per roles/permissions you configure.

5.2 Legal Requirements— disclosed only when legally required, or to protect rights/safety/prevent fraud.

5.3 Business Transfers— in a merger/acquisition/asset sale, info may transfer to the acquiring entity, bound by this policy.

5.4 With Your Consent— shared for other purposes only with explicit consent.

6. Your Rights

Access/download your data anytime, update/correct it, request account/data deletion, retain full ownership, withdraw consent or revoke device permissions, manage notification preferences. Contact via Section 10 to exercise these rights.

7. What We Do NOT Collect

No IP addresses, no device/OS info, no location tracking, no activity logs/usage analytics, no third-party tracking/analytics, no advertising cookies or tracking pixels. Only the minimum necessary is collected.

8. Cookies and Tracking Technologies

Authentication tokens for secure sessions; local storage for performance caching. No cookies for tracking, advertising, or analytics.

9. Children’s Privacy

Services are not intended for persons under 18. We do not knowingly collect data from children; contact us to have any such data removed.

10. Contact Us

Email: info@rankbit.tech
Phone: +91 96014 00603

11. Changes to This Privacy Policy

Updates will be notified via in-app and email notifications, with the “Last Updated” date refreshed. Continued use after changes constitutes acceptance.

12. Jurisdiction-Specific Rights

12.1 India— Compliant with the IT Act 2000 and IT (Reasonable Security Practices…) Rules 2011.

12.2 EU— GDPR rights: complaint to a supervisory authority, data portability, object to automated decision-making. Legal bases: contract performance, consent, legal compliance.

12.3 UK— UK GDPR rights; complaints to the ICO.

12.4 California— CCPA/CPRA rights: know what’s collected, delete personal info, no sale of personal info, non-discrimination for exercising rights.

13. Data Breach Notification

Immediate investigation and system securing on breach. Affected users notified within 72 hours or as required by law, with breach details and protective measures. Reported to relevant authorities as required.

14. Your Data, Your Control

Full transparency and control — no hidden tracking, no selling data, data stays within your authorised team, deletable anytime.

15. Consent

By using Orsale, you acknowledge you’ve read, understood, and agree to this Privacy Policy.